Vulnerabilidades en n/a
161.455 resultadosCVE-2021-45884—In Brave Desktop 1.17 through 1.33 before 1.33.106, when CNAME-based adblocking and a proxying extension with a SOCKS fallback are enabled, EPSS 3.1%CVE-2010-0757—Unrestricted file upload vulnerability in index.php/Attach in WikyBlog 1.7.3rc2 allows remote authenticated users to execute arbitrary code EPSS 3.1%CVE-2020-24621—A remote code execution (RCE) vulnerability was discovered in the htmlformentry (aka HTML Form Entry) module before 3.11.0 for OpenMRS. By lEPSS 3.1%CVE-2020-25692—A NULL pointer dereference was found in OpenLDAP server and was fixed in openldap 2.4.55, during a request for renaming RDNs. An unauthenticEPSS 3.1%CVE-2005-1493—Directory traversal vulnerability in SimpleCam 1.2 allows remote attackers to read arbitrary files via a ..\ (dot dot backslash) in the URL.EPSS 3.1%CVE-2018-12675—The SV3C HD Camera (L-SERIES V2.3.4.2103-S50-NTD-B20170508B and V2.3.4.2103-S50-NTD-B20170823B) does not perform origin checks on URLs that EPSS 3.1%CVE-2018-5676—This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader before 9.1 and PhantomPDF bEPSS 3.1%CVE-2018-5680—This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader before 9.1 and PhantomPDF bEPSS 3.1%CVE-2019-14328—The Simple Membership plugin before 3.8.5 for WordPress has CSRF affecting the Bulk Operation section.EPSS 3.1%CVE-2008-0546—Multiple SQL injection vulnerabilities in CandyPress (CP) 4.1.1.26, and earlier 4.1.x versions, allow remote attackers to execute arbitrary EPSS 3.1%CVE-2004-1801—Directory traversal vulnerability in PWebServer 0.3.3 allows remote attackers to read arbitrary files via a .. (dot dot) in the URL.EPSS 3.1%CVE-2001-0372—Akopia Interchange 4.5.3 through 4.6.3 installs demo stores with a default group account :backup with no password, which allows a remote attEPSS 3.1%CVE-2018-4140—An issue was discovered in certain Apple products. iOS before 11.3 is affected. The issue involves the "Telephony" component. It allows remoEPSS 3.1%CVE-2006-0164—phgstats.inc.php in phgstats before 0.5.1, if register_globals is enabled, allows remote attackers to include arbitrary files and execute arEPSS 3.1%CVE-2015-7199—The (1) AddWeightedPathSegLists and (2) SVGPathSegListSMILType::Interpolate functions in Mozilla Firefox before 42.0 and Firefox ESR 38.x beEPSS 3.1%CVE-2020-11911—The Treck TCP/IP stack before 6.0.1.66 has Improper ICMPv4 Access Control.EPSS 3.1%CVE-2017-18858—Certain NETGEAR devices are affected by command execution. This affects M4200-10MG-POE+ 12.0.2.11 and earlier, M4300-28G 12.0.2.11 and earliEPSS 3.1%CVE-2001-0043—phpGroupWare before 0.9.7 allows remote attackers to execute arbitrary PHP commands by specifying a malicious include file in the phpgw_infoEPSS 3.1%CVE-2011-3081—Use-after-free vulnerability in Google Chrome before 18.0.1025.168 allows remote attackers to cause a denial of service or possibly have unsEPSS 3.1%CVE-2013-3562—Multiple integer signedness errors in the tvb_unmasked function in epan/dissectors/packet-websocket.c in the Websocket dissector in WiresharEPSS 3.1%