Vulnerabilidades en n/a
160.786 resultadosCVE-2020-35847—Agentejo Cockpit before 0.11.2 allows NoSQL injection via the Controller/Auth.php resetpassword function.EPSS 98.2%CVE-2009-1535—The WebDAV extension in Microsoft Internet Information Services (IIS) 5.1 and 6.0 allows remote attackers to bypass URI-based protection mecEPSS 98.1%CVE-2012-0507CRITICALUnspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier,EPSS 98.1%KEVCVE-2024-41713CRITICALA vulnerability in the NuPoint Unified Messaging (NPM) component of Mitel MiCollab through 9.8 SP1 FP2 (9.8.1.201) could allow an unauthentiEPSS 98.1%KEVCVE-2023-25717CRITICALRuckus Wireless Admin through 10.4 allows Remote Code Execution via an unauthenticated HTTP GET Request, as demonstrated by a /forms/doLoginEPSS 98.1%KEVCVE-2023-38831HIGHRARLAB WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within a ZIP archive. The isEPSS 98.0%KEVCVE-2007-0882—Argument injection vulnerability in the telnet daemon (in.telnetd) in Solaris 10 and 11 (SunOS 5.10 and 5.11) misinterprets certain client "EPSS 98.0%CVE-2014-5445—Multiple absolute path traversal vulnerabilities in ZOHO ManageEngine Netflow Analyzer 8.6 through 10.2 and IT360 10.3 allow remote attackerEPSS 98.0%CVE-2022-29303CRITICALSolarView Compact ver.6.00 was discovered to contain a command injection vulnerability via conf_mail.php.EPSS 98.0%KEVCVE-2021-35395CRITICALRealtek Jungle SDK version v2.x up to v3.4.14B provides an HTTP web server exposing a management interface that can be used to configure theEPSS 98.0%KEVCVE-2018-19410CRITICALPRTG Network Monitor before 18.2.40.1683 allows remote unauthenticated attackers to create users with read-write privileges (including adminEPSS 97.9%KEVCVE-2014-0112—ParametersInterceptor in Apache Struts before 2.3.20 does not properly restrict access to the getClass method, which allows remote attackersEPSS 97.9%CVE-2023-25280CRITICALOS Command injection vulnerability in D-Link DIR820LA1_FW105B03 allows attackers to escalate privileges to root via a crafted payload with tEPSS 97.9%KEVCVE-2012-1462—The ZIP file parser in AhnLab V3 Internet Security 2011.01.18.00, AVG Anti-Virus 10.0.0.1190, Quick Heal (aka Cat QuickHeal) 11.00, EmsisoftEPSS 97.8%CVE-2021-45382CRITICALA Remote Command Execution (RCE) vulnerability exists in all series H/W revisions D-link DIR-810L, DIR-820L/LW, DIR-826L, DIR-830L, and DIR-EPSS 97.8%KEVCVE-2020-11738HIGHThe Snap Creek Duplicator plugin before 1.3.28 for WordPress (and Duplicator Pro before 3.8.7.1) allows Directory Traversal via ../ in the fEPSS 97.8%KEVCVE-2016-10108—Unauthenticated Remote Command injection as root occurs in the Western Digital MyCloud NAS 2.11.142 /web/google_analytics.php URL via a modiEPSS 97.8%CVE-2021-42237CRITICALSitecore XP 7.5 Initial Release to Sitecore XP 8.2 Update-7 is vulnerable to an insecure deserialization attack where it is possible to achiEPSS 97.8%KEVCVE-2015-7450CRITICALSerialized-object interfaces in certain IBM analytics, business solutions, cognitive, IT infrastructure, and mobile and social products alloEPSS 97.8%KEVCVE-2021-25299—Nagios XI version xi-5.7.5 is affected by cross-site scripting (XSS). The vulnerability exists in the file /usr/local/nagiosxi/html/admin/ssEPSS 97.8%