Vulnerabilidades en n/a
161.191 resultadosCVE-2013-6227—Unrestricted file upload vulnerability in plugins/editor.zoho/agent/save_zoho.php in the Zoho plugin in Pydio (formerly AjaXplorer) before 5EPSS 8.0%CVE-2018-4241—An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. tvOS before 11.4 is affectEPSS 8.0%CVE-2007-1060—Multiple PHP remote file inclusion vulnerabilities in Interspire SendStudio 2004.14 and earlier, when register_globals and allow_fopenurl arEPSS 8.0%CVE-2000-0705—ntop running in web mode allows remote attackers to read arbitrary files via a .. (dot dot) attack.EPSS 8.0%CVE-2010-1184—The Microsoft wireless keyboard uses XOR encryption with a key derived from the MAC address, which makes it easier for remote attackers to oEPSS 8.0%CVE-2016-5019—CoreResponseStateManager in Apache MyFaces Trinidad 1.0.0 through 1.0.13, 1.2.x before 1.2.15, 2.0.x before 2.0.2, and 2.1.x before 2.1.2 miEPSS 8.0%CVE-2005-3707—Buffer overflow in Apple Quicktime before 7.0.4 allows remote attackers to execute arbitrary code via crafted TGA image files.EPSS 8.0%CVE-2017-7061—An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on WEPSS 8.0%CVE-2003-0039—ISC dhcrelay (dhcp-relay) 3.0rc9 and earlier, and possibly other versions, allows remote attackers to cause a denial of service (packet storEPSS 8.0%CVE-2011-3012—The ioQuake3 engine, as used in World of Padman 1.2 and earlier, Tremulous 1.1.0, and ioUrbanTerror 2007-12-20, does not check for dangerousEPSS 8.0%CVE-2000-1177—bb-hist.sh, bb-histlog.sh, bb-hostsvc.sh, bb-rep.sh, bb-replog.sh, and bb-ack.sh in Big Brother (BB) before 1.5d3 allows remote attackers toEPSS 8.0%CVE-2002-0836—dvips converter for Postscript files in the tetex package calls the system() function insecurely, which allows remote attackers to execute aEPSS 8.0%CVE-2013-0796—The WebGL subsystem in Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbird before 17.0.5, Thunderbird ESR 17.x before 1EPSS 8.0%CVE-2009-4022—Unspecified vulnerability in ISC BIND 9.0.x through 9.3.x, 9.4 before 9.4.3-P4, 9.5 before 9.5.2-P1, 9.6 before 9.6.1-P2, and 9.7 beta beforEPSS 8.0%CVE-1999-0253—IIS 3.0 with the iis-fix hotfix installed allows remote intruders to read source code for ASP programs by using a %2e instead of a . (dot) iEPSS 8.0%CVE-2018-5341—An issue was discovered in Zoho ManageEngine Desktop Central 10.0.124 and 10.0.184: a missing server-side check on the file type/extension wEPSS 8.0%CVE-2004-0327—Directory traversal vulnerability in functions.php in PhpNewsManager 1.46 allows remote attackers to retrieve arbitrary files via .. (dot dEPSS 8.0%CVE-2004-0293—Directory traversal vulnerability in ShopCartCGI 2.3 allows remote attackers to retrieve arbitrary files via a .. (dot dot) in a HTTP requesEPSS 8.0%CVE-2015-8438—Heap-based buffer overflow in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.2EPSS 8.0%CVE-2018-8727—Path Traversal in Gateway in Mirasys DVMS Workstation 5.12.6 and earlier allows an attacker to traverse the file system to access files or dEPSS 7.9%