Vulnerabilidades em N/A
161.457 resultadosCVE-2022-28118—SiteServer CMS v7.x allows attackers to execute arbitrary code via a crafted plug-in.EPSS 2.8%CVE-2018-0497—ARM mbed TLS before 2.12.0, before 2.7.5, and before 2.1.14 allows remote attackers to achieve partial plaintext recovery (for a CBC based cEPSS 2.8%CVE-2020-18703—XML External Entities (XXE) in Quokka v0.4.0 allows remote attackers to execute arbitrary code via the component 'quokka/utils/atom.py'.EPSS 2.8%CVE-2008-3205—Directory traversal vulnerability in index.php in Easy-Script Wysi Wiki Wyg 1.0 allows remote attackers to read arbitrary files via a .. (doEPSS 2.8%CVE-2022-22815—path_getbbox in path.c in Pillow before 9.0.0 improperly initializes ImagePath.Path.EPSS 2.8%CVE-2007-1253—Eval injection vulnerability in the (a) kmz_ImportWithMesh.py Script for Blender 0.1.9h, as used in (b) Blender before 2.43, allows user-assEPSS 2.8%CVE-2006-6093—Multiple PHP remote file inclusion vulnerabilities in adminprint.php in PicturesPro Photo Cart 3.9 allow remote attackers to execute arbitraEPSS 2.8%CVE-2006-5384—PHP remote file inclusion vulnerability in modification/SendAlertEmail.php in CDS Software Consortium CDS Agenda 4.2.9 and earlier allows reEPSS 2.8%CVE-2006-5531—PHP remote file inclusion vulnerability in embedded.php in Ascended Guestbook 1.0.0 and earlier allows remote attackers to execute arbitraryEPSS 2.8%CVE-2008-0431—Directory traversal vulnerability in administrator/download.php in IDMOS (aka Phoenix) 1.0 allows remote attackers to read arbitrary files vEPSS 2.8%CVE-2022-25079—TOTOLink A810R V4.1.2cu.5182_B20201026 was discovered to contain a command injection vulnerability in the "Main" function. This vulnerabilitEPSS 2.8%CVE-2010-1267—Multiple directory traversal vulnerabilities in WebMaid CMS 0.2-6 Beta and earlier allow remote attackers to read arbitrary files via directEPSS 2.8%CVE-2006-5419—PHP remote file inclusion vulnerability in client.php in University of Glasgow Specimen Image Database (SID), when register_globals is enablEPSS 2.8%CVE-2002-1840—irssi IRC client 0.8.4, when downloaded after 14-March-2002, could contain a backdoor in the configuration file, which allows remote attackeEPSS 2.8%CVE-2014-5279—The Docker daemon managed by boot2docker 1.2 and earlier improperly enables unauthenticated TCP connections by default, which makes it easieEPSS 2.8%CVE-2009-3385—The mail component in Mozilla SeaMonkey before 1.1.19 does not properly restrict execution of scriptable plugin content, which allows user-aEPSS 2.8%CVE-2006-0298—The XML parser in Mozilla Firefox before 1.5.0.1 and SeaMonkey before 1.0 allows remote attackers to cause a denial of service (crash) and pEPSS 2.8%CVE-2014-2896—The DoAlert function in the (1) TLS and (2) DTLS implementations in wolfSSL CyaSSL before 2.9.4 allows remote attackers to have unspecified EPSS 2.8%CVE-2016-2046—Cross-site scripting (XSS) vulnerability in the UserPortal page in SOPHOS UTM before 9.353 allows remote attackers to inject arbitrary web sEPSS 2.8%CVE-2009-4185—Cross-site scripting (XSS) vulnerability in proxy/smhui/getuiinfo in HP System Management Homepage (SMH) before 6.0 allows remote attackers EPSS 2.8%