Vulnerabilidades em N/A
161.455 resultadosCVE-2017-12719—An Untrusted Pointer Dereference issue was discovered in Advantech WebAccess versions prior to V8.2_20170817. A remote attacker is able to eEPSS 3.1%CVE-2012-5690—RealNetworks RealPlayer before 16.0.0.282 and RealPlayer SP 1.0 through 1.1.5 allow remote attackers to execute arbitrary code via a RealAudEPSS 3.1%CVE-2025-56110HIGHOS Command Injection vulnerability in Ruijie RG-BCR RG-BCR860 allowing attackers to execute arbitrary commands via a crafted POST request toEPSS 3.1%CVE-2025-56117HIGHOS Command Injection vulnerability in Ruijie X30-PRO X30-PRO-V1_09241521 allowing attackers to execute arbitrary commands via a crafted POSTEPSS 3.1%CVE-2021-31810—An issue was discovered in Ruby through 2.6.7, 2.7.x through 2.7.3, and 3.x through 3.0.1. A malicious FTP server can use the PASV response EPSS 3.0%CVE-2008-1862—ExBB Italia 0.22 and earlier only checks GET requests that use the QUERY_STRING for certain path manipulations, which allows remote attackerEPSS 3.0%CVE-2017-17651—Paid To Read Script 2.0.5 has SQL Injection via the admin/userview.php uid parameter, the admin/viewemcamp.php fnum parameter, or the admin/EPSS 3.0%CVE-2014-4466—WebKit, as used in Apple Safari before 6.2.1, 7.x before 7.1.1, and 8.x before 8.0.1, allows remote attackers to execute arbitrary code or cEPSS 3.0%CVE-2006-5427—PHP remote file inclusion vulnerability in plugins/main.php in Php AMX 0.9.0, when register_globals is enabled or magic_quotes_gpc is disablEPSS 3.0%CVE-2017-17614—Food Order Script 1.0 has SQL Injection via the /list city parameter.EPSS 3.0%CVE-2007-5540—Unspecified vulnerability in Opera before 9.24 allows remote attackers to overwrite functions on pages from other domains and bypass the samEPSS 3.0%CVE-2017-17592—Website Auction Marketplace 2.0.5 has SQL Injection via the search.php cat_id parameter.EPSS 3.0%CVE-2017-17599—Advance Online Learning Management Script 3.1 has SQL Injection via the courselist.php subcatid or popcourseid parameter.EPSS 3.0%CVE-2017-17616—Event Search Script 1.0 has SQL Injection via the /event-list city parameter.EPSS 3.0%CVE-2017-15976—ZeeBuddy 2x allows SQL Injection via the admin/editadgroup.php groupid parameter, a different vulnerability than CVE-2008-3604.EPSS 3.0%CVE-2017-15975—Vastal I-Tech Dating Zone 0.9.9 allows SQL Injection via the 'product_id' to add_to_cart.php, a different vulnerability than CVE-2008-4461.EPSS 3.0%CVE-2017-17611—Doctor Search Script 1.0 has SQL Injection via the /list city parameter.EPSS 3.0%CVE-2008-2228—PHP remote file inclusion vulnerability in portfolio/commentaires/derniers_commentaires.php in Cyberfolio 7.12, when register_globals is enaEPSS 3.0%CVE-2007-1075—TurboFTP 5.30 Build 572 allows remote servers to cause a denial of service (CPU consumption) via a response with a large number of newline cEPSS 3.0%CVE-2017-17671—vBulletin through 5.3.x on Windows allows remote PHP code execution because a require_once call is reachable with an unauthenticated requestEPSS 3.0%