Vulnerabilidades em N/A

161.455 resultados
CVE-2001-1013—Apache on Red Hat Linux with with the UserDir directive enabled generates different error codes when a username exists and there is no publiEPSS 65.6%CVE-2016-10175—The NETGEAR WNR2000v5 router leaks its serial number when performing a request to the /BRS_netgear_success.html URI. This serial number alloEPSS 65.5%CVE-2023-29489MEDIUMAn issue was discovered in cPanel before 11.109.9999.116. XSS can occur on the cpsrvd error page via an invalid webcall ID, aka SEC-669. TheEPSS 65.5%CVE-2019-14530—An issue was discovered in custom/ajax_download.php in OpenEMR before 5.0.2 via the fileName parameter. An attacker can download any file (tEPSS 65.5%CVE-2009-4988—Stack-based buffer overflow in NT_Naming_Service.exe in SAP Business One 2005 A 6.80.123 and 6.80.320 allows remote attackers to execute arbEPSS 65.5%CVE-2005-3390—The RFC1867 file upload feature in PHP 4.x up to 4.4.0 and 5.x up to 5.0.5, when register_globals is enabled, allows remote attackers to modEPSS 65.5%CVE-2019-10883—Citrix SD-WAN Center 10.2.x before 10.2.1 and NetScaler SD-WAN Center 10.0.x before 10.0.7 allow Command Injection.EPSS 65.5%CVE-2002-0148—Cross-site scripting vulnerability in Internet Information Server (IIS) 4.0, 5.0 and 5.1 allows remote attackers to execute arbitrary scriptEPSS 65.5%CVE-2017-11811—ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrarEPSS 65.5%CVE-2023-41425MEDIUMCross Site Scripting vulnerability in Wonder CMS v.3.2.0 thru v.3.4.2 allows a remote attacker to execute arbitrary code via a crafted scripEPSS 65.5%CVE-2019-12181—A privilege escalation vulnerability exists in SolarWinds Serv-U before 15.1.7 for Linux.EPSS 65.4%CVE-2014-2624—Unspecified vulnerability in HP Network Node Manager i (NNMi) 9.0x, 9.1x, and 9.2x allows remote attackers to execute arbitrary code via unkEPSS 65.4%CVE-2017-13704—In dnsmasq before 2.78, if the DNS packet size does not match the expected size, the size parameter in a memset call gets a negative value. EPSS 65.4%CVE-2018-16833—Zoho ManageEngine Desktop Central 10.0.271 has XSS via the "Features & Articles" search field to the /advsearch.do?SUBREQUEST=XMLHTTP URI.EPSS 65.4%CVE-2020-26124—openmediavault before 4.1.36 and 5.x before 5.5.12 allows authenticated PHP code injection attacks, via the sortfield POST parameter of rpc.EPSS 65.4%CVE-2008-3558—Stack-based buffer overflow in the WebexUCFObject ActiveX control in atucfobj.dll in Cisco WebEx Meeting Manager before 20.2008.2606.4919 alEPSS 65.4%CVE-2009-3869—Stack-based buffer overflow in the setDiffICM function in the Abstract Window Toolkit (AWT) in Java Runtime Environment (JRE) in Sun Java SEEPSS 65.4%CVE-2015-7645HIGHAdobe Flash Player 18.x through 18.0.0.252 and 19.x through 19.0.0.207 on Windows and OS X and 11.x through 11.2.202.535 on Linux allows remEPSS 65.3%KEVCVE-2023-46574—An issue in TOTOLINK A3700R v.9.1.2u.6165_20211012 allows a remote attacker to execute arbitrary code via the FileName parameter of the UploEPSS 65.3%CVE-2012-3399—Config/diff.php in Basilic 1.5.14 allows remote attackers to execute arbitrary commands via shell metacharacters in the file parameter.EPSS 65.3%