Vulnerabilidades en n/a

161.258 resultados
CVE-2009-3787—files.php in Vivvo CMS 4.1.5.1 allows remote attackers to conduct directory traversal attacks and read arbitrary files via the file parameteEPSS 6.6%CVE-2009-0113—Directory traversal vulnerability in attachmentlibrary.php in the XStandard component for Joomla! 1.5.8 and earlier allows remote attackers EPSS 6.6%CVE-2006-4848—Multiple PHP remote file inclusion vulnerabilities in Brian Fraval Hitweb 3.0 allow remote attackers to execute arbitrary PHP code via a URLEPSS 6.6%CVE-2015-8282—SeaWell Networks Spectrum SDC 02.05.00 has a default password of "admin" for the "admin" account.EPSS 6.6%CVE-2004-1125—Buffer overflow in the Gfx::doImage function in Gfx.cc for xpdf 3.00, and other products that share code such as tetex-bin and kpdf in KDE 3EPSS 6.6%CVE-2024-54887HIGHTP-Link TL-WR940N V3 and V4 with firmware 3.16.9 and earlier contain a buffer overflow via the dnsserver1 and dnsserver2 parameters at /userEPSS 6.6%CVE-2013-4978—Stack-based buffer overflow in AloahaPDFViewer 5.0.0.7 and earlier in Aloaha PDF Suite FREE allows remote attackers to execute arbitrary codEPSS 6.6%CVE-2010-0364—Stack-based buffer overflow in VideoLAN VLC Media Player 0.8.6 allows user-assisted remote attackers to execute arbitrary code via an ogg fiEPSS 6.6%CVE-2002-0677—CDE ToolTalk database server (ttdbserver) allows remote attackers to overwrite arbitrary memory locations with a zero, and possibly gain priEPSS 6.6%CVE-2002-0131—ActivePython ActiveX control for Python in the AXScript package, when used in Internet Explorer, does not prevent a script from reading fileEPSS 6.6%CVE-2019-3996—ELOG 3.1.4-57bea22 and below can be used as an HTTP GET request proxy when unauthenticated remote attackers send crafted HTTP POST requests.EPSS 6.6%CVE-2021-46107—Ligeo Archives Ligeo Basics as of 02_01-2022 is vulnerable to Server Side Request Forgery (SSRF) which allows an attacker to read any documeEPSS 6.6%CVE-2003-0833—Stack-based buffer overflow in webfs before 1.20 allows attackers to execute arbitrary code by creating directories that result in a long paEPSS 6.6%CVE-2021-46315—Remote Command Execution (RCE) vulnerability exists in HNAP1/control/SetWizardConfig.php in D-Link Router DIR-846 DIR846A1_FW100A43.bin and EPSS 6.6%CVE-2021-46319—Remote Code Execution (RCE) vulnerability exists in D-Link Router DIR-846 DIR846A1_FW100A43.bin and DIR846enFW100A53DLA-Retail.bin. MaliciouEPSS 6.6%CVE-2004-1441—Cross-site scripting (XSS) vulnerability in icq.cgi in Board Power 2.04PF allows remote attackers to inject arbitrary web script or HTML viaEPSS 6.6%CVE-2005-1514—commands.c in qmail, when running on 64 bit platforms with a large amount of virtual memory, allows remote attackers to cause a denial of seEPSS 6.6%CVE-2010-1690—The DNS implementation in smtpsvc.dll before 6.0.2600.5949 in Microsoft Windows 2000 SP4 and earlier, Windows XP SP3 and earlier, Windows SeEPSS 6.6%CVE-2015-8439—The SharedObject object implementation in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and bEPSS 6.6%CVE-2015-1858—Multiple buffer overflows in gui/image/qbmphandler.cpp in the QtBase module in Qt before 4.8.7 and 5.x before 5.4.2 allow remote attackers tEPSS 6.6%