Vulnerabilidades en n/a
161.457 resultadosCVE-2007-4908—Directory traversal vulnerability in index.php in AuraCMS 2.1 and earlier allows remote attackers to include and execute arbitrary local filEPSS 2.8%CVE-2021-37423—Zoho ManageEngine ADSelfService Plus 6111 and prior is vulnerable to linked applications takeover.EPSS 2.8%CVE-2015-2785—The GIF encoder in Byzanz allows remote attackers to cause a denial of service (out-of-bounds heap write and crash) or possibly execute arbiEPSS 2.8%CVE-2005-1299—The inserter.cgi script allows remote attackers to execute arbitrary commands via shell metacharacters in the argument.EPSS 2.8%CVE-2006-2430—IBM WebSphere Application Server 5.0.2 and earlier, 5.1.1 and earlier, and 6.0.2 up to 6.0.2.7 records user credentials in plaintext in addNEPSS 2.8%CVE-2004-1737—SQL injection vulnerability in auth_login.php in Cacti 0.8.5a allows remote attackers to execute arbitrary SQL commands and bypass authenticEPSS 2.8%CVE-2006-5463—Unspecified vulnerability in Mozilla Firefox before 1.5.0.8, Thunderbird before 1.5.0.8, and SeaMonkey before 1.0.6 allows remote attackers EPSS 2.8%CVE-2019-10893—CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.793 (Free/Open Source Version) and 0.9.8.753 (Pro) is vulnerable to Stored/Persistent XEPSS 2.8%CVE-2006-1354—Unspecified vulnerability in FreeRADIUS 1.0.0 up to 1.1.0 allows remote attackers to bypass authentication or cause a denial of service (serEPSS 2.8%CVE-2008-1579—Wiki Server in Apple Mac OS X 10.5 before 10.5.3 allows remote attackers to obtain sensitive information (user names) by reading the error mEPSS 2.8%CVE-2019-19518—CA Automic Sysload 5.6.0 through 6.1.2 contains a vulnerability, related to a lack of authentication on the File Server port, that potentialEPSS 2.8%CVE-2024-46278HIGHTeedy 1.11 is vulnerable to Cross Site Scripting (XSS) via the management console.EPSS 2.8%CVE-2007-4364—Fedora Commons before 2.2.1 does not properly handle certain authentication requests involving Java Naming and Directory Interface (JNDI), rEPSS 2.8%CVE-2015-8547—The CoreUserInputHandler::doMode function in core/coreuserinputhandler.cpp in Quassel 0.10.0 allows remote attackers to cause a denial of seEPSS 2.8%CVE-2019-5459—An Integer underflow in VLC Media Player versions < 3.0.7 leads to an out-of-band read.EPSS 2.8%CVE-2014-9472—The email gateway in RT (aka Request Tracker) 3.0.0 through 4.x before 4.0.23 and 4.2.x before 4.2.10 allows remote attackers to cause a denEPSS 2.8%CVE-2003-0782—Multiple buffer overflows in ecartis before 1.0.0 allow attackers to cause a denial of service and possibly execute arbitrary code.EPSS 2.8%CVE-2020-15926—Rocket.Chat through 3.4.2 allows XSS where an attacker can send a specially crafted message to a channel or in a direct message to the clienEPSS 2.8%CVE-2014-3864—Directory traversal vulnerability in dpkg-source in dpkg-dev 1.3.0 allows remote attackers to modify files outside of the intended directoriEPSS 2.8%CVE-2016-7101—The SGI coder in ImageMagick before 7.0.2-10 allows remote attackers to cause a denial of service (out-of-bounds read) via a large row valueEPSS 2.8%