Vulnerabilidades en n/a

161.395 resultados
CVE-2019-10669—An issue was discovered in LibreNMS through 1.47. There is a command injection vulnerability in html/includes/graphs/device/collectd.inc.phpEPSS 80.7%CVE-2020-13160—AnyDesk before 5.5.3 on Linux and FreeBSD has a format string vulnerability that can be exploited for remote code execution.EPSS 80.7%CVE-2015-7766—PGSQL:SubmitQuery.do in ZOHO ManageEngine OpManager 11.6, 11.5, and earlier allows remote administrators to bypass SQL query restrictions viEPSS 80.6%CVE-2015-7808—The vB_Api_Hook::decodeArguments method in vBulletin 5 Connect 5.1.2 through 5.1.9 allows remote attackers to conduct PHP object injection aEPSS 80.6%CVE-2023-27532HIGHVulnerability in Veeam Backup & Replication component allows encrypted credentials stored in the configuration database to be obtained. ThisEPSS 80.6%KEVCVE-2011-5034—Apache Geronimo 2.2.1 and earlier computes hash values for form parameters without restricting the ability to trigger hash collisions predicEPSS 80.6%CVE-2009-1185—udev before 1.4.1 does not verify whether a NETLINK message originates from kernel space, which allows local users to gain privileges by senEPSS 80.5%CVE-2010-0805—The Tabular Data Control (TDC) ActiveX control in Microsoft Internet Explorer 5.01 SP4, 6 on Windows XP SP2 and SP3, and 6 SP1 allows remoteEPSS 80.5%CVE-2008-4397—Directory traversal vulnerability in the RPC interface (asdbapi.dll) in CA ARCserve Backup (formerly BrightStor ARCserve Backup) r11.1 throuEPSS 80.5%CVE-2013-4123—client_side_request.cc in Squid 3.2.x before 3.2.13 and 3.3.x before 3.3.8 allows remote attackers to cause a denial of service via a crafteEPSS 80.5%CVE-2022-37860—The web configuration interface of the TP-Link M7350 V3 with firmware version 190531 is affected by a pre-authentication command injection vEPSS 80.4%CVE-2010-0361—Stack-based buffer overflow in the WebDAV implementation in webservd in Sun Java System Web Server (aka SJWS) 7.0 Update 7 allows remote attEPSS 80.4%CVE-2013-3861—Microsoft .NET Framework 2.0 SP2, 3.5, 3.5 SP1, 3.5.1, 4, and 4.5 allows remote attackers to cause a denial of service (application crash orEPSS 80.4%CVE-2008-0244—SAP MaxDB 7.6.03 build 007 and earlier allows remote attackers to execute arbitrary commands via "&&" and other shell metacharacters in execEPSS 80.3%CVE-2024-46538CRITICALA cross-site scripting (XSS) vulnerability in pfsense v2.5.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payloadEPSS 80.3%CVE-2004-0230—TCP, when using a large Window Size, makes it easier for remote attackers to guess sequence numbers and cause a denial of service (connectioEPSS 80.3%CVE-2003-0349—Buffer overflow in the streaming media component for logging multicast requests in the ISAPI for the logging capability of Microsoft WindowsEPSS 80.3%CVE-2007-5365—Stack-based buffer overflow in the cons_options function in options.c in dhcpd in OpenBSD 4.0 through 4.2, and some other dhcpd implementatiEPSS 80.3%CVE-2012-4969HIGHUse-after-free vulnerability in the CMshtmlEd::Exec function in mshtml.dll in Microsoft Internet Explorer 6 through 9 allows remote attackerEPSS 80.3%KEVCVE-2014-3829—displayServiceStatus.php in Centreon 2.5.1 and Centreon Enterprise Server 2.2 (fixed in Centreon web 2.5.3) allows remote attackers to execuEPSS 80.2%