Vulnerabilidades en N/A
161.286 resultadosCVE-2019-14479—AdRem NetCrunch 10.6.0.4587 allows Remote Code Execution. In the NetCrunch web client, a read-only administrator can execute arbitrary code EPSS 4.2%CVE-2023-43373CRITICALHoteldruid v3.0.5 was discovered to contain a SQL injection vulnerability via the n_utente_agg parameter at /hoteldruid/interconnessioni.phpEPSS 4.2%CVE-2008-2478—scripts/wwwacct in cPanel 11.18.6 STABLE and earlier and 11.23.1 CURRENT and earlier allows remote authenticated users with reseller privileEPSS 4.2%CVE-2022-29272—In Nagios XI through 5.8.5, an open redirect vulnerability exists in the login function that could lead to spoofing.EPSS 4.2%CVE-2018-8741—A directory traversal flaw in SquirrelMail 1.4.22 allows an authenticated attacker to exfiltrate (or potentially delete) files from the hostEPSS 4.2%CVE-2021-29998—An issue was discovered in Wind River VxWorks before 6.5. There is a possible heap overflow in dhcp client.EPSS 4.2%CVE-2019-6260—The ASPEED ast2400 and ast2500 Baseband Management Controller (BMC) hardware and firmware implement Advanced High-performance Bus (AHB) bridEPSS 4.2%CVE-2015-4073—Multiple SQL injection vulnerabilities in the Helpdesk Pro plugin before 1.4.0 for Joomla! allow remote attackers to execute arbitrary SQL cEPSS 4.2%CVE-2018-11522—Yosoro 1.0.4 has stored XSS.EPSS 4.2%CVE-2005-0239—viewcert.php in the S/MIME plugin 0.4 and 0.5 for Squirrelmail allows remote attackers to execute arbitrary commands via shell metacharacterEPSS 4.2%CVE-2011-1412—sys/sys_unix.c in the ioQuake3 engine on Unix and Linux, as used in World of Padman 1.5.x before 1.5.1.1 and OpenArena 0.8.x-15 and 0.8.x-16EPSS 4.2%CVE-2019-17232—Functions/EWD_UFAQ_Import.php in the ultimate-faqs plugin through 1.8.24 for WordPress allows unauthenticated options import.EPSS 4.2%CVE-2007-1017—PHP remote file inclusion vulnerability in show_news_inc.php in VirtualSystem VS-News-System 1.2.1 and earlier allows remote attackers to exEPSS 4.2%CVE-2003-1478—Konqueror in KDE 3.0.3 allows remote attackers to cause a denial of service (core dump) via a web page that begins with a "xFFxFE" byte sequEPSS 4.2%CVE-2005-2501—Buffer overflow in AppKit for Mac OS X 10.3.9 and 10.4.2 allows external user-assisted attackers to execute arbitrary code via a crafted RicEPSS 4.2%CVE-2008-0238—Multiple heap-based buffer overflows in the rmff_dump_cont function in input/libreal/rmff.c in xine-lib 1.1.9 allow remote attackers to execEPSS 4.2%CVE-2009-3271—Apple Safari on iPhone OS 3.0.1 allows remote attackers to cause a denial of service (application crash) via a long tel: URL in the SRC attrEPSS 4.2%CVE-2017-8020—An issue was discovered in EMC ScaleIO 2.0.1.x. A buffer overflow vulnerability in the SDBG service may potentially allow a remote unauthentEPSS 4.2%CVE-2010-1634—Multiple integer overflows in audioop.c in the audioop module in Python 2.6, 2.7, 3.1, and 3.2 allow context-dependent attackers to cause a EPSS 4.2%CVE-2018-5439—A Command Injection issue was discovered in Nortek Linear eMerge E3 series Versions V0.32-07e and prior. A remote attacker may be able to exEPSS 4.2%