Vulnerabilidades em N/A
160.181 resultadosCVE-2008-2370—Apache Tomcat 4.1.0 through 4.1.37, 5.5.0 through 5.5.26, and 6.0.0 through 6.0.16, when a RequestDispatcher is used, performs path normalizEPSS 52.7%CVE-2012-5691—Buffer overflow in RealNetworks RealPlayer before 16.0.0.282 and RealPlayer SP 1.0 through 1.1.5 allows remote attackers to execute arbitrarEPSS 52.7%CVE-2021-30119MEDIUMAuthenticated Authenticated reflective XSS in Kaseya VSA <= v9.5.6EPSS 52.7%CVE-2012-0897—Stack-based buffer overflow in the JPEG2000 plugin in IrfanView PlugIns before 4.33 allows remote attackers to execute arbitrary code via a EPSS 52.7%CVE-2024-39931CRITICALGogs through 0.13.0 allows deletion of internal files.EPSS 52.7%CVE-2018-8831—A Persistent XSS vulnerability exists in Kodi (formerly XBMC) through 17.6 that allows the execution of arbitrary HTML/script code in the coEPSS 52.7%CVE-2008-0108—Stack-based buffer overflow in wkcvqd01.dll in Microsoft Works 6 File Converter, as used in Office 2003 SP2 and SP3, Works 8.0, and Works SuEPSS 52.6%CVE-2008-2549—Adobe Acrobat Reader 8.1.2 and earlier, and before 7.1.1, allows remote attackers to cause a denial of service (application crash) and possiEPSS 52.6%CVE-2003-1041—Internet Explorer 5.x and 6.0 allows remote attackers to execute arbitrary programs via a modified directory traversal attack using a URL coEPSS 52.6%CVE-2009-3958—Multiple stack-based buffer overflows in the NOS Microsystems getPlus Helper ActiveX control before 1.6.2.49 in gp.ocx in the Download ManagEPSS 52.6%CVE-2020-12255—rConfig 3.9.4 is vulnerable to remote code execution due to improper validation in the file upload functionality. vendor.crud.php accepts a EPSS 52.6%CVE-2014-5468—A File Inclusion vulnerability exists in Railo 4.2.1 and earlier via a specially-crafted URL request to the thumbnail.cfm to specify a malicEPSS 52.6%CVE-2017-13772—Multiple stack-based buffer overflows in TP-Link WR940N WiFi routers with hardware version 4 allow remote authenticated users to execute arbEPSS 52.6%CVE-2018-8734—SQL injection vulnerability in the core config manager in Nagios XI 5.2.x through 5.4.x before 5.4.13 allows an attacker to execute arbitrarEPSS 52.6%CVE-2018-11686—The Publish Service in FlexPaper (later renamed FlowPaper) 2.3.6 allows remote code execution via setup.php and change_config.php.EPSS 52.5%CVE-2010-1157—Apache Tomcat 5.5.0 through 5.5.29 and 6.0.0 through 6.0.26 might allow remote attackers to discover the server's hostname or IP address by EPSS 52.5%CVE-2012-5192—Directory traversal vulnerability in gmap/view_overlay.php in Bitweaver 2.8.1 and earlier allows remote attackers to read arbitrary files viEPSS 52.5%CVE-2021-20081—Incomplete List of Disallowed Inputs in ManageEngine ServiceDesk Plus before version 11205 allows a remote, authenticated attacker to executEPSS 52.4%CVE-2022-33098—Magnolia CMS v6.2.19 was discovered to contain a cross-site scripting (XSS) vulnerability via the Edit Contact function. This vulnerability EPSS 52.4%CVE-2016-0710—Multiple SQL injection vulnerabilities in the User Manager service in Apache Jetspeed before 2.3.1 allow remote attackers to execute arbitraEPSS 52.4%