Vulnerabilidades en n/a
161.455 resultadosCVE-2014-7960—OpenStack Object Storage (Swift) before 2.2.0 allows remote authenticated users to bypass the max_meta_count and other metadata constraints EPSS 3.1%CVE-2019-12046—LemonLDAP::NG -2.0.3 has Incorrect Access Control.EPSS 3.1%CVE-2020-18879—Unrestricted File Upload in Bludit v3.8.1 allows remote attackers to execute arbitrary code by uploading malicious files via the component 'EPSS 3.1%CVE-2018-7746—An issue was discovered in Western Bridge Cobub Razor 0.7.2. Authentication is not required for /index.php?/manage/channel/modifychannel. FoEPSS 3.1%CVE-2022-27534—Kaspersky Anti-Virus products for home and Kaspersky Endpoint Security with antivirus databases released before 12 March 2022 had a bug in aEPSS 3.1%CVE-2007-2420—SQL injection vulnerability in bry.asp in Burak Yilmaz Blog 1.0 allows remote attackers to execute arbitrary SQL commands via the id parametEPSS 3.1%CVE-2019-13295—ImageMagick 7.0.8-50 Q16 has a heap-based buffer over-read at MagickCore/threshold.c in AdaptiveThresholdImage because a width of zero is miEPSS 3.1%CVE-2019-11135MEDIUMTSX Asynchronous Abort condition on some CPUs utilizing speculative execution may allow an authenticated user to potentially enable informatEPSS 3.1%CVE-2019-13297—ImageMagick 7.0.8-50 Q16 has a heap-based buffer over-read at MagickCore/threshold.c in AdaptiveThresholdImage because a height of zero is mEPSS 3.1%CVE-2014-2644—Cross-site scripting (XSS) vulnerability in HP Systems Insight Manager (SIM) before 7.4 allows remote attackers to inject arbitrary web scriEPSS 3.1%CVE-2012-6067—freeFTPd.exe in freeFTPd through 1.0.11 allows remote attackers to bypass authentication via a crafted SFTP session, as demonstrated by an OEPSS 3.1%CVE-2007-1889—Integer signedness error in the _zend_mm_alloc_int function in the Zend Memory Manager in PHP 5.2.0 allows remote attackers to execute arbitEPSS 3.1%CVE-2016-1783—WebKit in Apple iOS before 9.3, Safari before 9.1, and tvOS before 9.2 allows remote attackers to execute arbitrary code or cause a denial oEPSS 3.1%CVE-2006-0784—D-Link DWL-G700AP with firmware 2.00 and 2.01 allows remote attackers to cause a denial of service (CAMEO HTTP service crash) via a request EPSS 3.1%CVE-2001-0329—Bugzilla 2.10 allows remote attackers to execute arbitrary commands via shell metacharacters in a username that is then processed by (1) theEPSS 3.1%CVE-2006-6866—STphp EasyNews PRO 4.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obEPSS 3.1%CVE-1999-0836—UnixWare uidadmin allows local users to modify arbitrary files via a symlink attack.EPSS 3.1%CVE-2001-0304—Directory traversal vulnerability in Caucho Resin 1.2.2 allows remote attackers to read arbitrary files via a "\.." (dot dot) in a URL requeEPSS 3.1%CVE-2004-0551—Cisco CatOS 5.x before 5.5(20) through 8.x before 8.2(2) and 8.3(2)GLX, as used in Catalyst switches, allows remote attackers to cause a denEPSS 3.1%CVE-2017-3858—A vulnerability in the web framework of Cisco IOS XE Software could allow an authenticated, remote attacker to inject arbitrary commands thaEPSS 3.1%