Vulnerabilidades en N/A
161.455 resultadosCVE-2025-56117HIGHOS Command Injection vulnerability in Ruijie X30-PRO X30-PRO-V1_09241521 allowing attackers to execute arbitrary commands via a crafted POSTEPSS 3.1%CVE-2005-3947—Directory traversal vulnerability in index.php in PHP Upload Center allows remote attackers to read arbitrary files via "../" sequences in tEPSS 3.1%CVE-2020-13986—An issue was discovered in Contiki through 3.0. An infinite loop exists in the uIP TCP/IP stack component when handling RPL extension headerEPSS 3.1%CVE-2017-11519—passwd_recovery.lua on the TP-Link Archer C9(UN)_V2_160517 allows an attacker to reset the admin password by leveraging a predictable randomEPSS 3.1%CVE-2017-17607—CMS Auditor Website 1.0 has SQL Injection via the PATH_INFO to /news-detail.EPSS 3.0%CVE-2017-17620—Lawyer Search Script 1.1 has SQL Injection via the /lawyer-list city parameter.EPSS 3.0%CVE-2017-17623—Opensource Classified Ads Script 3.2 has SQL Injection via the advance_result.php keyword parameter.EPSS 3.0%CVE-2017-17626—Readymade PHP Classified Script 3.3 has SQL Injection via the /categories subctid or mctid parameter.EPSS 3.0%CVE-2019-7564—An issue was discovered on Shenzhen Coship WM3300 WiFi Router 5.0.0.55 devices. The password reset functionality of the Wireless SSID doesn'EPSS 3.0%CVE-2017-17573—FS Ebay Clone 1.0 has SQL Injection via the product.php id parameter, or the search.php category_id or sub_category_id parameter.EPSS 3.0%CVE-2017-17605—Consumer Complaints Clone Script 1.0 has SQL Injection via the other-user-profile.php id parameter.EPSS 3.0%CVE-2017-17604—Entrepreneur Bus Booking Script 3.0.4 has SQL Injection via the booker_details.php sourcebus parameter.EPSS 3.0%CVE-2014-4466—WebKit, as used in Apple Safari before 6.2.1, 7.x before 7.1.1, and 8.x before 8.0.1, allows remote attackers to execute arbitrary code or cEPSS 3.0%CVE-2008-1862—ExBB Italia 0.22 and earlier only checks GET requests that use the QUERY_STRING for certain path manipulations, which allows remote attackerEPSS 3.0%CVE-2017-17651—Paid To Read Script 2.0.5 has SQL Injection via the admin/userview.php uid parameter, the admin/viewemcamp.php fnum parameter, or the admin/EPSS 3.0%CVE-2017-17613—Freelance Website Script 2.0.6 has SQL Injection via the jobdetails.php pr_id parameter or the searchbycat_list.php catid parameter.EPSS 3.0%CVE-2017-9346—In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the SoulSeek dissector could go into an infinite loop. This was addressed in epan/dissectorEPSS 3.0%CVE-2017-17611—Doctor Search Script 1.0 has SQL Injection via the /list city parameter.EPSS 3.0%CVE-2017-17599—Advance Online Learning Management Script 3.1 has SQL Injection via the courselist.php subcatid or popcourseid parameter.EPSS 3.0%CVE-2017-17592—Website Auction Marketplace 2.0.5 has SQL Injection via the search.php cat_id parameter.EPSS 3.0%