Vulnerabilidades en N/A
161.455 resultadosCVE-2006-3777—PHP remote file inclusion vulnerability in index.php in IDevSpot PhpLinkExchange 1.0 allows remote attackers to execute arbitrary PHP code vEPSS 3.2%CVE-2019-11336—Sony Bravia Smart TV devices allow remote attackers to retrieve the static Wi-Fi password (used when the TV is acting as an access point) byEPSS 3.2%CVE-2009-2979—Adobe Reader and Acrobat 9.x before 9.2, 8.x before 8.1.7, and possibly 7.x through 7.1.4 do not properly perform XMP-XML entity expansion, EPSS 3.2%CVE-2004-0349—Directory traversal vulnerability in GWeb HTTP Server 0.6 allows remote attackers to view arbitrary files via a .. (dot dot) in the URL.EPSS 3.2%CVE-2024-57248MEDIUMDirectory Traversal in File Upload in Gleamtech FileVista 9.2.0.0 allows remote attackers to achieve Code Execution, Information Disclosure,EPSS 3.2%CVE-2006-5094—PHP remote file inclusion vulnerability in includes/functions_kb.php in the phpBB XS 2 (Spain version) allows remote attackers to execute arEPSS 3.2%CVE-2020-14977—An issue was discovered in F-Secure SAFE 17.7 on macOS. The XPC services use the PID to identify the connecting client, which allows an attaEPSS 3.2%CVE-2003-0760—Blubster 2.5 allows remote attackers to cause a denial of service (crash) via a flood of connections to UDP port 701.EPSS 3.2%CVE-2022-44727CRITICALThe EU Cookie Law GDPR (Banner + Blocker) module before 2.1.3 for PrestaShop allows SQL Injection via a cookie ( lgcookieslaw or __lglaw ).EPSS 3.2%CVE-2021-29012—DMA Softlab Radius Manager 4.4.0 assigns the same session cookie to every admin session. The cookie is valid when the admin is logged in, buEPSS 3.2%CVE-2008-1663—Cross-site scripting (XSS) vulnerability in HP System Management Homepage (SMH) 2.1.10 and 2.1.11 on Linux and Windows allows remote attackeEPSS 3.2%CVE-2007-6378—Directory traversal vulnerability in upload.dll in BadBlue 2.72b and earlier allows remote attackers to create or overwrite arbitrary files EPSS 3.2%CVE-2009-3597—Digitaldesign CMS 0.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to dowEPSS 3.2%CVE-2009-0790—The pluto IKE daemon in Openswan and Strongswan IPsec 2.6 before 2.6.21 and 2.4 before 2.4.14, and Strongswan 4.2 before 4.2.14 and 2.8 befoEPSS 3.2%CVE-2013-2223—GNU ZRTPCPP before 3.2.0 allows remote attackers to obtain sensitive information (uninitialized heap memory) or cause a denial of service (oEPSS 3.2%CVE-2013-2107—Cross-site request forgery (CSRF) vulnerability in the Mail On Update plugin before 5.2.0 for WordPress allows remote attackers to hijack thEPSS 3.2%CVE-2005-3565—Unknown vulnerability in remshd daemon in HP-UX B.11.00, B.11.11, and B.11.23 while running in "Trusted Mode" allows remote attackers to gaiEPSS 3.2%CVE-2016-3620—The ZIPEncode function in tif_zip.c in the bmp2tiff tool in LibTIFF 4.0.6 and earlier, when the "-c zip" option is used, allows remote attacEPSS 3.2%CVE-2018-19370—A Race condition vulnerability in unzip_file in admin/import/class-import-settings.php in the Yoast SEO (wordpress-seo) plugin before 9.2.0 EPSS 3.2%CVE-2009-2443—Siteframe 3.2.3, and other 3.2.x versions, allows remote attackers to obtain configuration information via a direct request to phpinfo.php, EPSS 3.2%