Vulnerabilidades em N/A
160.181 resultadosCVE-2012-1196—Directory traversal vulnerability in the VulCore web service (WSVulnerabilityCore/VulCore.asmx) in Lenovo ThinkManagement Console 9.0.3 alloEPSS 55.5%CVE-2002-0186—Buffer overflow in the SQLXML ISAPI extension of Microsoft SQL Server 2000 allows remote attackers to execute arbitrary code via data querieEPSS 55.5%CVE-2007-2931—Heap-based buffer overflow in Microsoft MSN Messenger 6.2, 7.0, and 7.5, and Live Messenger 8.0 allows user-assisted remote attackers to exeEPSS 55.5%CVE-2005-2551—Buffer overflow in dhost.exe in iMonitor for Novell eDirectory 8.7.3 on Windows allows attackers to cause a denial of service (crash) and obEPSS 55.4%CVE-2014-7228—Akeeba Restore (restore.php), as used in Joomla! 2.5.4 through 2.5.25, 3.x through 3.2.5, and 3.3.0 through 3.3.4; Akeeba Backup for Joomla!EPSS 55.4%CVE-2018-10956—IPConfigure Orchid Core VMS 2.0.5 allows Directory Traversal.EPSS 55.4%CVE-2023-22809HIGHIn Sudo before 1.9.12p2, the sudoedit (aka -e) feature mishandles extra arguments passed in the user-provided environment variables (SUDO_EDEPSS 55.4%CVE-2015-2993—SysAid Help Desk before 15.2 does not properly restrict access to certain functionality, which allows remote attackers to (1) create adminisEPSS 55.4%CVE-2023-42327—Cross Site Scripting (XSS) vulnerability in Netgate pfSense v.2.7.0 allows a remote attacker to gain privileges via a crafted URL to the getEPSS 55.4%CVE-2024-31817HIGHIn TOTOLINK EX200 V4.0.3c.7646_B20201211, an attacker can obtain sensitive information without authorization through the function getSysStatEPSS 55.3%CVE-2021-45466CRITICALIn CWP (aka Control Web Panel or CentOS Web Panel) before 0.9.8.1107, attackers can make a crafted request to api/?api=add_server&DHCP= to aEPSS 55.3%CVE-2006-0988—The default configuration of the DNS Server service on Windows Server 2003 and Windows 2000, and the Microsoft DNS Server service on WindowsEPSS 55.3%CVE-2005-1984—Buffer overflow in the Print Spooler service (Spoolsv.exe) for Microsoft Windows 2000, Windows XP, and Windows Server 2003 allows remote attEPSS 55.3%CVE-2022-24124—The query API in Casdoor before 1.13.1 has a SQL injection vulnerability related to the field and value parameters, as demonstrated by api/gEPSS 55.3%CVE-2010-0266—Microsoft Office Outlook 2002 SP3, 2003 SP3, and 2007 SP1 and SP2 does not properly verify e-mail attachments with a PR_ATTACH_METHOD properEPSS 55.3%CVE-2010-4335—The _validatePost function in libs/controller/components/security.php in CakePHP 1.3.x through 1.3.5 and 1.2.8 allows remote attackers to moEPSS 55.2%CVE-2011-1966—The DNS server in Microsoft Windows Server 2008 SP2, R2, and R2 SP1 does not properly handle NAPTR queries that trigger recursive processingEPSS 55.2%CVE-2018-0125CRITICALA vulnerability in the web interface of the Cisco RV132W ADSL2+ Wireless-N VPN and RV134W VDSL2 Wireless-AC VPN Routers could allow an unautEPSS 55.2%KEVCVE-2007-6509—Unspecified vulnerability in Appian Enterprise Business Process Management (BPM) Suite 5.6 SP1 allows remote attackers to cause a denial of EPSS 55.2%CVE-2006-1388—Unspecified vulnerability in Microsoft Internet Explorer 6.0 allows remote attackers to execute HTA files via unknown vectors.EPSS 55.1%