Vulnerabilidades en n/a
161.395 resultadosCVE-2003-0822—Buffer overflow in the debug functionality in fp30reg.dll of Microsoft FrontPage Server Extensions (FPSE) 2000 and 2002 allows remote attackEPSS 83.0%CVE-2020-3992CRITICALOpenSLP as used in VMware ESXi (7.0 before ESXi_7.0.1-0.0.16850804, 6.7 before ESXi670-202010401-SG, 6.5 before ESXi650-202010401-SG) has a EPSS 83.0%KEVCVE-2018-17254—The JCK Editor component 6.4.4 for Joomla! allows SQL Injection via the jtreelink/dialogs/links.php parent parameter.EPSS 83.0%CVE-2019-14470—cosenary Instagram-PHP-API (aka Instagram PHP API V2), as used in the UserPro plugin through 4.9.32 for WordPress, has XSS via the example/sEPSS 83.0%CVE-2023-26469—In Jorani 1.0.0, an attacker could leverage path traversal to access files and execute code on the server.EPSS 82.9%CVE-2018-16763—FUEL CMS 1.4.1 allows PHP Code Evaluation via the pages/select/ filter parameter or the preview/ data parameter. This can lead to Pre-Auth REPSS 82.9%CVE-2009-4006—Stack-based buffer overflow in the TEA decoding algorithm in RhinoSoft Serv-U FTP server 7.0.0.1, 9.0.0.5, and other versions before 9.1.0.0EPSS 82.9%CVE-2016-0041—Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1EPSS 82.9%CVE-2024-42009CRITICALA Cross-Site Scripting vulnerability in Roundcube through 1.5.7 and 1.6.x through 1.6.7 allows a remote attacker to steal and send emails ofEPSS 82.9%KEVCVE-2019-9514HIGHSome HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of serviceEPSS 82.8%CVE-2006-0003—Unspecified vulnerability in the RDS.Dataspace ActiveX control, which is contained in ActiveX Data Objects (ADO) and distributed in MicrosofEPSS 82.8%CVE-2016-7200HIGHThe Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memEPSS 82.8%KEVCVE-2005-0356—Multiple TCP implementations with Protection Against Wrapped Sequence Numbers (PAWS) with the timestamps option enabled allow remote attackeEPSS 82.8%CVE-2019-8942—WordPress before 4.9.9 and 5.x before 5.0.1 allows remote code execution because an _wp_attached_file Post Meta entry can be changed to an aEPSS 82.7%CVE-2014-4511—Gitlist before 0.5.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the file name in the URI of a requestEPSS 82.7%CVE-2015-8605—ISC DHCP 4.x before 4.1-ESV-R12-P1, 4.2.x, and 4.3.x before 4.3.3-P1 allows remote attackers to cause a denial of service (application crashEPSS 82.7%CVE-2019-7194CRITICALThis external control of file name or path vulnerability allows remote attackers to access or modify system files. To fix the vulnerability,EPSS 82.7%KEVCVE-2015-1187CRITICALThe ping tool in multiple D-Link and TRENDnet devices allow remote attackers to execute arbitrary code via the ping_addr parameter to ping.cEPSS 82.7%KEVCVE-2014-1776CRITICALUse-after-free vulnerability in Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denialEPSS 82.7%KEVCVE-2016-10134—SQL injection vulnerability in Zabbix before 2.2.14 and 3.0 before 3.0.4 allows remote attackers to execute arbitrary SQL commands via the tEPSS 82.7%