Vulnerabilidades em N/A
160.229 resultadosCVE-2014-2671—Microsoft Windows Media Player (WMP) 11.0.5721.5230 allows remote attackers to cause a denial of service (memory corruption) or possibly havEPSS 46.3%CVE-2024-44849CRITICALQualitor up to 8.24 is vulnerable to Remote Code Execution (RCE) via Arbitrary File Upload in checkAcesso.php.EPSS 46.3%CVE-2025-29306CRITICALAn issue in FoxCMS v.1.2.5 allows a remote attacker to execute arbitrary code via the case display page in the index.html component.EPSS 46.3%CVE-2008-1446—Integer overflow in the Internet Printing Protocol (IPP) ISAPI extension in Microsoft Internet Information Services (IIS) 5.0 through 7.0 onEPSS 46.3%CVE-2018-8736—A privilege escalation vulnerability in Nagios XI 5.2.x through 5.4.x before 5.4.13 allows an attacker to leverage an RCE vulnerability escaEPSS 46.3%CVE-2006-3835—Apache Tomcat 5 before 5.5.17 allows remote attackers to list directories via a semicolon (;) preceding a filename with a mapped extension, EPSS 46.2%CVE-2008-2689—PHP remote file inclusion vulnerability in pub/clients.php in BrowserCRM 5.002.00 allows remote attackers to execute arbitrary PHP code via EPSS 46.2%CVE-2013-5036—The Square Squash allows remote attackers to execute arbitrary code via a YAML document in the (1) namespace parameter to the deobfuscation EPSS 46.2%CVE-2014-6446—The Infusionsoft Gravity Forms plugin 1.5.3 through 1.5.10 for WordPress does not properly restrict access, which allows remote attackers toEPSS 46.2%CVE-2015-3008—Asterisk Open Source 1.8 before 1.8.32.3, 11.x before 11.17.1, 12.x before 12.8.2, and 13.x before 13.3.2 and Certified Asterisk 1.8.28 befoEPSS 46.2%CVE-2008-2245—Heap-based buffer overflow in the InternalOpenColorProfile function in mscms.dll in Microsoft Windows Image Color Management System (MSCMS) EPSS 46.1%CVE-2022-35411—rpc.py through 0.6.0 allows Remote Code Execution because an unpickle occurs when the "serializer: pickle" HTTP header is sent. In other worEPSS 46.1%CVE-2023-30145CRITICALCamaleon CMS v2.7.0 was discovered to contain a Server-Side Template Injection (SSTI) vulnerability via the formats parameter.EPSS 46.1%CVE-2015-9323—The 404-to-301 plugin before 2.0.3 for WordPress has SQL injection.EPSS 46.1%CVE-2014-3506—d1_both.c in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before 1.0.0n, and 1.0.1 before 1.0.1i allows remote attackers tEPSS 46.1%CVE-2019-16313—ifw8 Router ROM v4.31 allows credential disclosure by reading the action/usermanager.htm HTML source code.EPSS 46.1%CVE-2008-1505—PHP remote file inclusion vulnerability in the SSTREAMTV custompages (com_custompages) 1.1 and earlier component for Joomla! allows remote aEPSS 46.1%CVE-2012-6530—Stack-based buffer overflow in Sysax Multi Server before 5.52, when HTTP is enabled, allows remote authenticated users with the create foldeEPSS 46.1%CVE-2024-46938HIGHAn issue was discovered in Sitecore Experience Platform (XP), Experience Manager (XM), and Experience Commerce (XC) 8.0 Initial Release throEPSS 46.1%CVE-2018-20470—An issue was discovered in Tyto Sahi Pro through 7.x.x and 8.0.0. A directory traversal (arbitrary file access) vulnerability exists in the EPSS 46.1%