Vulnerabilidades en N/A
161.455 resultadosCVE-2008-5783—admin/index.php in V3 Chat Live Support 3.0.4 allows remote attackers to bypass authentication and gain administrative access by setting theEPSS 3.4%CVE-2024-48594HIGHFile Upload vulnerability in Prison Management System v.1.0 allows a remote attacker to execute arbitrary code via the file upload componentEPSS 3.4%CVE-2021-41511—The username and password field of login in Lodging Reservation Management System V1 can give access to any user by using SQL injection to bEPSS 3.4%CVE-2018-17984—An unanchored /[a-z]{2}/ regular expression in ISPConfig before 3.1.13 makes it possible to include arbitrary files, leading to code executiEPSS 3.4%CVE-2002-0001—Vulnerability in RFC822 address parser in mutt before 1.2.5.1 and mutt 1.3.x before 1.3.25 allows remote attackers to execute arbitrary commEPSS 3.4%CVE-2002-1415—Format string vulnerability in SMTP service for WebEasyMail 3.4.2.2 and earlier allows remote attackers to cause a denial of service (crash)EPSS 3.4%CVE-2016-5041—dwarf_macro5.c in libdwarf before 20160923 allows remote attackers to cause a denial of service (NULL pointer dereference) via a debugging iEPSS 3.4%CVE-2006-6855—AIDeX Mini-WebServer 1.1 early release 3 allows remote attackers to cause a denial of service (daemon crash) via a flood of HTTP GET requestEPSS 3.4%CVE-2008-7111—The Scanner File Utility (aka listener) in Kyocera Mita (KM) 3.3.0.1 does not restrict the filenames or extensions of uploaded files, which EPSS 3.4%CVE-2018-10110—D-Link DIR-615 T1 devices allow XSS via the Add User feature.EPSS 3.4%CVE-2017-10981—An FR-GV-204 issue in FreeRADIUS 2.x before 2.2.10 allows "DHCP - Memory leak in fr_dhcp_decode()" and a denial of service.EPSS 3.4%CVE-2017-10980—An FR-GV-203 issue in FreeRADIUS 2.x before 2.2.10 allows "DHCP - Memory leak in decode_tlv()" and a denial of service.EPSS 3.4%CVE-2008-3001—The Aggregation module 5.x before 5.x-4.4 for Drupal allows remote attackers to upload files with arbitrary extensions, and possibly executeEPSS 3.4%CVE-2009-4768—Unspecified vulnerability in the JASS script interpreter in Warcraft III: The Frozen Throne 1.24b and earlier allows user-assisted remote atEPSS 3.4%CVE-2015-3986—Cross-site request forgery (CSRF) vulnerability in the TheCartPress eCommerce Shopping Cart (aka The Professional WordPress eCommerce PluginEPSS 3.4%CVE-2008-2010—Unspecified vulnerability in Apple QuickTime Player on Windows XP SP2 and Vista SP1 allows remote attackers to execute arbitrary code via a EPSS 3.4%CVE-2022-29622—An arbitrary file upload vulnerability in formidable v3.1.4 allows attackers to execute arbitrary code via a crafted filename. NOTE: some thEPSS 3.4%CVE-2007-0710—The Bonjour functionality in iChat in Apple Mac OS X 10.3.9 allows remote attackers to cause a denial of service (persistent application craEPSS 3.4%CVE-2006-3633—OSSP shiela 1.1.5 and earlier allows remote authenticated users to execute arbitrary commands on the CVS server via shell metacharacters in EPSS 3.4%CVE-2018-0332—A vulnerability in the Session Initiation Protocol (SIP) ingress packet processing of Cisco Unified IP Phone software could allow an unautheEPSS 3.4%