Vulnerabilidades en n/a
161.399 resultadosCVE-2010-4536—Multiple cross-site scripting (XSS) vulnerabilities in KSES, as used in WordPress before 3.0.4, allow remote attackers to inject arbitrary wEPSS 3.4%CVE-2020-8955—irc_mode_channel_update in plugins/irc/irc-mode.c in WeeChat through 2.7 allows remote attackers to cause a denial of service (buffer overflEPSS 3.4%CVE-2018-16957—The Oracle WebCenter Interaction 10.3.3 search service queryd.exe binary is compiled with the i1g2s3c4 hardcoded password. Authentication toEPSS 3.4%CVE-2009-4194—Directory traversal vulnerability in Golden FTP Server 4.30 Free and Professional, 4.50, and possibly other versions allows remote authenticEPSS 3.4%CVE-2007-6403—Stack-based buffer overflow in Nullsoft Winamp 5.32 allows user-assisted remote attackers to execute arbitrary code via crafted unicode in aEPSS 3.4%CVE-2010-4422—Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier allows remotEPSS 3.4%CVE-2002-1851—Buffer overflow in WS_FTP Pro 7.5 allows remote attackers to execute code on a client system via unknown attack vectors.EPSS 3.4%CVE-2006-6869—Directory traversal vulnerability in includes/search/search_mdforum.php in MAXdev MDForum 2.0.1 and earlier, when magic_quotes_gpc is disablEPSS 3.4%CVE-2013-0929—Format string vulnerability in the _vsnsprintf function in rrobotd.exe in the Device Manager in EMC AlphaStor 4.0 before build 800 allows reEPSS 3.4%CVE-2017-18344—The timer_create syscall implementation in kernel/time/posix-timers.c in the Linux kernel before 4.14.8 doesn't properly validate the sigeveEPSS 3.4%CVE-2006-6703—Multiple cross-site scripting (XSS) vulnerabilities in Oracle Portal 9i and 10g allow remote attackers to inject arbitrary JavaScript via thEPSS 3.4%CVE-2000-1068—pollit.cgi in Poll It 2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the poll_options parameter.EPSS 3.4%CVE-2018-14370—In Wireshark 2.6.0 to 2.6.1 and 2.4.0 to 2.4.7, the IEEE 802.11 protocol dissector could crash. This was addressed in epan/crypt/airpdcap.c EPSS 3.4%CVE-2018-12316—OS Command Injection in upload.cgi in ASUSTOR ADM version 3.1.1 allows attackers to execute system commands by modifying the filename POST pEPSS 3.4%CVE-2026-6987MEDIUMPicoClaw Web Launcher Management Plane restart command injectionEPSS 3.4%CVE-2018-12307—OS command injection in user.cgi in ASUSTOR ADM version 3.1.1 allows attackers to execute system commands as root via the "name" POST parameEPSS 3.4%CVE-2014-2607—Unspecified vulnerability in HP Operations Manager i 9.1 through 9.13 and 9.2 through 9.24 allows remote authenticated users to execute arbiEPSS 3.4%CVE-2018-12317—OS command injection in group.cgi in ASUSTOR ADM version 3.1.1 allows attackers to execute system commands as root by modifying the "name" PEPSS 3.4%CVE-2020-14930—An issue was discovered in BT CTROMS Terminal OS Port Portal CT-464. Account takeover can occur because the password-reset feature disclosesEPSS 3.4%CVE-2019-10069—In Godot through 3.1, remote code execution is possible due to the deserialization policy not being applied correctly.EPSS 3.4%