Vulnerabilidades en n/a
161.395 resultadosCVE-2022-29013—A command injection in the command parameter of Razer Sila Gaming Router v2.0.441_api-2.0.418 allows attackers to execute arbitrary commandsEPSS 77.1%CVE-2013-1080—The web server in Novell ZENworks Configuration Management (ZCM) 10.3 and 11.2 before 11.2.4 does not properly perform authentication for zeEPSS 77.0%CVE-2016-0854—Unrestricted file upload vulnerability in the uploadImageCommon function in the UploadAjaxAction script in the WebAccess Dashboard Viewer inEPSS 77.0%CVE-2019-15949HIGHNagios XI before 5.6.6 allows remote command execution as root. The exploit requires access to the server as the nagios user, or access as tEPSS 77.0%KEVCVE-2007-3236—PHP remote file inclusion vulnerability in footer.php in the Horoscope 1.0 module for XOOPS allows remote attackers to execute arbitrary PHPEPSS 77.0%CVE-2011-5227—Stack-based buffer overflow in the Syslog service (nssyslogd.exe) in Enterasys Network Management Suite (NMS) before 4.1.0.80 allows remote EPSS 77.0%CVE-2018-1000049—Nanopool Claymore Dual Miner version 7.3 and earlier contains a remote code execution vulnerability by abusing the miner API. The flaw can bEPSS 76.9%CVE-2006-5779—OpenLDAP before 2.3.29 allows remote attackers to cause a denial of service (daemon crash) via LDAP BIND requests with long authcid names, wEPSS 76.9%CVE-2020-13638—lib/crud/userprocess.php in rConfig 3.9.x before 3.9.7 has an authentication bypass, leading to administrator account creation. This issue hEPSS 76.9%CVE-2021-29156—ForgeRock OpenAM before 13.5.1 allows LDAP injection via the Webfinger protocol. For example, an unauthenticated attacker can perform characEPSS 76.8%CVE-2003-0190—OpenSSH-portable (OpenSSH) 3.6.1p1 and earlier with PAM support enabled immediately sends an error message when a user does not exist, whichEPSS 76.8%CVE-2018-15877—The Plainview Activity Monitor plugin before 20180826 for WordPress is vulnerable to OS command injection via shell metacharacters in the ipEPSS 76.7%CVE-2017-9101—import.php (aka the Phonebook import feature) in PlaySMS 1.4 allows remote code execution via vectors involving the User-Agent HTTP header aEPSS 76.7%CVE-2017-9554—An information exposure vulnerability in forget_passwd.cgi in Synology DiskStation Manager (DSM) before 6.1.3-15152 allows remote attackers EPSS 76.7%CVE-2009-2685—Stack-based buffer overflow in the login form in the management web server in HP Power Manager allows remote attackers to execute arbitrary EPSS 76.7%CVE-2010-3600—Unspecified vulnerability in the Client System Analyzer component in Oracle Database Server 11.1.0.7 and 11.2.0.1 and Enterprise Manager GriEPSS 76.7%CVE-2012-1440—The ELF file parser in Norman Antivirus 6.06.12, eSafe 7.0.17.0, CA eTrust Vet Antivirus 36.1.8511, Fortinet Antivirus 4.2.254.0, and Panda EPSS 76.7%CVE-2007-5423—tiki-graph_formula.php in TikiWiki 1.9.8 allows remote attackers to execute arbitrary code via PHP sequences in the f array parameter, whichEPSS 76.7%CVE-2019-7238CRITICALSonatype Nexus Repository Manager before 3.15.0 has Incorrect Access Control.EPSS 76.6%KEVCVE-2021-35478—Nagios Log Server before 2.1.9 contains Reflected XSS in the dropdown box for the alert history and audit log function. All parameters used EPSS 76.6%