Vulnerabilidades en n/a
161.279 resultadosCVE-2017-12629—Remote code execution occurs in Apache Solr before 7.1 with Apache Lucene before 7.1 by exploiting XXE in conjunction with use of a Config AEPSS 91.9%CVE-2022-31814CRITICALpfSense pfBlockerNG through 2.1.4_26 allows remote attackers to execute arbitrary OS commands as root via shell metacharacters in the HTTP HEPSS 91.9%CVE-2018-14912—cgit_clone_objects in CGit before 1.2.1 has a directory traversal vulnerability when `enable-http-clone=1` is not turned off, as demonstrateEPSS 91.9%CVE-2020-8657CRITICALAn issue was discovered in EyesOfNetwork 5.3. The installation uses the same API key (hardcoded as EONAPI_KEY in include/api_functions.php fEPSS 91.9%KEVCVE-2015-8103—The Jenkins CLI subsystem in Jenkins before 1.638 and LTS before 1.625.2 allows remote attackers to execute arbitrary code via a crafted serEPSS 91.9%CVE-2014-8739—Unrestricted file upload vulnerability in server/php/UploadHandler.php in the jQuery File Upload Plugin 6.4.4 for jQuery, as used in the CreEPSS 91.9%CVE-2022-29535—Zoho ManageEngine OPManager through 125588 allows SQL Injection via a few default reports.EPSS 91.8%CVE-2018-11138CRITICALThe '/common/download_agent_installer.php' script in the Quest KACE System Management Appliance 8.0.318 is accessible by anonymous users andEPSS 91.7%KEVCVE-2019-9193—In PostgreSQL 9.3 through 11.2, the "COPY TO/FROM PROGRAM" function allows superusers and users in the 'pg_execute_server_program' group to EPSS 91.7%CVE-2022-26258CRITICALD-Link DIR-820L 1.05B03 was discovered to contain remote command execution (RCE) vulnerability via HTTP POST to get set ccp.EPSS 91.6%KEVCVE-2008-0226—Multiple buffer overflows in yaSSL 1.7.5 and earlier, as used in MySQL and possibly other products, allow remote attackers to execute arbitrEPSS 91.6%CVE-2016-3510—Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0, 12.1.3.0, and 12.2.1.0 allows remoteEPSS 91.4%CVE-2014-0054—The Jaxb2RootElementHttpMessageConverter in Spring MVC in Spring Framework before 3.2.8 and 4.0.0 before 4.0.2 does not disable external entEPSS 91.4%CVE-2020-8654—An issue was discovered in EyesOfNetwork 5.3. An authenticated web user with sufficient privileges could abuse the AutoDiscovery module to rEPSS 91.3%CVE-2020-27988—Nagios XI before 5.7.5 is vulnerable to XSS in Manage Users (Username field).EPSS 91.3%CVE-2018-3810—Authentication Bypass vulnerability in the Oturia Smart Google Code Inserter plugin before 3.5 for WordPress allows unauthenticated attackerEPSS 91.3%CVE-2010-4221—Multiple stack-based buffer overflows in the pr_netio_telnet_gets function in netio.c in ProFTPD before 1.3.3c allow remote attackers to exeEPSS 91.3%CVE-2014-0569—Integer overflow in Adobe Flash Player before 13.0.0.250 and 14.x and 15.x before 15.0.0.189 on Windows and OS X and before 11.2.202.411 on EPSS 91.3%CVE-2012-5076CRITICALUnspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier allows remote attackers tEPSS 91.3%KEVCVE-2022-26352CRITICALAn issue was discovered in the ContentResource API in dotCMS 3.0 through 22.02. Attackers can craft a multipart form request to post a file EPSS 91.2%KEV