Vulnerabilidades en n/a
161.395 resultadosCVE-2019-9554—In the 3.1.12 Pro version of Craft CMS, XSS has been discovered in the header insertion field when adding source code at an s/admin/entries/EPSS 3.7%CVE-2021-20144—An unauthenticated command injection vulnerability exists in the parameters of operation 49 in the controller_server service on Gryphon ToweEPSS 3.7%CVE-2021-20141—An unauthenticated command injection vulnerability exists in the parameters of operation 32 in the controller_server service on Gryphon ToweEPSS 3.7%CVE-2018-4083—An issue was discovered in certain Apple products. macOS before 10.13.3 is affected. The issue involves the "Touch Bar Support" component. IEPSS 3.7%CVE-2019-18224—idn2_to_ascii_4i in lib/lookup.c in GNU libidn2 before 2.1.1 has a heap-based buffer overflow via a long domain string.EPSS 3.7%CVE-2021-20142—An unauthenticated command injection vulnerability exists in the parameters of operation 41 in the controller_server service on Gryphon ToweEPSS 3.7%CVE-2019-12871—An issue was discovered in PHOENIX CONTACT PC Worx through 1.86, PC Worx Express through 1.86, and Config+ through 1.86. A manipulated PC WoEPSS 3.7%CVE-2022-24433HIGHCommand InjectionEPSS 3.7%CVE-2019-19604—Arbitrary command execution is possible in Git before 2.20.2, 2.21.x before 2.21.1, 2.22.x before 2.22.2, 2.23.x before 2.23.1, and 2.24.x bEPSS 3.7%CVE-2013-5619—Multiple integer overflows in the binary-search implementation in SpiderMonkey in Mozilla Firefox before 26.0 and SeaMonkey before 2.23 mighEPSS 3.7%CVE-2019-12870—An issue was discovered in PHOENIX CONTACT PC Worx through 1.86, PC Worx Express through 1.86, and Config+ through 1.86. A manipulated PC WoEPSS 3.7%CVE-2021-33962—China Mobile An Lianbao WF-1 router v1.0.1 is affected by an OS command injection vulnerability in the web interface /api/ZRUsb/pop_usb_deviEPSS 3.7%CVE-2009-3986—Mozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, and SeaMonkey before 2.0.1, allows remote attackers to execute arbitrary JavaScript wiEPSS 3.7%CVE-2013-2684—Cross-site Scripting (XSS) in Cisco Linksys E4200 1.0.05 Build 7 devices allows remote attackers to inject arbitrary web script or HTML via EPSS 3.7%CVE-2007-6752—Cross-site request forgery (CSRF) vulnerability in Drupal 7.12 and earlier allows remote attackers to hijack the authentication of arbitraryEPSS 3.7%CVE-2018-10697—An issue was discovered on Moxa AWK-3121 1.14 devices. The Moxa AWK 3121 provides ping functionality so that an administrator can execute ICEPSS 3.7%CVE-2008-6171—includes/bootstrap.inc in Drupal 5.x before 5.12 and 6.x before 6.6, when the server is configured for "IP-based virtual hosts," allows remoEPSS 3.7%CVE-2000-0641—Savant web server allows remote attackers to execute arbitrary commands via a long GET request.EPSS 3.7%CVE-2021-21804HIGHA local file inclusion (LFI) vulnerability exists in the options.php script functionality of Advantech R-SeeNet v 2.4.12 (20.10.2020). A speEPSS 3.7%CVE-2019-9735—An issue was discovered in the iptables firewall module in OpenStack Neutron before 10.0.8, 11.x before 11.0.7, 12.x before 12.0.6, and 13.xEPSS 3.7%