Vulnerabilidades em N/A
161.455 resultadosCVE-2020-7055—An issue was discovered in Elementor 2.7.4. Arbitrary file upload is possible in the Elementor Import Templates function, allowing an attackEPSS 3.1%CVE-2013-6385—The form API in Drupal 6.x before 6.29 and 7.x before 7.24, when used with unspecified third-party modules, performs form validation even whEPSS 3.1%CVE-2020-28278—Prototype pollution vulnerability in 'shvl' versions 1.0.0 through 2.0.1 allows an attacker to cause a denial of service and may lead to remEPSS 3.1%CVE-2020-28277—Prototype pollution vulnerability in 'dset' versions 1.0.0 through 2.0.1 allows attacker to cause a denial of service and may lead to remoteEPSS 3.1%CVE-2006-1922—PHP remote file inclusion vulnerability in (1) about.php or (2) auth.php in TotalCalendar allows remote attackers to execute arbitrary PHP cEPSS 3.1%CVE-2020-28280—Prototype pollution vulnerability in 'predefine' versions 0.0.0 through 0.1.2 allows an attacker to cause a denial of service and may lead tEPSS 3.1%CVE-2020-28276—Prototype pollution vulnerability in 'deep-set' versions 1.0.0 through 1.0.1 allows attacker to cause a denial of service and may lead to reEPSS 3.1%CVE-2017-11740—In Zoho ManageEngine Application Manager 13.1 Build 13100, the administrative user has the ability to upload files/binaries that can be execEPSS 3.1%CVE-2005-1061—The secure script in LogWatch before 2.6-2 allows attackers to prevent LogWatch from detecting malicious activity via certain strings in theEPSS 3.1%CVE-2009-4776—Buffer overflow in Hitachi Cosminexus V4 through V8, Processing Kit for XML, and Developer's Kit for Java, as used in products such as uCosmEPSS 3.1%CVE-2006-5790—Multiple format string vulnerabilities in elogd.c in ELOG 2.6.2 and earlier allow remote attackers to cause a denial of service (crash) and EPSS 3.1%CVE-2008-1667—The Probe Builder Service (aka PBOVISServer.exe) in European Performance Systems (EPS) Probe Builder 2.2 before A.02.20.901, as used in HP OEPSS 3.1%CVE-2003-0121—Clearswift MAILsweeper 4.x allows remote attackers to bypass attachment detection via an attachment that does not specify a MIME-Version heaEPSS 3.1%CVE-2005-1998—Directory traversal vulnerability in admin.php in McGallery 1.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the laEPSS 3.1%CVE-2021-40883—A Remote Code Execution (RCE) vulnerability exists in emlog 5.3.1 via content/plugins.EPSS 3.1%CVE-2018-9172—The Iptanus WordPress File Upload plugin before 4.3.3 for WordPress mishandles shortcode attributes.EPSS 3.1%CVE-2018-14473—OCS Inventory 2.4.1 lacks a proper XML parsing configuration, allowing the use of external entities. This issue can be exploited by an attacEPSS 3.1%CVE-2013-2341—Unspecified vulnerability on the HP ProCurve JC###A, JC###B, JD###A, JD###B, JE###A, JF###A, JF###B, JF###C, JG###A, 658250-B21, and 658247-EPSS 3.1%CVE-2009-4688—Multiple cross-site scripting (XSS) vulnerabilities in index.php in PHP Shopping Cart Selling Website Script allow remote attackers to injecEPSS 3.1%CVE-2000-0601—LeafChat 1.7 IRC client allows a remote IRC server to cause a denial of service by rapidly sending a large amount of error messages.EPSS 3.1%