Vulnerabilidades en n/a

161.286 resultados
CVE-2022-26501CRITICALVeeam Backup & Replication 10.x and 11.x has Incorrect Access Control (issue 1 of 2).EPSS 4.1%KEVCVE-2019-15140—coders/mat.c in ImageMagick 7.0.8-43 Q16 allows remote attackers to cause a denial of service (use-after-free and application crash) or possEPSS 4.1%CVE-2010-4084—dirapi.dll in Adobe Shockwave Player before 11.5.9.615 allows attackers to execute arbitrary code or cause a denial of service (memory corruEPSS 4.1%CVE-2018-19659—An exploitable authenticated command-injection vulnerability exists in the web server functionality of Moxa NPort W2x50A products with firmwEPSS 4.1%CVE-2013-6442—The owner_set function in smbcacls.c in smbcacls in Samba 4.0.x before 4.0.16 and 4.1.x before 4.1.6 removes an ACL during use of a --chown EPSS 4.1%CVE-2020-35608—A code execution vulnerability exists in the normal world’s signed code execution functionality of Microsoft Azure Sphere 20.07. A speciallyEPSS 4.1%CVE-2008-3700—Multiple cross-site scripting (XSS) vulnerabilities in Kayako SupportSuite 3.20.02 and earlier allow remote attackers to inject arbitrary weEPSS 4.1%CVE-2016-4088—Adobe Reader and Acrobat before 11.0.16, Acrobat and Acrobat Reader DC Classic before 15.006.30172, and Acrobat and Acrobat Reader DC ContinEPSS 4.1%CVE-2018-17082—The Apache2 component in PHP before 5.6.38, 7.0.x before 7.0.32, 7.1.x before 7.1.22, and 7.2.x before 7.2.10 allows XSS via the body of a "EPSS 4.1%CVE-2007-3593—Multiple cross-site scripting (XSS) vulnerabilities in ManageEngine NetFlow Analyzer 5 allow remote attackers to inject arbitrary web scriptEPSS 4.1%CVE-2010-1724—Multiple cross-site scripting (XSS) vulnerabilities in Zikula Application Framework 1.2.2, and possibly earlier, allow remote attackers to iEPSS 4.1%CVE-2008-5225—Multiple cross-site scripting (XSS) vulnerabilities in Xerox DocuShare 6 and earlier allow remote attackers to inject arbitrary web script oEPSS 4.1%CVE-2017-7062—An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. macOS before 10.12.6 is affected. tvOS before 10.2.2 is afEPSS 4.1%CVE-2014-6517—Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20; Java SE Embedded 7u60; and Jrockit R27.8.3 and R28.3.3 allows remote attacEPSS 4.1%CVE-2017-17877—An issue was discovered in Valve Steam Link build 643. When the SSH daemon is enabled for local development, the device is publicly availablEPSS 4.1%CVE-2014-4268—Unspecified vulnerability in Oracle Java SE 5.0u65, 6u75, 7u60, and 8u5 allows remote attackers to affect confidentiality via unknown vectorEPSS 4.1%CVE-2007-2201—Multiple PHP remote file inclusion vulnerabilities in Post Revolution 6.6 and 7.0 RC2 allow remote attackers to execute arbitrary PHP code vEPSS 4.1%CVE-2021-37832—A SQL injection vulnerability exists in version 3.0.2 of Hotel Druid when SQLite is being used as the application database. A malicious attaEPSS 4.1%CVE-2006-5043—Multiple PHP remote file inclusion vulnerabilities in the Joomlaboard Forum Component (com_joomlaboard) before 1.1.2 for Joomla! allow remotEPSS 4.1%CVE-2021-42875—TOTOLINK EX1200T V4.1.2cu.5215 contains a remote command injection vulnerability in the function setDiagnosisCfg of the file lib/cste_moduleEPSS 4.1%