Vulnerabilidades en N/A
161.138 resultadosCVE-2008-5357—Integer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK aEPSS 10.0%CVE-2021-40847—The update process of the Circle Parental Control Service on various NETGEAR routers allows remote attackers to achieve remote code executioEPSS 10.0%CVE-2008-7126—Integer overflow in osagent.exe in Borland VisiBroker Smart Agent 08.00.00.C1.03 and earlier allows remote attackers to cause a denial of seEPSS 10.0%CVE-2014-5470CRITICALActual Analyzer through 2014-08-29 allows code execution via shell metacharacters because untrusted input is used for part of the input dataEPSS 10.0%CVE-2011-0013—Multiple cross-site scripting (XSS) vulnerabilities in the HTML Manager Interface in Apache Tomcat 5.5 before 5.5.32, 6.0 before 6.0.30, andEPSS 10.0%CVE-2018-20782—The GloBee plugin before 1.1.2 for WooCommerce mishandles IPN messages.EPSS 10.0%CVE-2018-20523—Xiaomi Stock Browser 10.2.4.g on Xiaomi Redmi Note 5 Pro devices and other Redmi Android phones allows content provider injection. In other EPSS 10.0%CVE-2013-2474—Directory traversal vulnerability in AWS XMS 2.5 allows remote attackers to view arbitrary files via the 'what' parameter.EPSS 10.0%CVE-2008-2511—Directory traversal vulnerability in the UmxEventCli.CachedAuditDataList.1 (aka UmxEventCliLib) ActiveX control in UmxEventCli.dll in CA IntEPSS 10.0%CVE-2006-2460—Sugar Suite Open Source (SugarCRM) 4.2 and earlier, when register_globals is enabled, does not protect critical variables such as $_GLOBALS EPSS 10.0%CVE-2018-19043—The Media File Manager plugin 1.4.2 for WordPress allows arbitrary file renaming (specifying a "from" and "to" filename) via a ../ directoryEPSS 10.0%CVE-2018-19042—The Media File Manager plugin 1.4.2 for WordPress allows arbitrary file movement via a ../ directory traversal in the dir_from and dir_to paEPSS 10.0%CVE-2013-0613—Integer overflow in Adobe Reader and Acrobat 9.x before 9.5.3, 10.x before 10.1.5, and 11.x before 11.0.1 allows attackers to execute arbitrEPSS 10.0%CVE-2016-4121—Use-after-free vulnerability in Adobe Flash Player before 18.0.0.352 and 19.x through 21.x before 21.0.0.242 on Windows and OS X and before EPSS 10.0%CVE-2020-12078—An issue was discovered in Open-AudIT 3.3.1. There is shell metacharacter injection via attributes to an open-audit/configuration/ URI. An aEPSS 10.0%CVE-2000-0213—The Sambar server includes batch files ECHO.BAT and HELLO.BAT in the CGI directory, which allow remote attackers to execute commands via sheEPSS 10.0%CVE-2020-24579—An issue was discovered on D-Link DSL-2888A devices with firmware prior to AU_2.31_V1.1.47ae55. An unauthenticated attacker could bypass autEPSS 10.0%CVE-2021-34370—Accela Civic Platform through 20.1 allows ssoAdapter/logoutAction.do successURL XSS. NOTE: the vendor states "there are configurable securitEPSS 10.0%CVE-2009-4427—Directory traversal vulnerability in cmd.php in phpLDAPadmin 1.1.0.5 allows remote attackers to include and execute arbitrary local files viEPSS 10.0%CVE-2014-8108—The mod_dav_svn Apache HTTPD server module in Apache Subversion 1.7.x before 1.7.19 and 1.8.x before 1.8.11 allows remote attackers to causeEPSS 10.0%