Vulnerabilidades en N/A
161.457 resultadosCVE-2019-15597—A code injection exists in node-df v0.1.4 that can allow an attacker to remote code execution by unsanitized input.EPSS 2.7%CVE-2008-3295—Cross-site scripting (XSS) vulnerability in modules/system/admin.php in XOOPS 2.0.18.1 allows remote attackers to inject arbitrary web scripEPSS 2.7%CVE-2014-2119—The End User Safelist/Blocklist (aka SLBL) service in Cisco AsyncOS Software for Email Security Appliance (ESA) before 7.6.3-023 and 8.x befEPSS 2.7%CVE-2008-0490—SQL injection vulnerability in functions/editevent.php in the WP-Cal 0.3 plugin for WordPress allows remote attackers to execute arbitrary SEPSS 2.7%CVE-2012-6061—The dissect_wtp_common function in epan/dissectors/packet-wtp.c in the WTP dissector in Wireshark 1.6.x before 1.6.12 and 1.8.x before 1.8.4EPSS 2.7%CVE-2016-4383—The glance-manage db in all versions of HPE Helion Openstack Glance allows deleted image ids to be reassigned, which allows remote authenticEPSS 2.7%CVE-2021-3229—Denial of service in ASUSWRT ASUS RT-AX3000 firmware versions 3.0.0.4.384_10177 and earlier versions allows an attacker to disrupt the use oEPSS 2.7%CVE-2019-15599—A Code Injection exists in tree-kill on Windows which allows a remote code execution when an attacker is able to control the input into the EPSS 2.7%CVE-2019-11028—GAT-Ship Web Module before 1.40 suffers from a vulnerability allowing authenticated attackers to upload any file type to the server via the EPSS 2.7%CVE-2013-1838—OpenStack Compute (Nova) Grizzly, Folsom (2012.2), and Essex (2012.1) does not properly implement a quota for fixed IPs, which allows remoteEPSS 2.7%CVE-2019-11627—gpg-key2ps in signing-party 1.1.x and 2.x before 2.10-1 contains an unsafe shell call enabling shell injection via a User ID.EPSS 2.7%CVE-2009-5019—Web Wiz NewsPad stores sensitive information under the web root with insufficient access control, which allows remote attackers to download EPSS 2.7%CVE-2017-17757—TP-Link TL-WVR and TL-WAR devices allow remote authenticated users to execute arbitrary commands via shell metacharacters in the interface fEPSS 2.7%CVE-2012-6645—Cross-site scripting (XSS) vulnerability in the autocomplete functionality in the Finder module 6.x-1.x before 6.x-1.26, 7.x-1.x, and 7.x-2.EPSS 2.7%CVE-2005-4549—Cross-site scripting (XSS) vulnerability in Oracle Application Server (OracleAS) Discussion Forum Portlet allows remote attackers to inject EPSS 2.7%CVE-2003-0297—c-client IMAP Client, as used in imap-2002b and Pine 4.53, allows remote malicious IMAP servers to cause a denial of service (crash) and posEPSS 2.7%CVE-2010-1388—WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6, and before 4.1 on Mac OS X 10.4, does not properly handle clipboard (1) draEPSS 2.7%CVE-2019-9039—In Couchbase Sync Gateway 2.1.2, an attacker with access to the Sync Gateway’s public REST API was able to issue additional N1QL statements EPSS 2.7%CVE-2012-5498—queryCatalog.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to bypass caching and cause a denial of service via a crEPSS 2.7%CVE-2017-9424—IdeaBlade Breeze Breeze.Server.NET before 1.6.5 allows remote attackers to execute arbitrary code, related to use of TypeNameHandling in JSOEPSS 2.7%