Vulnerabilidades en n/a
161.455 resultadosCVE-2020-25149—An issue was discovered in Observium Professional, Enterprise & Community 20.8.10631. It is vulnerable to directory traversal and local fileEPSS 3.2%CVE-1999-0428—OpenSSL and SSLeay allow remote attackers to reuse SSL sessions and bypass access controls.EPSS 3.2%CVE-2020-16206—The affected product is vulnerable to stored cross-site scripting, which may allow an attacker to remotely execute arbitrary code to gain acEPSS 3.2%CVE-2020-16210—The affected product is vulnerable to reflected cross-site scripting, which may allow an attacker to remotely execute arbitrary code and perEPSS 3.2%CVE-2013-3082—Cross-site scripting (XSS) vulnerability in plugins/jojo_core/forgot_password.php in Jojo before 1.2.2 allows remote attackers to inject arbEPSS 3.2%CVE-2019-13181—A CSV injection vulnerability exists in the web UI of SolarWinds Serv-U FTP Server v15.1.7.EPSS 3.2%CVE-2017-15645—CSRF exists in Webmin 1.850. By sending a GET request to at/create_job.cgi containing dir=/&cmd= in the URI, an attacker to execute arbitrarEPSS 3.2%CVE-2007-4843—Directory traversal vulnerability in X-Diesel Unreal Commander 0.92 build 565 and 573 allows remote FTP servers to create or overwrite arbitEPSS 3.2%CVE-2007-2019—PHP remote file inclusion vulnerability in init.gallery.php in phpGalleryScript 1.0 allows remote attackers to execute arbitrary PHP code viEPSS 3.2%CVE-2011-4957—The make_clickable function in wp-includes/formatting.php in WordPress before 3.1.1 does not properly check URLs before passing them to the EPSS 3.2%CVE-2014-8711—Multiple integer overflows in epan/dissectors/packet-amqp.c in the AMQP dissector in Wireshark 1.10.x before 1.10.11 and 1.12.x before 1.12.EPSS 3.2%CVE-1999-0899—The Windows NT 4.0 print spooler allows a local user to execute arbitrary commands due to inappropriate permissions that allow the user to sEPSS 3.2%CVE-2012-3523—The STARTTLS implementation in nnrpd in INN before 2.5.3 does not properly restrict I/O buffering, which allows man-in-the-middle attackers EPSS 3.2%CVE-2006-5794—Unspecified vulnerability in the sshd Privilege Separation Monitor in OpenSSH before 4.5 causes weaker verification that authentication has EPSS 3.2%CVE-2015-8916—bsdtar in libarchive before 3.2.0 returns a success code without filling the entry when the header is a "split file in multivolume RAR," whiEPSS 3.2%CVE-2012-0851—The ff_h264_decode_seq_parameter_set function in h264_ps.c in libavcodec in FFmpeg before 0.9.1 and in Libav 0.5.x before 0.5.9, 0.6.x beforEPSS 3.2%CVE-2008-4183—IntegraMOD 1.4.x stores sensitive information under the web root with insufficient access control, which allows remote attackers to downloadEPSS 3.2%CVE-2018-17126—CScms 4.1 allows remote code execution, as demonstrated by 1');eval($_POST[cmd]);# in Web Name to upload\plugins\sys\Install.php.EPSS 3.2%CVE-2008-5278—Cross-site scripting (XSS) vulnerability in the self_link function in in the RSS Feed Generator (wp-includes/feed.php) for WordPress before EPSS 3.2%CVE-2005-3946—Opera 8.50 allows remote attackers to cause a denial of service (crash) via a Java applet with a large string argument to the removeMember JEPSS 3.2%