Vulnerabilidades en n/a
161.398 resultadosCVE-2020-25540—ThinkAdmin v6 is affected by a directory traversal vulnerability. An unauthorized attacker can read arbitrarily file on a remote server via EPSS 75.3%CVE-2021-3007—Laminas Project laminas-http before 2.14.2, and Zend Framework 3.0.0, has a deserialization vulnerability that can lead to remote code execuEPSS 75.3%CVE-2016-3715MEDIUMThe EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to delete arbitrary files via a crafted imEPSS 75.3%KEVCVE-2007-4279—PHP remote file inclusion vulnerability in config.php in FrontAccounting 1.12 Build 31 allows remote attackers to execute arbitrary PHP codeEPSS 75.3%CVE-2004-0397—Stack-based buffer overflow during the apr_time_t data conversion in Subversion 1.0.2 and earlier allows remote attackers to execute arbitraEPSS 75.3%CVE-2019-12255—Wind River VxWorks has a Buffer Overflow in the TCP component (issue 1 of 4). This is a IPNET security vulnerability: TCP Urgent Pointer = 0EPSS 75.3%CVE-2005-2668—Multiple buffer overflows in Computer Associates (CA) Message Queuing (CAM / CAFT) 1.05, 1.07 before Build 220_13, and 1.11 before Build 29_EPSS 75.2%CVE-2022-43671CRITICALZoho ManageEngine Password Manager Pro before 12122, PAM360 before 5711, and Access Manager Plus before 4306 allow SQL Injection.EPSS 75.2%CVE-2001-0925—The default installation of Apache before 1.3.19 allows remote attackers to list directories instead of the multiview index.html file via anEPSS 75.2%CVE-2021-42258CRITICALBQE BillQuick Web Suite 2018 through 2021 before 22.0.9.1 allows SQL injection for unauthenticated remote code execution, as exploited in thEPSS 75.2%KEVCVE-2002-0568—Oracle 9i Application Server stores XSQL and SOAP configuration files insecurely, which allows local users to obtain sensitive information iEPSS 75.2%CVE-2019-10267—An insecure file upload and code execution issue was discovered in Ahsay Cloud Backup Suite 8.1.0.50. It is possible to upload a file into aEPSS 75.2%CVE-2015-0318—Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attEPSS 75.2%CVE-2022-23178—An issue was discovered on Crestron HD-MD4X2-4K-E 1.0.0.2159 devices. When the administrative web interface of the HDMI switcher is accessedEPSS 75.2%CVE-2015-2794—The installation wizard in DotNetNuke (DNN) before 7.4.1 allows remote attackers to reinstall the application and gain SuperUser access via EPSS 75.1%CVE-2019-20215—D-Link DIR-859 1.05 and 1.06B01 Beta01 devices allow remote attackers to execute arbitrary OS commands via a urn: to the M-SEARCH method in EPSS 75.1%CVE-2017-9248CRITICALTelerik.Web.UI.dll in Progress Telerik UI for ASP.NET AJAX before R2 2017 SP1 and Sitefinity before 10.0.6412.0 does not properly protect TeEPSS 75.1%KEVCVE-2009-2629—Buffer underflow in src/http/ngx_http_parse.c in nginx 0.1.0 through 0.5.37, 0.6.x before 0.6.39, 0.7.x before 0.7.62, and 0.8.x before 0.8.EPSS 75.1%CVE-2020-25682—A flaw was found in dnsmasq before 2.83. A buffer overflow vulnerability was discovered in the way dnsmasq extract names from DNS packets beEPSS 75.1%CVE-2000-0979—File and Print Sharing service in Windows 95, Windows 98, and Windows Me does not properly check the password for a file share, which allowsEPSS 75.1%