Vulnerabilidades en n/a
161.398 resultadosCVE-2020-7623—jscover through 1.0.0 is vulnerable to Command Injection. It allows execution of arbitrary command via the source argument.EPSS 3.6%CVE-2013-2175—HAProxy 1.4 before 1.4.24 and 1.5 before 1.5-dev19, when configured to use hdr_ip or other "hdr_*" functions with a negative occurrence counEPSS 3.6%CVE-2006-4910—The web administration interface (mainApp) to Cisco IDS before 4.1(5c), and IPS 5.0 before 5.0(6p1) and 5.1 before 5.1(2) allows remote attaEPSS 3.6%CVE-2013-2512—The ftpd gem 0.2.1 for Ruby allows remote attackers to execute arbitrary OS commands via shell metacharacters in a LIST or NLST command arguEPSS 3.6%CVE-2007-0239—OpenOffice.org (OOo) Office Suite allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in a preparedEPSS 3.6%CVE-2002-0502—Citrix NFuse 1.6 may allow remote attackers to list applications without authentication by accessing the applist.asp page.EPSS 3.6%CVE-2017-14266—tcprewrite in Tcpreplay 3.4.4 has a Heap-Based Buffer Overflow vulnerability triggered by a crafted PCAP file, a related issue to CVE-2016-6EPSS 3.6%CVE-2005-3501—The cabd_find function in cabd.c of the libmspack library (mspack) for Clam AntiVirus (ClamAV) before 0.87.1 allows remote attackers to causEPSS 3.6%CVE-2015-7907—Directory traversal vulnerability in the web server on Honeywell Midas gas detectors before 1.13b3 and Midas Black gas detectors before 2.13EPSS 3.6%CVE-2013-5026—An ActiveX control in lookout650.ocx, lookout660.ocx, and lookout670.ocx in National Instruments Lookout 6.5 through 6.7 allows remote attacEPSS 3.6%CVE-2002-1151—The cross-site scripting protection for Konqueror in KDE 2.2.2 and 3.0 through 3.0.3 does not properly initialize the domains on sub-frames EPSS 3.6%CVE-2013-6820—Unrestricted file upload vulnerability in the SAP NetWeaver Development Infrastructure (NWDI) allows remote attackers to execute arbitrary cEPSS 3.6%CVE-2021-46560—The firmware on Moxa TN-5900 devices through 3.1 allows command injection that could lead to device damage.EPSS 3.6%CVE-2010-4805—The socket implementation in net/core/sock.c in the Linux kernel before 2.6.35 does not properly manage a backlog of received packets, whichEPSS 3.6%CVE-2021-27983—Remote Code Execution (RCE) vulnerability exists in MaxSite CMS v107.5 via the Documents page.EPSS 3.6%CVE-2008-1807—FreeType2 before 2.3.6 allow context-dependent attackers to execute arbitrary code via an invalid "number of axes" field in a Printer Font BEPSS 3.6%CVE-2006-2161—Buffer overflow in (1) TZipBuilder 1.79.03.01, (2) Abakt 0.9.2 and 0.9.3-beta1, (3) CAM UnZip 4.0 and 4.3, and possibly other products, alloEPSS 3.6%CVE-2012-4444—The ip6_frag_queue function in net/ipv6/reassembly.c in the Linux kernel before 2.6.36 allows remote attackers to bypass intended network reEPSS 3.6%CVE-2013-2863—Google Chrome before 27.0.1453.110 does not properly handle SSL sockets, which allows remote attackers to execute arbitrary code or cause a EPSS 3.6%CVE-2006-2226—Buffer overflow in XM Easy Personal FTP Server 4.2 and 5.0.1 allows remote authenticated users to cause a denial of service via a long argumEPSS 3.6%