Vulnerabilidades em n/a
161.455 resultadosCVE-2008-3181—Unrestricted file upload vulnerability in upload.php in ContentNow CMS 1.4.1 allows remote authenticated users to execute arbitrary code by EPSS 3.1%CVE-1999-1518—Operating systems with shared memory implementations based on BSD 4.4 code allow a user to conduct a denial of service and bypass memory limEPSS 3.1%CVE-2021-34084—OS command injection vulnerability in Turistforeningen node-s3-uploader through 2.0.3 for Node.js allows attackers to execute arbitrary commEPSS 3.1%CVE-2005-4604—Buffer overflow in MTink in the printer-filters-utils package allows local users to execute arbitrary code via a long HOME environment variaEPSS 3.1%CVE-2021-43523CRITICALIn uClibc and uClibc-ng before 1.0.39, incorrect handling of special characters in domain names returned by DNS servers via gethostbyname, gEPSS 3.1%CVE-2019-14235—An issue was discovered in Django 1.11.x before 1.11.23, 2.1.x before 2.1.11, and 2.2.x before 2.2.4. If passed certain inputs, django.utilsEPSS 3.1%CVE-2015-7372—Directory traversal vulnerability in delivery-dev/al.php in Revive Adserver before 3.2.2 allows remote attackers to include and execute arbiEPSS 3.1%CVE-2006-0877—Cross-site scripting vulnerability in Easy Forum 2.5 allows remote attackers to inject arbitrary web script or HTML via the image variable.EPSS 3.1%CVE-2002-0931—Cross-site scripting vulnerabilities in MyHelpDesk 20020509, and possibly other versions, allows remote attackers to execute script as otherEPSS 3.1%CVE-2005-4153—Mailman 2.1.4 through 2.1.6 allows remote attackers to cause a denial of service via a message that causes the server to "fail with an OverfEPSS 3.1%CVE-2013-6385—The form API in Drupal 6.x before 6.29 and 7.x before 7.24, when used with unspecified third-party modules, performs form validation even whEPSS 3.1%CVE-2020-26141—An issue was discovered in the ALFA Windows 10 driver 6.1316.1209 for AWUS036H. The Wi-Fi implementation does not verify the Message IntegriEPSS 3.1%CVE-2021-26704—EPrints 3.4.2 allows remote attackers to execute arbitrary commands via crafted input to the verb parameter in a cgi/toolbox/toolbox URI.EPSS 3.1%CVE-2011-0766—The random number generator in the Crypto application before 2.0.2.2, and SSH before 2.0.5, as used in the Erlang/OTP ssh library before R14EPSS 3.1%CVE-2021-26702—EPrints 3.4.2 exposes a reflected XSS opportunity in the dataset parameter to the cgi/dataset_dictionary URI.EPSS 3.1%CVE-2022-21165CRITICALArbitrary Command InjectionEPSS 3.1%CVE-2000-0044—Macros in War FTP 1.70 and 1.67b2 allow local or remote attackers to read arbitrary files or execute commands.EPSS 3.1%CVE-2022-0225—A flaw was found in Keycloak. This flaw allows a privileged attacker to use the malicious payload as the group name while creating a new groEPSS 3.1%CVE-2012-1288—The UTC Fire & Security GE-MC100-NTP/GPS-ZB Master Clock device uses hardcoded credentials for an administrative account, which makes it easEPSS 3.1%CVE-2020-7055—An issue was discovered in Elementor 2.7.4. Arbitrary file upload is possible in the Elementor Import Templates function, allowing an attackEPSS 3.1%