Vulnerabilidades en N/A
161.398 resultadosCVE-2018-10967—On D-Link DIR-550A and DIR-604M devices through v2.10KR, a malicious user can forge an HTTP request to inject operating system commands thatEPSS 3.7%CVE-2015-6098—Buffer overflow in the Network Driver Interface Standard (NDIS) implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and REPSS 3.7%CVE-2007-1149—Multiple directory traversal vulnerabilities in LoveCMS 1.4 allow remote attackers to read arbitrary files via a .. (dot dot) in (1) the steEPSS 3.7%CVE-2021-39379—A SQL Injection vulnerability exists in openSIS 8.0 when MySQL (MariaDB) is being used as the application database. A malicious attacker canEPSS 3.7%CVE-2014-8166—The browsing feature in the server in CUPS does not filter ANSI escape sequences from shared printer names, which might allow remote attackeEPSS 3.7%CVE-2006-3854—Buffer overflow in IBM Informix Dynamic Server (IDS) 9.40.TC7, 9.40.TC8, 10.00.TC4, and 10.00.TC5, when running on Windows, allows remote atEPSS 3.7%CVE-2017-6896—Privilege escalation vulnerability on the DIGISOL DG-HR1400 1.00.02 wireless router enables an attacker to escalate from user privilege to aEPSS 3.7%CVE-2007-5897—Buffer overflow in MDSYS.SDO_CS in Oracle Database Server 8iR3, 9iR1, 9iR2 up to 9.2.0.6, and 10gR1 up to 10.1.0.4 allows remote authenticatEPSS 3.7%CVE-2012-3509—Multiple integer overflows in the (1) _objalloc_alloc function in objalloc.c and (2) objalloc_alloc macro in include/objalloc.h in GNU libibEPSS 3.7%CVE-2014-0420—Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.34 and earlier, and 5.6.14 and earlier, allows remote authenticaEPSS 3.7%CVE-2019-18812—A memory leak in the sof_dfsentry_write() function in sound/soc/sof/debug.c in the Linux kernel through 5.3.9 allows attackers to cause a deEPSS 3.7%CVE-2014-9851—ImageMagick 6.8.9.9 allows remote attackers to cause a denial of service (application crash).EPSS 3.7%CVE-2021-25914CRITICALPrototype pollution vulnerability in 'object-collider' versions 1.0.0 through 1.0.3 allows attacker to cause a denial of service and may leaEPSS 3.7%CVE-2018-20418—index.php?p=admin/actions/entries/save-entry in Craft CMS 3.0.25 allows XSS by saving a new title from the console tab.EPSS 3.7%CVE-2021-20138—An unauthenticated command injection vulnerability exists in multiple parameters in the Gryphon Tower router’s web interface at /cgi-bin/lucEPSS 3.7%CVE-2007-2430—shared/code/tce_tmx.php in TCExam 4.0.011 and earlier allows remote attackers to create arbitrary PHP files in cache/ by placing file contenEPSS 3.7%CVE-2018-19321HIGHThe GPCIDrv and GDrv low-level drivers in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE EPSS 3.7%KEVCVE-2016-4430—Apache Struts 2 2.3.20 through 2.3.28.1 mishandles token validation, which allows remote attackers to conduct cross-site request forgery (CSEPSS 3.7%CVE-2016-20010—EWWW Image Optimizer before 2.8.5 allows remote command execution because it relies on a protection mechanism involving boolval, which is unEPSS 3.7%CVE-2018-12447—The restore_tqb_pixels function in hevc_filter.c in libavcodec, as used in libbpg 0.9.8 and other products, has an integer overflow that leaEPSS 3.7%