Vulnerabilidades en N/A

161.457 resultados
CVE-2008-6940—TurnkeyForms Web Hosting Directory stores sensitive information under the web root with insufficient access control, which allows remote attEPSS 2.8%CVE-1999-0155—The ghostscript command with the -dSAFER option allows remote attackers to execute commands.EPSS 2.8%CVE-2001-1086—XDM in XFree86 3.3 and 3.3.3 generates easily guessable cookies using gettimeofday() when compiled with the HasXdmXauth option, which allowsEPSS 2.8%CVE-2019-3824—A flaw was found in the way an LDAP search expression could crash the shared LDAP server process of a samba AD DC in samba before version 4.EPSS 2.8%CVE-2015-8361—Multiple unspecified services in Atlassian Bamboo before 5.9.9 and 5.10.x before 5.10.0 do not require authentication, which allows remote aEPSS 2.8%CVE-2022-34903—GnuPG through 2.3.6, in unusual situations where an attacker possesses any secret-key information from a victim's keyring and other constraiEPSS 2.8%CVE-2020-36282—JMS Client for RabbitMQ 1.x before 1.15.2 and 2.x before 2.2.0 is vulnerable to unsafe deserialization that can result in code execution viaEPSS 2.8%CVE-2022-27083—Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /cgi-bin/uploadAccessCodePic.EPSS 2.8%CVE-2008-6957—member.php in Crossday Discuz! Board allows remote attackers to reset passwords of arbitrary users via crafted (1) lostpasswd and (2) getpasEPSS 2.8%CVE-2014-4668—The cherokee_validator_ldap_check function in validator_ldap.c in Cherokee 1.2.103 and earlier, when LDAP is used, does not properly consideEPSS 2.8%CVE-2013-0873—The read_header function in libavcodec/shorten.c in FFmpeg before 1.1.3 allows remote attackers to have an unspecified impact via an invalidEPSS 2.8%CVE-2016-7504—A use-after-free vulnerability was observed in Rp_toString function of Artifex Software, Inc. MuJS before 5c337af4b3df80cf967e4f9f6a21522de8EPSS 2.8%CVE-2014-9682—The dns-sync module before 0.1.1 for node.js allows context-dependent attackers to execute arbitrary commands via shell metacharacters in thEPSS 2.8%CVE-2010-0571—Unspecified vulnerability in Cisco Digital Media Manager (DMM) 5.0.x and 5.1.x allows remote authenticated users to gain privileges via unknEPSS 2.8%CVE-2008-4346—Directory traversal vulnerability in TalkBack 2.3.6 and 2.3.6.4 allows remote attackers to include and execute arbitrary local files via a .EPSS 2.8%CVE-2005-2040—Multiple buffer overflows in the getterminaltype function in telnetd for Heimdal before 0.6.5 may allow remote attackers to execute arbitrarEPSS 2.8%CVE-2007-2402—QuickTime for Java in Apple Quicktime before 7.2 does not perform sufficient "access control," which allows remote attackers to obtain sensiEPSS 2.8%CVE-2006-1913—Cross-site scripting (XSS) vulnerability in jax_guestbook.php in Jax Guestbook 3.1, 3.31, and 3.50 allows remote attackers to inject arbitraEPSS 2.8%CVE-2021-35505—Afian FileRun 2021.03.26 allows Remote Code Execution (by administrators) via the Check Path value for the magick binary.EPSS 2.8%CVE-2008-2482—Directory traversal vulnerability in install_mod.php in insanevisions OneCMS 2.5 allows remote attackers to include and execute arbitrary loEPSS 2.8%