Vulnerabilidades en N/A

161.398 resultados
CVE-2019-14788—wp-admin/admin-ajax.php?action=newsletters_exportmultiple in the Tribulant Newsletters plugin before 4.6.19 for WordPress allows directory tEPSS 3.7%CVE-2004-1927—Directory traversal vulnerability in the map feature (tiki-map.phtml) in Tiki CMS/Groupware (TikiWiki) 1.8.1 and earlier allows remote attacEPSS 3.7%CVE-2020-14414—NeDi 1.9C is vulnerable to Remote Command Execution. pwsec.php improperly escapes shell metacharacters from a POST request. An attacker can EPSS 3.7%CVE-2007-3300—Multiple F-Secure anti-virus products for Microsoft Windows and Linux before 20070619 allow remote attackers to bypass scanning via a crafteEPSS 3.7%CVE-2004-0072—Directory traversal vulnerability in Accipiter Direct Server 6.0 allows remote attackers to read arbitrary files via encoded \.. (backslash EPSS 3.7%CVE-2016-5319—Heap-based buffer overflow in tif_packbits.c in libtiff 4.0.6 and earlier allows remote attackers to crash the application via a crafted bmpEPSS 3.7%CVE-2010-4086—dirapi.dll in Adobe Shockwave Player before 11.5.9.615 allows attackers to execute arbitrary code or cause a denial of service (memory corruEPSS 3.7%CVE-2014-4483—Buffer overflow in FontParser in Apple iOS before 8.1.3, Apple OS X before 10.10.2, and Apple TV before 7.0.3 allows remote attackers to exeEPSS 3.7%CVE-2006-1909—Directory traversal vulnerability in index.php in Coppermine 1.4.4 allows remote attackers to read arbitrary files via a .//./ (modified dotEPSS 3.7%CVE-2007-5699—Stack-based buffer overflow in eIQNetworks Enterprise Security Analyzer (ESA) 2.5 allows remote attackers to execute arbitrary code via certEPSS 3.7%CVE-2010-4088—dirapi.dll in Adobe Shockwave Player before 11.5.9.615 allows attackers to execute arbitrary code or cause a denial of service (memory corruEPSS 3.7%CVE-2017-1000047—rbenv (all current versions) is vulnerable to Directory Traversal in the specification of Ruby version resulting in arbitrary code executionEPSS 3.7%CVE-2007-5791—The Vonage Motorola Phone Adapter VT 2142-VD does not properly verify that a SIP INVITE message originated from a legitimate server, which aEPSS 3.7%CVE-2009-4147—The _rtld function in the Run-Time Link-Editor (rtld) in libexec/rtld-elf/rtld.c in FreeBSD 7.1 and 8.0 does not clear the (1) LD_LIBMAP, (2EPSS 3.7%CVE-2003-1580—The Apache HTTP Server 2.0.44, when DNS resolution is enabled for client IP addresses, uses a logging format that does not identify whether EPSS 3.7%CVE-2021-44916—Opmantek Open-AudIT Community 4.2.0 (Fixed in 4.3.0) is affected by a Cross Site Scripting (XSS) vulnerability. If a bad value is passed to EPSS 3.7%CVE-2022-28113—An issue in upload.csp of FANTEC GmbH MWiD25-DS Firmware v2.000.030 allows attackers to write files and reset the user passwords without havEPSS 3.7%CVE-2002-1856—HP Application Server 8.0, when running on Windows, allows remote attackers to retrieve files in the WEB-INF directory, which contains Java EPSS 3.7%CVE-2018-4083—An issue was discovered in certain Apple products. macOS before 10.13.3 is affected. The issue involves the "Touch Bar Support" component. IEPSS 3.7%CVE-2021-20142—An unauthenticated command injection vulnerability exists in the parameters of operation 41 in the controller_server service on Gryphon ToweEPSS 3.7%