Vulnerabilidades en n/a
161.088 resultadosCVE-2022-34324HIGHMultiple SQL injections in Sage XRT Business Exchange 12.4.302 allow an authenticated attacker to inject malicious data in SQL queries: Add EPSS 11.9%CVE-2020-8417HIGHThe Code Snippets plugin before 2.14.0 for WordPress allows CSRF because of the lack of a Referer check on the import menu.EPSS 11.9%CVE-2014-1882—Apache Cordova 3.3.0 and earlier and Adobe PhoneGap 2.9.0 and earlier allow remote attackers to bypass intended device-resource restrictionsEPSS 11.9%CVE-1999-0651—The rsh/rlogin service is running.EPSS 11.9%CVE-2008-1270—mod_userdir in lighttpd 1.4.18 and earlier, when userdir.path is not set, uses a default of $HOME, which might allow remote attackers to reaEPSS 11.9%CVE-2010-1597—Stack-based buffer overflow in zgtips.dll in ZipGenius 6.3.1.2552 allows user-assisted remote attackers to execute arbitrary code via a ZIP EPSS 11.9%CVE-2016-7254—Microsoft SQL Server 2012 SP2 and 2012 SP3 does not properly perform a cast of an unspecified pointer, which allows remote authenticated useEPSS 11.9%CVE-2003-0033—Buffer overflow in the RPC preprocessor for Snort 1.8 and 1.9.x before 1.9.1 allows remote attackers to execute arbitrary code via fragmenteEPSS 11.9%CVE-2016-7249—Microsoft SQL Server 2016 does not properly perform a cast of an unspecified pointer, which allows remote authenticated users to gain privilEPSS 11.9%CVE-2006-5846—Directory traversal vulnerability in index.php in FreeWebshop 2.2.2 and earlier allows remote attackers to read and include arbitrary files EPSS 11.9%CVE-2013-5758—cgi-bin/cgiServer.exx in Yealink VoIP Phone SIP-T38G allows remote authenticated users to execute arbitrary commands by calling the system mEPSS 11.9%CVE-2001-0690—Format string vulnerability in exim (3.22-10 in Red Hat, 3.12 in Debian and 3.16 in Conectiva) in batched SMTP mode allows a remote attackerEPSS 11.9%CVE-2008-5440—Unspecified vulnerability in the TimesTen Data Server component in Oracle Database 7.0.5.0.0 allows remote attackers to affect confidentialiEPSS 11.9%CVE-2017-17739—The BrightSign Digital Signage (4k242) device (Firmware 6.2.63 and below) has directory traversal via the /storage.html rp parameter, allowiEPSS 11.9%CVE-2015-1375—pixabay-images.php in the Pixabay Images plugin before 2.4 for WordPress does not properly restrict access to the upload functionality, whicEPSS 11.9%CVE-2015-7979—NTP before 4.2.8p6 and 4.3.x before 4.3.90 allows remote attackers to cause a denial of service (client-server association tear down) by senEPSS 11.9%CVE-2005-3312—The HTML rendering engine in Microsoft Internet Explorer 6.0 allows remote attackers to conduct cross-site scripting (XSS) attacks via HTML EPSS 11.9%CVE-2007-1512—Stack-based buffer overflow in the AfxOleSetEditMenu function in the MFC component in Microsoft Windows 2000 SP4, XP SP2, and Server 2003 GoEPSS 11.9%CVE-2016-0125—Microsoft Edge mishandles the Referer policy, which allows remote attackers to obtain sensitive browser-history and request information via EPSS 11.9%CVE-2002-1993—webbbs_post.pl in WebBBS 4 and 5.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the followup parameter.EPSS 11.9%