Vulnerabilidades em N/A
161.455 resultadosCVE-2001-0966—Directory traversal vulnerability in Nudester 1.10 and earlier allows remote attackers to read or write arbitrary files via a .. (dot dot) iEPSS 3.0%CVE-2008-4094—Multiple SQL injection vulnerabilities in Ruby on Rails before 2.1.1 allow remote attackers to execute arbitrary SQL commands via the (1) :lEPSS 3.0%CVE-2006-4270—PHP remote file inclusion vulnerability in mambelfish.class.php in the mambelfish component (com_mambelfish) 1.1 and earlier for Mambo allowEPSS 3.0%CVE-2002-0571—Oracle Oracle9i database server 9.0.1.x allows local users to access restricted data via a SQL query using ANSI outer join syntax.EPSS 3.0%CVE-2015-1558—Asterisk Open Source 12.x before 12.8.1 and 13.x before 13.1.1, when using the PJSIP channel driver, does not properly reclaim RTP ports, whEPSS 3.0%CVE-2011-1806—Google Chrome before 11.0.696.71 does not properly implement the GPU command buffer, which allows remote attackers to execute arbitrary codeEPSS 3.0%CVE-2021-34543—The web administration server in Solar-Log 500 before 2.8.2 Build 52 does not require authentication, which allows remote attackers to gain EPSS 3.0%CVE-2020-35184—The official composer docker images before 1.8.3 contain a blank password for a root user. System using the composer docker container deployEPSS 3.0%CVE-2007-0429—DivXBrowserPlugin (aka DivX Web Player) npdivx32.dll, as distributed with DivX Player 6.4.1, allows remote attackers to cause a denial of seEPSS 3.0%CVE-2005-1502—Cross-site scripting (XSS) vulnerability in MidiCart PHP Shopping Cart allows remote attackers to inject arbitrary web script or HTML via thEPSS 3.0%CVE-2017-14848—WPHRM Human Resource Management System for WordPress 1.0 allows SQL Injection via the employee_id parameter.EPSS 3.0%CVE-2014-7885—Multiple unspecified vulnerabilities in HP ArcSight Enterprise Security Manager (ESM) before 6.8c have unknown impact and remote attack vectEPSS 3.0%CVE-2013-0673—Directory traversal vulnerability in the web interface in the Health Monitor service in MatrikonOPC A&E Historian 1.0.0.0 allows remote attaEPSS 3.0%CVE-2020-14408—An issue was discovered in Agentejo Cockpit 0.10.2. Insufficient sanitization of the to parameter in the /auth/login route allows for injectEPSS 3.0%CVE-2009-2395—SQL injection vulnerability in the K2 (com_k2) component 1.0.1 Beta and earlier for Joomla! allows remote attackers to execute arbitrary SQLEPSS 3.0%CVE-2018-19971—JFrog Artifactory Pro 6.5.9 has Incorrect Access Control.EPSS 3.0%CVE-2006-4884—Multiple cross-site scripting (XSS) vulnerabilities in IDevSpot iSupport 1.8 allow remote attackers to inject arbitrary web script or HTML vEPSS 3.0%CVE-2008-5022—The nsXMLHttpRequest::NotifyEventListeners method in Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18,EPSS 3.0%CVE-2020-9027—ELTEX NTP-RG-1402G 1v10 3.25.3.32 devices allow OS command injection via the TRACE field of the resource ping.cmd. The NTP-2 device is also EPSS 3.0%CVE-2015-1191—Multiple directory traversal vulnerabilities in pigz 2.3.1 allow remote attackers to write to arbitrary files via a (1) full pathname or (2)EPSS 3.0%