Vulnerabilidades en N/A
161.457 resultadosCVE-2007-5782—Directory traversal vulnerability in dl.php in FireConfig 0.5 allows remote attackers to read arbitrary files via a .. (dot dot) in the fileEPSS 2.8%CVE-2007-5813—Multiple directory traversal vulnerabilities in download.php in ISPworker 1.21 allow remote attackers to read arbitrary files via a .. (dot EPSS 2.8%CVE-2018-1000623—JFrog JFrog Artifactory version Prior to version 6.0.3, since version 4.0.0 contains a Directory Traversal vulnerability in The "Import RepoEPSS 2.8%CVE-2015-4262—The password-change feature in Cisco Unified MeetingPlace Web Conferencing before 8.5(5) MR3 and 8.6 before 8.6(2) does not check the sessioEPSS 2.8%CVE-2006-6569—form.php in GenesisTrader 1.0 allows remote attackers to read source code for arbitrary files and obtain sensitive information via the (1) dEPSS 2.8%CVE-2021-27903—An issue was discovered in Craft CMS before 3.6.7. In some circumstances, a potential Remote Code Execution vulnerability existed on sites tEPSS 2.8%CVE-2007-6368—Directory traversal vulnerability in index.php in ezContents 1.4.5 allows remote attackers to read arbitrary files via a .. (dot dot) in theEPSS 2.8%CVE-2016-4324—Use-after-free vulnerability in LibreOffice before 5.1.4 allows remote attackers to execute arbitrary code via a crafted RTF file, related tEPSS 2.8%CVE-2006-0882—Directory traversal vulnerability in include.php in Noah's Classifieds 1.3 allows remote attackers to include arbitrary local files via the EPSS 2.8%CVE-2009-1491—McAfee GroupShield for Microsoft Exchange on Exchange Server 2000, and possibly other anti-virus or anti-spam products from McAfee or other EPSS 2.8%CVE-2002-0610—Vulnerability in FTPSRVR in HP MPE/iX 6.0 through 7.0 does not properly validate certain FTP commands, which allows attackers to gain privilEPSS 2.8%CVE-2004-2726—HTTPMail service in MailEnable Professional 1.18 does not properly handle arguments to the Authorization header, which allows remote attackeEPSS 2.8%CVE-2004-1036—Cross-site scripting (XSS) vulnerability in the decoding of encoded text in certain headers in mime.php for SquirrelMail 1.4.3a and earlier,EPSS 2.8%CVE-2018-18956—The ProcessMimeEntity function in util-decode-mime.c in Suricata 4.x before 4.0.6 allows remote attackers to cause a denial of service (segfEPSS 2.8%CVE-2001-0792—Format string vulnerability in XChat 1.2.x allows remote attackers to execute arbitrary code via a malformed nickname.EPSS 2.8%CVE-2011-2356—WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memoEPSS 2.8%CVE-2004-2341—PHP file include injection vulnerability in isearch.inc.php for iSearch allows remote attackers to execute arbitrary code via the isearch_paEPSS 2.8%CVE-2010-0673—SQL injection vulnerability in cplphoto.php in the Copperleaf Photolog plugin 0.16, and possibly earlier, for WordPress allows remote attackEPSS 2.8%CVE-2017-18264—An issue was discovered in libraries/common.inc.php in phpMyAdmin 4.0 before 4.0.10.20, 4.4.x, 4.6.x, and 4.7.0 prereleases. The restrictionEPSS 2.8%CVE-2018-8000—In PoDoFo 0.9.5, there exists a heap-based buffer overflow vulnerability in PoDoFo::PdfTokenizer::GetNextToken() in PdfTokenizer.cpp, a relaEPSS 2.8%