Vulnerabilidades em N/A
159.958 resultadosCVE-2020-24186CRITICALA Remote Code Execution vulnerability exists in the gVectors wpDiscuz plugin 7.0 through 7.0.4 for WordPress, which allows unauthenticated uEPSS 94.5%CVE-2010-3972—Heap-based buffer overflow in the TELNET_STREAM_CONTEXT::OnSendData function in ftpsvc.dll in Microsoft FTP Service 7.0 and 7.5 for InternetEPSS 94.5%CVE-2020-14092—The CodePeople Payment Form for PayPal Pro plugin before 1.1.65 for WordPress allows SQL Injection.EPSS 94.5%CVE-2017-18368CRITICALThe ZyXEL P660HN-T1A v1 TCLinux Fw $7.3.15.0 v001 / 3.40(ULM.0)b31 router distributed by TrueOnline has a command injection vulnerability inEPSS 94.5%KEVCVE-2009-0580—Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18, when FORM authentication is used, allows remote attackerEPSS 94.4%CVE-2012-1460—The Gzip file parser in Antiy Labs AVL SDK 2.0.3.7, Quick Heal (aka Cat QuickHeal) 11.00, Command Antivirus 5.2.11.5, eSafe 7.0.17.0, F-ProtEPSS 94.4%CVE-2016-4117HIGHAdobe Flash Player 21.0.0.226 and earlier allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wilEPSS 94.4%KEVCVE-2016-2004—HPE Data Protector before 7.03_108, 8.x before 8.15, and 9.x before 9.06 allow remote attackers to execute arbitrary code via unspecified veEPSS 94.3%CVE-2023-30258CRITICALCommand Injection vulnerability in MagnusSolution magnusbilling 6.x and 7.x allows remote attackers to run arbitrary commands via unauthentiEPSS 94.3%CVE-2010-0425—modules/arch/win32/mod_isapi.c in mod_isapi in the Apache HTTP Server 2.0.37 through 2.0.63, 2.2.0 through 2.2.14, and 2.3.x before 2.3.7, wEPSS 94.2%CVE-2012-1463—The ELF file parser in AhnLab V3 Internet Security 2011.01.18.00, Bitdefender 7.2, Quick Heal (aka Cat QuickHeal) 11.00, Command Antivirus 5EPSS 94.2%CVE-2007-5659HIGHMultiple buffer overflows in Adobe Reader and Acrobat 8.1.1 and earlier allow remote attackers to execute arbitrary code via a PDF file withEPSS 94.2%KEVCVE-2011-0611HIGHAdobe Flash Player before 10.2.154.27 on Windows, Mac OS X, Linux, and Solaris and 10.2.156.12 and earlier on Android; Adobe AIR before 2.6.EPSS 94.2%KEVCVE-2019-12989CRITICALCitrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 allow SQL Injection.EPSS 94.1%KEVCVE-2016-1524—Multiple unrestricted file upload vulnerabilities in NETGEAR Management System NMS300 1.5.0.11 and earlier allow remote attackers to executeEPSS 94.1%CVE-2017-1000486CRITICALPrimetek Primefaces 5.x is vulnerable to a weak encryption flaw resulting in remote code executionEPSS 94.1%KEVCVE-2012-1422—The TAR file parser in Quick Heal (aka Cat QuickHeal) 11.00, NOD32 Antivirus 5795, Norman Antivirus 6.06.12, and Rising Antivirus 22.83.00.0EPSS 94.1%CVE-2002-0840—Cross-site scripting (XSS) vulnerability in the default error page of Apache 2.0 before 2.0.43, and 1.3.x up to 1.3.26, when UseCanonicalNamEPSS 94.0%CVE-2020-17506—Artica Web Proxy 4.30.00000000 allows remote attacker to bypass privilege detection and gain web backend administrator privileges through SQEPSS 94.0%CVE-2010-3964—Unrestricted file upload vulnerability in the Document Conversions Launcher Service in Microsoft Office SharePoint Server 2007 SP2, when theEPSS 93.9%