Vulnerabilidades en N/A
161.455 resultadosCVE-2020-5741HIGHDeserialization of Untrusted Data in Plex Media Server on Windows allows a remote, authenticated attacker to execute arbitrary Python code.EPSS 72.9%KEVCVE-2024-0352HIGHLikeshop HTTP POST Request File.php userFormImage unrestricted uploadEPSS 72.9%CVE-2012-0394—The DebuggingInterceptor component in Apache Struts before 2.3.1.1, when developer mode is used, allows remote attackers to execute arbitrarEPSS 72.9%CVE-2007-1674—Stack-based buffer overflow in the Alert Service (aolnsrvr.exe) in LANDesk Management Suite 8.7 allows remote attackers to execute arbitraryEPSS 72.9%CVE-1999-0256—Buffer overflow in War FTP allows remote execution of commands.EPSS 72.9%CVE-2019-0199—The HTTP/2 implementation in Apache Tomcat 9.0.0.M1 to 9.0.14 and 8.5.0 to 8.5.37 accepted streams with excessive numbers of SETTINGS framesEPSS 72.9%CVE-2012-1458—The Microsoft CHM file parser in ClamAV 0.96.4 and Sophos Anti-Virus 4.61.0 allows remote attackers to bypass malware detection via a crafteEPSS 72.9%CVE-2011-3026—Integer overflow in libpng, as used in Google Chrome before 17.0.963.56, allows remote attackers to cause a denial of service or possibly haEPSS 72.9%CVE-2012-0262—op5config/welcome in system-op5config before 2.0.3 in op5 Monitor and op5 Appliance before 5.5.3 allows remote attackers to execute arbitrarEPSS 72.9%CVE-2020-9757—The SEOmatic component before 3.3.0 for Craft CMS allows Server-Side Template Injection that leads to RCE via malformed data to the metacontEPSS 72.8%CVE-2015-2284—userlogin.jsp in SolarWinds Firewall Security Manager (FSM) before 6.6.5 HotFix1 allows remote attackers to gain privileges and execute arbiEPSS 72.8%CVE-2014-6038—Zoho ManageEngine EventLog Analyzer versions 7 through 9.9 build 9002 have a database Information Disclosure Vulnerability. Fixed in EventLoEPSS 72.8%CVE-2011-5007—Stack-based buffer overflow in the CmpWebServer component in 3S CoDeSys 3.4 SP4 Patch 2 and earlier, as used on the ABB AC500 PLC and possibEPSS 72.7%CVE-2014-3828—Multiple SQL injection vulnerabilities in Centreon 2.5.1 and Centreon Enterprise Server 2.2 (fixed in Centreon web 2.5.3) allow remote attacEPSS 72.7%CVE-2008-6505—Multiple directory traversal vulnerabilities in Apache Struts 2.0.x before 2.0.12 and 2.1.x before 2.1.3 allow remote attackers to read arbiEPSS 72.7%CVE-2014-9618—The Client Filter Admin portal in Netsweeper before 3.1.10, 4.0.x before 4.0.9, and 4.1.x before 4.1.2 allows remote attackers to bypass autEPSS 72.7%CVE-2018-6389—In WordPress through 4.9.2, unauthenticated attackers can cause a denial of service (resource consumption) by using the large list of registEPSS 72.7%CVE-2020-11991—When using the StreamGenerator, the code parse a user-provided XML. A specially crafted XML, including external system entities, could be usEPSS 72.6%CVE-2002-1337—Buffer overflow in Sendmail 5.79 to 8.12.7 allows remote attackers to execute arbitrary code via certain formatted address fields, related tEPSS 72.6%CVE-2017-6334HIGHdnslookup.cgi on NETGEAR DGN2200 devices with firmware through 10.0.0.50 allows remote authenticated users to execute arbitrary OS commands EPSS 72.6%KEV