Vulnerabilidades en n/a
161.455 resultadosCVE-2003-1555—ScozNet ScozBook 1.1 BETA allows remote attackers to obtain sensitive information via an invalid PG parameter in view.php, which reveals theEPSS 3.1%CVE-2018-9157—An issue was discovered on AXIS M1033-W (IP camera) Firmware version 5.40.5.1 devices. The upload web page doesn't verify the file type, andEPSS 3.1%CVE-2010-2159—Dameng DM Database Server allows remote authenticated users to cause a denial of service (crash) and possibly execute arbitrary code via unsEPSS 3.1%CVE-2019-12959—Server Side Request Forgery (SSRF) exists in Zoho ManageEngine AssetExplorer 6.2.0 and before for the ClientUtilServlet servlet via a URL inEPSS 3.1%CVE-2016-6530—Dentsply Sirona (formerly Schick) CDR Dicom 5 and earlier has default passwords for the sa and cdr accounts, which allows remote attackers tEPSS 3.1%CVE-2009-4562—Cross-site scripting (XSS) vulnerability in zp-core/admin.php in Zenphoto 1.2.5 allows remote attackers to inject arbitrary web script or HTEPSS 3.1%CVE-2018-20147—In WordPress before 4.9.9 and 5.x before 5.0.1, authors could modify metadata to bypass intended restrictions on deleting files.EPSS 3.1%CVE-2017-1000444—Eleix Openhacker version 0.1.47 is vulnerable to an SQL injection in the account registration and login component resulting in information dEPSS 3.1%CVE-2007-1140—Directory traversal vulnerability in edit.php in pheap allows remote attackers to read and modify arbitrary files via a .. (dot dot) in the EPSS 3.1%CVE-2004-1776—Cisco IOS 12.1(3) and 12.1(3)T allows remote attackers to read and modify device configuration data via the cable-docsis read-write communitEPSS 3.1%CVE-2006-3604—Directory traversal vulnerability in FlexWATCH Network Camera 3.0 and earlier allows remote attackers to bypass access restrictions for (1) EPSS 3.1%CVE-2020-20214—Mikrotik RouterOs 6.44.6 (long-term tree) suffers from an assertion failure vulnerability in the btest process. An authenticated remote attaEPSS 3.1%CVE-2019-17362—In LibTomCrypt through 1.18.2, the der_decode_utf8_string function (in der_decode_utf8_string.c) does not properly detect certain invalid UTEPSS 3.1%CVE-2008-6089—Directory traversal vulnerability in main.php in ScriptsEz Easy Image Downloader allows remote attackers to read arbitrary files via a .. (dEPSS 3.1%CVE-2010-3085—The network-play implementation in Mednafen before 0.8.D might allow remote servers to execute arbitrary code via unspecified vectors, relatEPSS 3.1%CVE-2008-4080—SQL injection vulnerability in Stash 1.0.3, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands viaEPSS 3.1%CVE-2016-0888—EMC Documentum D2 before 4.6 lacks intended ACLs for configuration objects, which allows remote authenticated users to modify objects via unEPSS 3.1%CVE-2019-17455—Libntlm through 1.5 relies on a fixed buffer size for tSmbNtlmAuthRequest, tSmbNtlmAuthChallenge, and tSmbNtlmAuthResponse read and write opEPSS 3.1%CVE-2006-4669—PHP remote file inclusion vulnerability in admin/system/include.php in Somery 0.4.6 and earlier, when register_globals is enabled, allows reEPSS 3.1%CVE-1999-0759—Buffer overflow in FuseMAIL POP service via long USER and PASS commands.EPSS 3.1%