Vulnerabilidades en n/a
161.276 resultadosCVE-2008-6768—Unrestricted file upload vulnerability in admin/editor/images.php in K&S Shopsoftware allows remote attackers to execute arbitrary PHP code EPSS 4.4%CVE-2023-51833HIGHA command injection issue in TRENDnet TEW-411BRPplus v.2.07_eu that allows a local attacker to execute arbitrary code via the data1 parameteEPSS 4.4%CVE-2008-3908—Multiple buffer overflows in Princeton WordNet (wn) 3.0 allow context-dependent attackers to execute arbitrary code via (1) a long argument EPSS 4.4%CVE-2009-0470—Multiple cross-site scripting (XSS) vulnerabilities in the HTTP server in Cisco IOS 12.4(23) allow remote attackers to inject arbitrary web EPSS 4.4%CVE-2018-20010—DomainMOD 4.11.01 has XSS via the assets/add/ssl-provider-account.php username field.EPSS 4.4%CVE-2018-20815—In QEMU 3.1.0, load_device_tree in device_tree.c calls the deprecated load_image function, which has a buffer overflow risk.EPSS 4.4%CVE-2020-10385—A stored cross-site scripting (XSS) vulnerability exists in the WPForms Contact Form (aka wpforms-lite) plugin before 1.5.9 for WordPress.EPSS 4.4%CVE-2018-20011—DomainMOD 4.11.01 has XSS via the assets/add/category.php Category Name or Stakeholder field.EPSS 4.4%CVE-2018-20009—DomainMOD 4.11.01 has XSS via the assets/add/ssl-provider.php SSL Provider Name or SSL Provider URL field.EPSS 4.4%CVE-2006-3801—Mozilla Firefox 1.5 before 1.5.0.5 and SeaMonkey before 1.0.3 does not properly clear a JavaScript reference to a frame or window, which leaEPSS 4.4%CVE-2005-0380—Multiple PHP remote file inclusion vulnerabilities in (1) print_category.php, (2) login.php, (3) setup.php, (4) ask_password.php, or (5) errEPSS 4.4%CVE-2018-12356—An issue was discovered in password-store.sh in pass in Simple Password Store 1.7.x before 1.7.2. The signature verification routine parses EPSS 4.4%CVE-2014-4657—The safe_eval function in Ansible before 1.5.4 does not properly restrict the code subset, which allows remote attackers to execute arbitrarEPSS 4.4%CVE-2010-2587—The dirapi.dll module in Adobe Shockwave Player before 11.5.9.620 allows attackers to execute arbitrary code or cause a denial of service (mEPSS 4.4%CVE-2010-3550—Unspecified vulnerability in the Java Web Start component in Oracle Java SE and Java for Business 6 Update 21 and 5.0 Update 25 allows remotEPSS 4.4%CVE-2006-1890—Multiple PHP remote file inclusion vulnerabilities in myWebland myEvent 1.2 allow remote attackers to execute arbitrary PHP code via a URL iEPSS 4.4%CVE-2007-2656—Stack-based buffer overflow in the Hewlett-Packard (HP) Magview ActiveX control in hpqvwocx.dll 1.0.0.309 allows remote attackers to cause aEPSS 4.4%CVE-2016-1000132—Reflected XSS in wordpress plugin enhanced-tooltipglossary v3.2.8EPSS 4.4%CVE-2016-4366—HPE Systems Insight Manager (SIM) before 7.5.1 allows remote attackers to obtain sensitive information, modify data, or cause a denial of seEPSS 4.4%CVE-2017-5848—The gst_ps_demux_parse_psm function in gst/mpegdemux/gstmpegdemux.c in gst-plugins-bad in GStreamer allows remote attackers to cause a deniaEPSS 4.4%