Vulnerabilidades en N/A

161.455 resultados
CVE-2006-4669—PHP remote file inclusion vulnerability in admin/system/include.php in Somery 0.4.6 and earlier, when register_globals is enabled, allows reEPSS 3.1%CVE-1999-0789—Buffer overflow in AIX ftpd in the libc library.EPSS 3.1%CVE-2006-3050—Directory traversal vulnerability in detail.php in SixCMS 6.0, and other versions before 6.0.6patch2, allows remote attackers to read arbitrEPSS 3.1%CVE-2015-4772—Unspecified vulnerability in Oracle MySQL Server 5.6.24 and earlier allows remote authenticated users to affect availability via unknown vecEPSS 3.1%CVE-2019-5145HIGHAn exploitable use-after-free vulnerability exists in the JavaScript engine of Foxit PDF Reader, version 9.7.0.29435. A specially crafted PDEPSS 3.1%CVE-1999-0759—Buffer overflow in FuseMAIL POP service via long USER and PASS commands.EPSS 3.1%CVE-2016-0888—EMC Documentum D2 before 4.6 lacks intended ACLs for configuration objects, which allows remote authenticated users to modify objects via unEPSS 3.1%CVE-2007-1720—Directory traversal vulnerability in addressbook.php in the Addressbook 1.2 module for PHP-Nuke allows remote attackers to include and execuEPSS 3.1%CVE-2007-4717—Multiple cross-site scripting (XSS) vulnerabilities in Claroline before 1.8.6 allow remote authenticated administrators to inject arbitrary EPSS 3.1%CVE-2020-16248—Prometheus Blackbox Exporter through 0.17.0 allows /probe?target= SSRF. NOTE: follow-on discussion suggests that this might plausibly be intEPSS 3.1%CVE-2018-0387—A vulnerability in Cisco Webex Teams (for Windows and macOS) could allow an unauthenticated, remote attacker to execute arbitrary code on thEPSS 3.1%CVE-2020-9478—An issue was discovered in Rubrik 5.0.3-2296. An OS command injection vulnerability allows an authenticated attacker to remotely execute arbEPSS 3.1%CVE-2013-4099—Multiple unspecified vulnerabilities in OpenAL32.dll in JOAL 2.0-rc11, as used in JOGAMP, allow context-dependent attackers to execute arbitEPSS 3.1%CVE-2022-44289HIGHThinkphp 5.1.41 and 5.0.24 has a code logic error which causes file upload getshell.EPSS 3.1%CVE-2007-3290—categoria.php in LiveCMS 3.4 and earlier allows remote attackers to obtain sensitive information via a ' (quote) character in the cid parameEPSS 3.1%CVE-2024-44413HIGHA vulnerability was discovered in DI_8200-16.07.26A1, which has been classified as critical. This issue affects the upgrade_filter_asp functEPSS 3.1%CVE-2023-41011—Command Execution vulnerability in China Mobile Communications China Mobile Intelligent Home Gateway v.HG6543C4 allows a remote attacker to EPSS 3.1%CVE-2020-28279—Prototype pollution vulnerability in 'flattenizer' versions 0.0.5 through 1.0.5 allows an attacker to cause a denial of service and may leadEPSS 3.1%CVE-2015-5186—Audit before 2.4.4 in Linux does not sanitize escape characters in filenames.EPSS 3.1%CVE-2017-12930—SQL Injection in the admin interface in TecnoVISION DLX Spot Player4 version >1.5.10 allows remote unauthenticated users to access the web iEPSS 3.1%