Vulnerabilidades em N/A
161.457 resultadosCVE-2021-33203—Django before 2.2.24, 3.x before 3.1.12, and 3.2.x before 3.2.4 has a potential directory traversal via django.contrib.admindocs. Staff membEPSS 2.7%CVE-2006-6592—Multiple PHP remote file inclusion vulnerabilities in Bloq 0.5.4 allow remote attackers to execute arbitrary PHP code via a URL in the page[EPSS 2.7%CVE-2018-0330—A vulnerability in the NX-API management application programming interface (API) in devices running, or based on, Cisco NX-OS Software couldEPSS 2.7%CVE-2011-5224—SQL injection vulnerability in the Sentinel plugin 1.0.0 for WordPress allows remote attackers to execute arbitrary SQL commands via unspeciEPSS 2.7%CVE-2004-1722—SQL injection vulnerability in calendar.html in Merak Mail Server 5.2.7 allows remote attackers to execute arbitrary SQL statements via the EPSS 2.7%CVE-2022-27404—FreeType commit 1e2eb65048f75c64b68708efed6ce904c31f3b2f was discovered to contain a heap buffer overflow via the function sfnt_init_face.EPSS 2.7%CVE-2008-6293—admin/Index.php in Acc Real Estate 4.0 allows remote attackers to bypass authentication and gain administrative access by setting the usernaEPSS 2.7%CVE-2008-6292—Acc Autos 4.0 allows remote attackers to bypass authentication and gain administrative access by setting the (1) username_cookie to "admin,"EPSS 2.7%CVE-2008-6294—admin/Index.php in Acc Statistics 1.1 allows remote attackers to bypass authentication and gain administrative access by setting the usernamEPSS 2.7%CVE-2016-1982—The remove_chunked_transfer_coding function in filters.c in Privoxy before 3.0.24 allows remote attackers to cause a denial of service (invaEPSS 2.7%CVE-2021-36385—A SQL Injection vulnerability in Cerner Mobile Care 5.0.0 allows remote unauthenticated attackers to execute arbitrary SQL commands via a FuEPSS 2.7%CVE-2006-2028—Cross-site scripting (XSS) vulnerability in imagelist.php in Jeremy Ashcraft Simplog 0.9.3 and earlier allows remote attackers to inject arbEPSS 2.7%CVE-2005-4217—Perl in Apple Mac OS X Server 10.3.9 does not properly drop privileges when using the "$<" variable to set uid, which allows attackers to gaEPSS 2.7%CVE-2002-1734—NewsPro 1.01 allows remote attackers to gain unauthorized administrator access by setting their authentication cookie to "logged,true".EPSS 2.7%CVE-2019-19521—libc in OpenBSD 6.6 allows authentication bypass via the -schallenge username, as demonstrated by smtpd, ldapd, or radiusd. This is related EPSS 2.7%CVE-2006-0853—Buffer overflow in the IMAP service of TrueNorth Internet Anywhere (IA) eMailserver 5.3.4 allows remote authenticated users to cause a deniaEPSS 2.7%CVE-2002-0710—Directory traversal vulnerability in sendform.cgi 1.44 and earlier allows remote attackers to read arbitrary files by specifying the desiredEPSS 2.7%CVE-2007-0056—Multiple cross-site scripting (XSS) vulnerabilities in AShop Deluxe 4.5 and AShop Administration Panel allow remote attackers to inject arbiEPSS 2.7%CVE-2007-0874—Allons_voter 1.0 allows remote attackers to bypass authentication and access certain administrative functionality via a direct request for (EPSS 2.7%CVE-2013-1443—The authentication framework (django.contrib.auth) in Django 1.4.x before 1.4.8, 1.5.x before 1.5.4, and 1.6.x before 1.6 beta 4 allows remoEPSS 2.7%