Vulnerabilidades em N/A
161.455 resultadosCVE-2022-37109CRITICALpatrickfuller camp up to and including commit bbd53a256ed70e79bd8758080936afbf6d738767 is vulnerable to Incorrect Access Control. Access to EPSS 49.5%CVE-2018-16159—The Gift Vouchers plugin through 2.0.1 for WordPress allows SQL Injection via the template_id parameter in a wp-admin/admin-ajax.php wpgv_doEPSS 49.5%CVE-2016-0015—DirectShow in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 GoEPSS 49.4%CVE-2023-26775—File Upload vulnerability found in Monitorr v.1.7.6 allows a remote attacker t oexecute arbitrary code via a crafted file upload to the asseEPSS 49.4%CVE-2023-31546—Cross Site Scripting (XSS) vulnerability in DedeBIZ v6.0.3 allows attackers to run arbitrary code via the search feature.EPSS 49.4%CVE-2022-47939CRITICALAn issue was discovered in ksmbd in the Linux kernel 5.15 through 5.19 before 5.19.2. fs/ksmbd/smb2pdu.c has a use-after-free and OOPS for SEPSS 49.3%CVE-2023-36969—CMS Made Simple v2.2.17 is vulnerable to Remote Command Execution via the File Upload Function.EPSS 49.3%CVE-2012-3363CRITICALZend_XmlRpc in Zend Framework 1.x before 1.11.12 and 1.12.x before 1.12.0 does not properly handle SimpleXMLElement classes, which allows reEPSS 49.3%CVE-2015-6967—Unrestricted file upload vulnerability in the My Image plugin in Nibbleblog before 4.0.5 allows remote administrators to execute arbitrary cEPSS 49.3%CVE-2011-3230—Apple Safari before 5.1.1 on Mac OS X does not enforce an intended policy for file: URLs, which allows remote attackers to execute arbitraryEPSS 49.3%CVE-2018-13862—Touchpad / Trivum WebTouch Setup V9 V2.53 build 13163 of Apr 6 2018 09:10:14 (FW 303) allow unauthorized remote attackers to reset the autheEPSS 49.3%CVE-2008-4114—srv.sys in the Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 alEPSS 49.3%CVE-1999-0449—The ExAir sample site in IIS 4 allows remote attackers to cause a denial of service (CPU consumption) via a direct request to the (1) advseaEPSS 49.3%CVE-2020-6010—LearnPress Wordpress plugin version prior and including 3.2.6.7 is vulnerable to SQL InjectionEPSS 49.2%CVE-2007-0069—Unspecified vulnerability in the kernel in Microsoft Windows XP SP2, Server 2003, and Vista allows remote attackers to cause a denial of serEPSS 49.2%CVE-2006-2685—PHP remote file inclusion vulnerability in Basic Analysis and Security Engine (BASE) 1.2.4 and earlier, with register_globals enabled, allowEPSS 49.2%CVE-2021-22017MEDIUMRhttproxy as used in vCenter Server contains a vulnerability due to improper implementation of URI normalization. A malicious actor with netEPSS 49.2%KEVCVE-2008-1311—The TFTP server in PacketTrap pt360 Tool Suite PRO 2.0.3901.0 and earlier allows remote attackers to cause a denial of service (daemon hang)EPSS 49.2%CVE-2023-37580MEDIUMZimbra Collaboration (ZCS) 8 before 8.8.15 Patch 41 allows XSS in the Zimbra Classic Web Client.EPSS 49.1%KEVCVE-2010-0241—The TCP/IP implementation in Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2, when IPv6 is enabled, does not properlEPSS 49.1%