Vulnerabilidades en n/a
161.455 resultadosCVE-2008-4094—Multiple SQL injection vulnerabilities in Ruby on Rails before 2.1.1 allow remote attackers to execute arbitrary SQL commands via the (1) :lEPSS 3.0%CVE-2003-1541—PlanetMoon Guestbook tr3.a stores sensitive information under the web root with insufficient access control, which allows remote attackers tEPSS 3.0%CVE-2007-3127—content.php in WSPortal 1.0, when magic_quotes_gpc is disabled, allows remote attackers to obtain sensitive information via a "';" (quote seEPSS 3.0%CVE-2010-1868—The (1) sqlite_single_query and (2) sqlite_array_query functions in ext/sqlite/sqlite.c in PHP 5.2 through 5.2.13 and 5.3 through 5.3.2 alloEPSS 3.0%CVE-2002-0571—Oracle Oracle9i database server 9.0.1.x allows local users to access restricted data via a SQL query using ANSI outer join syntax.EPSS 3.0%CVE-2011-1806—Google Chrome before 11.0.696.71 does not properly implement the GPU command buffer, which allows remote attackers to execute arbitrary codeEPSS 3.0%CVE-2001-0966—Directory traversal vulnerability in Nudester 1.10 and earlier allows remote attackers to read or write arbitrary files via a .. (dot dot) iEPSS 3.0%CVE-2020-35184—The official composer docker images before 1.8.3 contain a blank password for a root user. System using the composer docker container deployEPSS 3.0%CVE-2017-14848—WPHRM Human Resource Management System for WordPress 1.0 allows SQL Injection via the employee_id parameter.EPSS 3.0%CVE-2006-4884—Multiple cross-site scripting (XSS) vulnerabilities in IDevSpot iSupport 1.8 allow remote attackers to inject arbitrary web script or HTML vEPSS 3.0%CVE-2015-1191—Multiple directory traversal vulnerabilities in pigz 2.3.1 allow remote attackers to write to arbitrary files via a (1) full pathname or (2)EPSS 3.0%CVE-2013-0673—Directory traversal vulnerability in the web interface in the Health Monitor service in MatrikonOPC A&E Historian 1.0.0.0 allows remote attaEPSS 3.0%CVE-2009-2395—SQL injection vulnerability in the K2 (com_k2) component 1.0.1 Beta and earlier for Joomla! allows remote attackers to execute arbitrary SQLEPSS 3.0%CVE-2020-14408—An issue was discovered in Agentejo Cockpit 0.10.2. Insufficient sanitization of the to parameter in the /auth/login route allows for injectEPSS 3.0%CVE-2005-1502—Cross-site scripting (XSS) vulnerability in MidiCart PHP Shopping Cart allows remote attackers to inject arbitrary web script or HTML via thEPSS 3.0%CVE-2007-0429—DivXBrowserPlugin (aka DivX Web Player) npdivx32.dll, as distributed with DivX Player 6.4.1, allows remote attackers to cause a denial of seEPSS 3.0%CVE-2008-5022—The nsXMLHttpRequest::NotifyEventListeners method in Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18,EPSS 3.0%CVE-2014-7885—Multiple unspecified vulnerabilities in HP ArcSight Enterprise Security Manager (ESM) before 6.8c have unknown impact and remote attack vectEPSS 3.0%CVE-2018-19971—JFrog Artifactory Pro 6.5.9 has Incorrect Access Control.EPSS 3.0%CVE-2020-9027—ELTEX NTP-RG-1402G 1v10 3.25.3.32 devices allow OS command injection via the TRACE field of the resource ping.cmd. The NTP-2 device is also EPSS 3.0%