Vulnerabilidades en n/a
161.279 resultadosCVE-2019-20499—D-Link DWL-2600AP 4.2.0.15 Rev A devices have an authenticated OS command injection vulnerability via the Restore Configuration functionalitEPSS 94.8%CVE-2020-6754—dotCMS before 5.2.4 is vulnerable to directory traversal, leading to incorrect access control. It allows an attacker to read or execute fileEPSS 94.8%CVE-2015-5531—Directory traversal vulnerability in Elasticsearch before 1.6.1 allows remote attackers to read arbitrary files via unspecified vectors relaEPSS 94.8%CVE-2018-14933CRITICALupgrade_handle.php on NUUO NVRmini devices allows Remote Command Execution via shell metacharacters in the uploaddir parameter for a writeupEPSS 94.8%KEVCVE-2024-51378CRITICALgetresetstatus in dns/views.py and ftp/views.py in CyberPanel (aka Cyber Panel) before 1c0c6cb allows remote attackers to bypass authenticatEPSS 94.7%KEVCVE-2016-2183HIGHThe DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols and products, have a birthday bound of apprEPSS 94.7%CVE-2013-2248—Multiple open redirect vulnerabilities in Apache Struts 2.0.0 through 2.3.15 allow remote attackers to redirect users to arbitrary web sitesEPSS 94.7%CVE-2020-24186CRITICALA Remote Code Execution vulnerability exists in the gVectors wpDiscuz plugin 7.0 through 7.0.4 for WordPress, which allows unauthenticated uEPSS 94.6%CVE-2016-5674—__debugging_center_utils___.php in NUUO NVRmini 2 1.7.5 through 3.0.0, NUUO NVRsolo 1.7.5 through 3.0.0, and NETGEAR ReadyNAS Surveillance 1EPSS 94.6%CVE-2013-3182—The Windows NAT Driver (aka winnat) service in Microsoft Windows Server 2012 does not properly validate memory addresses during the processiEPSS 94.6%CVE-2015-0235—Heap-based buffer overflow in the __nss_hostname_digits_dots function in glibc 2.2, and other 2.x versions before 2.18, allows context-depenEPSS 94.6%CVE-2010-3972—Heap-based buffer overflow in the TELNET_STREAM_CONTEXT::OnSendData function in ftpsvc.dll in Microsoft FTP Service 7.0 and 7.5 for InternetEPSS 94.5%CVE-2020-14092—The CodePeople Payment Form for PayPal Pro plugin before 1.1.65 for WordPress allows SQL Injection.EPSS 94.5%CVE-2017-18368CRITICALThe ZyXEL P660HN-T1A v1 TCLinux Fw $7.3.15.0 v001 / 3.40(ULM.0)b31 router distributed by TrueOnline has a command injection vulnerability inEPSS 94.5%KEVCVE-2014-0515—Buffer overflow in Adobe Flash Player before 11.7.700.279 and 11.8.x through 13.0.x before 13.0.0.206 on Windows and OS X, and before 11.2.2EPSS 94.5%CVE-2017-14492—Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code viaEPSS 94.5%CVE-2015-7857—SQL injection vulnerability in the getListQuery function in administrator/components/com_contenthistory/models/history.php in Joomla! 3.2 beEPSS 94.5%CVE-2009-0580—Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18, when FORM authentication is used, allows remote attackerEPSS 94.4%CVE-2021-46422—Telesquare SDT-CW3B1 1.1.0 is affected by an OS command injection vulnerability that allows a remote attacker to execute OS commands withoutEPSS 94.4%CVE-2016-4117HIGHAdobe Flash Player 21.0.0.226 and earlier allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wilEPSS 94.3%KEV