Vulnerabilidades en n/a
161.457 resultadosCVE-2019-11627—gpg-key2ps in signing-party 1.1.x and 2.x before 2.10-1 contains an unsafe shell call enabling shell injection via a User ID.EPSS 2.7%CVE-2019-11028—GAT-Ship Web Module before 1.40 suffers from a vulnerability allowing authenticated attackers to upload any file type to the server via the EPSS 2.7%CVE-2012-2722—The node selection interface in the WYSIWYG editor (CKEditor) in the Node Embed module 6.x-1.x before 6.x-1.5 and 7.x-1.x before 7.x-1.0 forEPSS 2.7%CVE-2008-0490—SQL injection vulnerability in functions/editevent.php in the WP-Cal 0.3 plugin for WordPress allows remote attackers to execute arbitrary SEPSS 2.7%CVE-2008-5937—AyeView 2.20 allows user-assisted attackers to cause a denial of service (memory consumption or application crash) via a bitmap (aka .bmp) fEPSS 2.7%CVE-2012-6061—The dissect_wtp_common function in epan/dissectors/packet-wtp.c in the WTP dissector in Wireshark 1.6.x before 1.6.12 and 1.8.x before 1.8.4EPSS 2.7%CVE-2013-1838—OpenStack Compute (Nova) Grizzly, Folsom (2012.2), and Essex (2012.1) does not properly implement a quota for fixed IPs, which allows remoteEPSS 2.7%CVE-2012-6060—Integer overflow in the dissect_iscsi_pdu function in epan/dissectors/packet-iscsi.c in the iSCSI dissector in Wireshark 1.6.x before 1.6.12EPSS 2.7%CVE-2021-3229—Denial of service in ASUSWRT ASUS RT-AX3000 firmware versions 3.0.0.4.384_10177 and earlier versions allows an attacker to disrupt the use oEPSS 2.7%CVE-2019-15597—A code injection exists in node-df v0.1.4 that can allow an attacker to remote code execution by unsanitized input.EPSS 2.7%CVE-2007-4425—Multiple buffer overflows in Live for Speed (LFS) demo, S1, and S2 allow remote authenticated users to (1) cause a denial of service (serverEPSS 2.7%CVE-2017-17757—TP-Link TL-WVR and TL-WAR devices allow remote authenticated users to execute arbitrary commands via shell metacharacters in the interface fEPSS 2.7%CVE-2017-9424—IdeaBlade Breeze Breeze.Server.NET before 1.6.5 allows remote attackers to execute arbitrary code, related to use of TypeNameHandling in JSOEPSS 2.7%CVE-2019-9039—In Couchbase Sync Gateway 2.1.2, an attacker with access to the Sync Gateway’s public REST API was able to issue additional N1QL statements EPSS 2.7%CVE-2012-6645—Cross-site scripting (XSS) vulnerability in the autocomplete functionality in the Finder module 6.x-1.x before 6.x-1.26, 7.x-1.x, and 7.x-2.EPSS 2.7%CVE-2003-0297—c-client IMAP Client, as used in imap-2002b and Pine 4.53, allows remote malicious IMAP servers to cause a denial of service (crash) and posEPSS 2.7%CVE-2005-4549—Cross-site scripting (XSS) vulnerability in Oracle Application Server (OracleAS) Discussion Forum Portlet allows remote attackers to inject EPSS 2.7%CVE-2010-1388—WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6, and before 4.1 on Mac OS X 10.4, does not properly handle clipboard (1) draEPSS 2.7%CVE-2012-5498—queryCatalog.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to bypass caching and cause a denial of service via a crEPSS 2.7%CVE-2009-5019—Web Wiz NewsPad stores sensitive information under the web root with insufficient access control, which allows remote attackers to download EPSS 2.7%