Vulnerabilidades em n/a
161.455 resultadosCVE-2014-0792—Sonatype Nexus 1.x and 2.x before 2.7.1 allows remote attackers to create arbitrary objects and execute arbitrary code via unspecified vectoEPSS 3.0%CVE-2013-0176—The publickey_from_privatekey function in libssh before 0.5.4, when no algorithm is matched during negotiations, allows remote attackers to EPSS 3.0%CVE-2017-6816—In WordPress before 4.7.3 (wp-admin/plugins.php), unintended files can be deleted by administrators using the plugin deletion functionality.EPSS 3.0%CVE-2012-6084—modules/m_capab.c in (1) ircd-ratbox before 3.0.8 and (2) Charybdis before 3.4.2 does not properly support capability negotiation during serEPSS 3.0%CVE-2015-1862—The crash reporting feature in Abrt allows local users to gain privileges by leveraging an execve by root after a chroot into a user-specifiEPSS 3.0%CVE-2017-9751—opcodes/rl78-decode.opc in GNU Binutils 2.28 has an unbounded GETBYTE macro, which allows remote attackers to cause a denial of service (bufEPSS 3.0%CVE-2017-9755—opcodes/i386-dis.c in GNU Binutils 2.28 does not consider the number of registers for bnd mode, which allows remote attackers to cause a denEPSS 3.0%CVE-2016-9219—A vulnerability with IPv6 UDP ingress packet processing in Cisco Wireless LAN Controller (WLC) Software could allow an unauthenticated, remoEPSS 3.0%CVE-2008-1860—Static code injection vulnerability in admin.php in LokiCMS 0.3.3 and earlier allows remote attackers to inject arbitrary PHP code into inclEPSS 3.0%CVE-2017-12938—UnRAR before 5.5.7 allows remote attackers to bypass a directory-traversal protection mechanism via vectors involving a symlink to the . dirEPSS 3.0%CVE-2011-1959—The snoop_read function in wiretap/snoop.c in Wireshark 1.2.x before 1.2.17 and 1.4.x before 1.4.7 does not properly handle certain virtualiEPSS 3.0%CVE-2007-0721—Unspecified vulnerability in diskimages-helper in Apple Mac OS X 10.3.9 and 10.4 through 10.4.8 allows remote user-assisted attackers to exeEPSS 3.0%CVE-2010-0605—SQL injection vulnerability in scp/ajax.php in osTicket before 1.6.0 Stable allows remote authenticated users, with "Staff" permissions, to EPSS 3.0%CVE-2020-8004—STMicroelectronics STM32F1 devices have Incorrect Access Control.EPSS 3.0%CVE-2010-1873—SQL injection vulnerability in the Jvehicles (com_jvehicles) component 1.0, 2.0, and 2.1111 for Joomla! allows remote attackers to execute aEPSS 3.0%CVE-2022-40982MEDIUMInformation exposure through microarchitectural state after transient execution in certain vector execution units for some Intel(R) ProcessoEPSS 3.0%CVE-2004-2533—Serv-U FTP Server 4.1 (possibly 4.0) allows remote attackers to cause a denial of service (application crash) via a SITE CHMOD command with EPSS 3.0%CVE-2018-11564—Stored XSS in YOOtheme Pagekit 1.0.13 and earlier allows a user to upload malicious code via the picture upload feature. A user with elevateEPSS 3.0%CVE-2006-4785—SQL injection vulnerability in blog/edit.php in Moodle 1.6.1 and earlier allows remote attackers to execute arbitrary SQL commands via the fEPSS 3.0%CVE-2006-0444—SQL injection vulnerability in index.php in Phpclanwebsite (aka PCW) 1.23.1 allows remote attackers to execute arbitrary SQL commands via thEPSS 3.0%