Vulnerabilidades en n/a
161.191 resultadosCVE-2022-29361—Improper parsing of HTTP requests in Pallets Werkzeug v2.1.0 and below allows attackers to perform HTTP Request Smuggling using a crafted HTEPSS 8.1%CVE-2014-8493—ZTE ZXHN H108L with firmware 4.0.0d_ZRQ_GR4 allows remote attackers to modify the CWMP configuration via a crafted request to Forms/access_cEPSS 8.1%CVE-2008-5062—Directory traversal vulnerability in php/cal_pdf.php in Mini Web Calendar (mwcal) 1.2 allows remote attackers to read arbitrary files via diEPSS 8.1%CVE-1999-1508—Web server in Tektronix PhaserLink Printer 840.0 and earlier allows a remote attacker to gain administrator access by directly calling undocEPSS 8.1%CVE-2003-0304—one||zero (aka One or Zero) Helpdesk 1.4 rc4 allows remote attackers to create administrator accounts by directly calling the install.php HeEPSS 8.1%CVE-2018-7316—Arbitrary File Upload exists in the Proclaim 9.1.1 component for Joomla! via a mediafileform action.EPSS 8.1%CVE-2014-4912—An Arbitrary File Upload issue was discovered in Frog CMS 0.9.5 due to lack of extension validation.EPSS 8.1%CVE-2010-0303—mystring.c in hybserv in IRCD-Hybrid (aka Hybrid2 IRC Services) 1.9.2 through 1.9.4 allows remote attackers to cause a denial of service (daEPSS 8.1%CVE-2017-11303—An issue was discovered in Adobe Photoshop 18.1.1 (2017.1.1) and earlier versions. An exploitable memory corruption vulnerability exists. SuEPSS 8.1%CVE-2019-10869—Path Traversal and Unrestricted File Upload exists in the Ninja Forms plugin before 3.0.23 for WordPress (when the Uploads add-on is activatEPSS 8.1%CVE-2015-1371—Unrestricted file upload vulnerability in ferretCMS 1.0.4-alpha allows remote administrators to execute arbitrary code by uploading a file wEPSS 8.1%CVE-2009-4635—FFmpeg 0.5 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted MOV container with impropeEPSS 8.1%CVE-2012-0934—PHP remote file inclusion vulnerability in ajax/savetag.php in the Theme Tuner plugin for WordPress before 0.8 allows remote attackers to exEPSS 8.1%CVE-2011-1425—xslt.c in XML Security Library (aka xmlsec) before 1.2.17, as used in WebKit and other products, when XSLT is enabled, allows remote attackeEPSS 8.1%CVE-2000-1093—Buffer overflow in AOL Instant Messenger before 4.3.2229 allows remote attackers to execute arbitrary commands via a long "goim" command.EPSS 8.1%CVE-2019-13482—An issue was discovered on D-Link DIR-818LW devices with firmware 2.06betab01. There is a command injection in HNAP1 (exploitable with AutheEPSS 8.1%CVE-2021-32930—The affected product’s configuration is vulnerable due to missing authentication, which may allow an attacker to change configurations and eEPSS 8.1%CVE-1999-1521—Computalynx CMail 2.4 and CMail 2.3 SP2 SMTP servers are vulnerable to a buffer overflow attack in the MAIL FROM command that may allow a reEPSS 8.1%CVE-2007-4672—Stack-based buffer overflow in Apple QuickTime before 7.3 allows remote attackers to execute arbitrary code via an invalid UncompressedQuickEPSS 8.1%CVE-2003-0748—Directory traversal vulnerability in wgate.dll for SAP Internet Transaction Server (ITS) 4620.2.0.323011 allows remote attackers to read arbEPSS 8.1%