Vulnerabilidades en N/A
161.455 resultadosCVE-2010-4781—index.php in Enano CMS 1.1.7pl1, and possibly other versions before 1.1.8, 1.0.6pl3, and 1.1.7pl2, allows remote attackers to obtain sensitiEPSS 3.0%CVE-2008-6112—Multiple directory traversal vulnerabilities in Ez Ringtone Manager allow remote attackers to read arbitrary files via a .. (dot dot) in theEPSS 3.0%CVE-2014-3354—Cisco IOS 12.0, 12.2, 12.4, 15.0, 15.1, 15.2, and 15.3 and IOS XE 2.x and 3.x before 3.7.4S; 3.2.xSE and 3.3.xSE before 3.3.2SE; 3.3.xSG andEPSS 3.0%CVE-2015-4756—Unspecified vulnerability in Oracle MySQL Server 5.6.22 and earlier allows remote authenticated users to affect availability via unknown vecEPSS 3.0%CVE-2018-11440—Liblouis 3.5.0 has a stack-based Buffer Overflow in the function parseChars in compileTranslationTable.c.EPSS 3.0%CVE-2013-6708—Cisco Cloud Portal 9.4 allows remote attackers to read files of unspecified types via a direct request, aka Bug IDs CSCuj08426 and CSCui6088EPSS 3.0%CVE-2018-9018—In GraphicsMagick 1.3.28, there is a divide-by-zero in the ReadMNGImage function of coders/png.c. Remote attackers could leverage this vulneEPSS 3.0%CVE-2009-4214—Cross-site scripting (XSS) vulnerability in the strip_tags function in Ruby on Rails before 2.2.s, and 2.3.x before 2.3.5, allows remote attEPSS 3.0%CVE-2009-3009—Cross-site scripting (XSS) vulnerability in Ruby on Rails 2.x before 2.2.3, and 2.3.x before 2.3.4, allows remote attackers to inject arbitrEPSS 3.0%CVE-2005-1676—Multiple cross-site scripting (XSS) vulnerabilities in Groove Mobile Workspace in Groove Virtual Office before 3.1 build 2338, before 3.1a bEPSS 3.0%CVE-2019-16894—download.php in inoERP 4.15 allows SQL injection through insecure deserialization.EPSS 3.0%CVE-2020-11666—CA API Developer Portal 4.3.1 and earlier contains an access control flaw that allows malicious users to elevate privileges.EPSS 3.0%CVE-2018-5758—The Upload File functionality in upload.jspa in Aurea Jive Jive-n 9.0.2.1 On-Premises allows for an XML External Entity attack through a craEPSS 3.0%CVE-2007-5071—Incomplete blacklist vulnerability in upload_img_cgi.php in Simple PHP Blog before 0.5.1 allows remote attackers to upload dangerous files aEPSS 3.0%CVE-2017-11290—An issue was discovered in Adobe Connect 9.6.2 and earlier versions. A UI Redress (or Clickjacking) vulnerability exists. This issue has beeEPSS 3.0%CVE-2016-1481—A vulnerability in the email message filtering feature of Cisco AsyncOS Software for Cisco Email Security Appliances could allow an unauthenEPSS 3.0%CVE-2013-4549—QXmlSimpleReader in Qt before 5.2 allows context-dependent attackers to cause a denial of service (memory consumption) via an XML Entity ExpEPSS 3.0%CVE-2015-1882—Multiple race conditions in IBM WebSphere Application Server (WAS) 8.5 Liberty Profile before 8.5.5.5 allow remote authenticated users to gaEPSS 3.0%CVE-2016-9314—Sensitive Information Disclosure in com.trend.iwss.gui.servlet.ConfigBackup in Trend Micro InterScan Web Security Virtual Appliance (IWSVA) EPSS 3.0%CVE-2004-2557—NetGear WG602 (aka WG602v1) Wireless Access Point 1.7.14 has a hardcoded account of username "superman" and password "21241036", which allowEPSS 3.0%