Vulnerabilidades en n/a
160.832 resultadosCVE-2014-9583—common.c in infosvr in ASUS WRT firmware 3.0.0.4.376_1071, 3.0.0.376.2524-g0013f52, and other versions, as used in RT-AC66U, RT-N66U, and otEPSS 80.2%CVE-2002-1359—Multiple SSH2 servers and clients do not properly handle large packets or large fields, which may allow remote attackers to cause a denial oEPSS 80.2%CVE-2020-8821—An Improper Data Validation Vulnerability exists in Webmin 1.941 and earlier affecting the Command Shell Endpoint. A user may enter HTML codEPSS 80.2%CVE-2015-7387—ZOHO ManageEngine EventLog Analyzer 10.6 build 10060 and earlier allows remote attackers to bypass intended restrictions and execute arbitraEPSS 80.2%CVE-2016-7201HIGHThe Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memEPSS 80.1%KEVCVE-2023-22952HIGHIn SugarCRM before 12.0. Hotfix 91155, a crafted request can inject custom PHP code through the EmailTemplates because of missing input valiEPSS 80.1%KEVCVE-2009-1386—ssl/s3_pkt.c in OpenSSL before 0.9.8i allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via aEPSS 80.1%CVE-2004-0790—Multiple TCP/IP and ICMP implementations allow remote attackers to cause a denial of service (reset TCP connections) via spoofed ICMP error EPSS 80.1%CVE-2022-4223HIGHThe pgAdmin server includes an HTTP API that is intended to be used to validate the path a user selects to external PostgreSQL utilities sucEPSS 80.1%CVE-2023-39143CRITICALPaperCut NG and PaperCut MF before 22.1.3 on Windows allow path traversal, enabling attackers to upload, read, or delete arbitrary files. ThEPSS 80.1%CVE-2022-37860—The web configuration interface of the TP-Link M7350 V3 with firmware version 190531 is affected by a pre-authentication command injection vEPSS 80.0%CVE-2013-5743—Multiple SQL injection vulnerabilities in Zabbix 1.8.x before 1.8.18rc1, 2.0.x before 2.0.9rc1, and 2.1.x before 2.1.7.EPSS 80.0%CVE-2000-0246—IIS 4.0 and 5.0 does not properly perform ISAPI extension processing if a virtual directory is mapped to a UNC share, which allows remote atEPSS 80.0%CVE-2016-4553—client_side.cc in Squid before 3.5.18 and 4.x before 4.0.10 does not properly ignore the Host header when absolute-URI is provided, which alEPSS 80.0%CVE-2019-11600—A SQL injection vulnerability in the activities API in OpenProject before 8.3.2 allows a remote attacker to execute arbitrary SQL commands vEPSS 80.0%CVE-2018-5712—An issue was discovered in PHP before 5.6.33, 7.0.x before 7.0.27, 7.1.x before 7.1.13, and 7.2.x before 7.2.1. There is Reflected XSS on thEPSS 79.9%CVE-2016-0491—Unspecified vulnerability in the Oracle Application Testing Suite component in Oracle Enterprise Manager Grid Control 12.4.0.2 and 12.5.0.2 EPSS 79.9%CVE-2013-6829—admin/confnetworking.html in PineApp Mail-SeCure allows remote attackers to execute arbitrary commands via shell metacharacters in the pinghEPSS 79.9%CVE-2013-1331HIGHBuffer overflow in Microsoft Office 2003 SP3 and Office 2011 for Mac allows remote attackers to execute arbitrary code via crafted PNG data EPSS 79.8%KEVCVE-2020-10987CRITICALThe goform/setUsbUnload endpoint of Tenda AC15 AC1900 version 15.03.05.19 allows remote attackers to execute arbitrary system commands via tEPSS 79.8%KEV