Vulnerabilidades em n/a
161.455 resultadosCVE-2021-21820CRITICALA hard-coded password vulnerability exists in the Libcli Test Environment functionality of D-LINK DIR-3040 1.13B03. A specially crafted netwEPSS 3.0%CVE-2018-19135—ClipperCMS 1.3.3 does not have CSRF protection on its kcfinder file upload (enabled by default). This can be used by an attacker to perform EPSS 3.0%CVE-2009-4931—Stack-based buffer overflow in Groovy Media Player 1.1.0 allows remote attackers to cause a denial of service (application crash) or possiblEPSS 3.0%CVE-2008-3198—Mozilla Firefox 3.x before 3.0.1 allows remote attackers to inject arbitrary web script into a chrome document via unspecified vectors, as dEPSS 3.0%CVE-2006-2295—Directory traversal vulnerability in Dynamic Galerie 1.0 allows remote attackers to access arbitrary files via an absolute path in the pfad EPSS 3.0%CVE-2023-48974CRITICALCross Site Scripting vulnerability in Axigen WebMail prior to 10.3.3.61 allows a remote attacker to escalate privileges via a crafted scriptEPSS 3.0%CVE-2018-18728—An issue was discovered on Tenda AC9 V15.03.05.19(6318)_CN, AC15 V15.03.05.19_CN, and AC18 V15.03.05.19(6318)_CN devices. They allow remote EPSS 3.0%CVE-2008-2032—The FTP service in Acritum Femitter Server 1.03 allows remote attackers to cause a denial of service (crash) by sending multiple crafted RETEPSS 3.0%CVE-2008-6734—Directory traversal vulnerability in Public/index.php in Keller Web Admin CMS 0.94 Pro allows remote attackers to include and execute arbitrEPSS 3.0%CVE-2010-2316—Multiple cross-site scripting (XSS) vulnerabilities in default.asp in WmsCms 2.0 and earlier allow remote attackers to inject arbitrary web EPSS 3.0%CVE-2008-4601—Cross-site scripting (XSS) vulnerability in the login feature in Habari CMS 0.5.1 allows remote attackers to inject arbitrary web script or EPSS 3.0%CVE-2011-3221—QuickTime in Apple Mac OS X before 10.7.2 does not properly handle the atom hierarchy in movie files, which allows remote attackers to execuEPSS 3.0%CVE-2012-4220—diagchar_core.c in the Qualcomm Innovation Center (QuIC) Diagnostics (aka DIAG) kernel-mode driver for Android 2.3 through 4.2 allows attackEPSS 3.0%CVE-2024-26503CRITICALUnrestricted File Upload vulnerability in Greek Universities Network Open eClass v.3.15 and earlier allows attackers to run arbitrary code vEPSS 3.0%CVE-2020-13854—Artica Pandora FMS 7.44 allows privilege escalation.EPSS 3.0%CVE-2000-0903—Directory traversal vulnerability in Voyager web server 2.01B in the demo disks for QNX 405 allows remote attackers to read arbitrary files EPSS 3.0%CVE-2000-0914—OpenBSD 2.6 and earlier allows remote attackers to cause a denial of service by flooding the server with ARP requests.EPSS 3.0%CVE-2001-0306—Directory traversal vulnerability in ITAfrica WEBactive HTTP Server 1.00 allows remote attackers to read arbitrary files via a .. (dot dot) EPSS 3.0%CVE-2001-0074—Directory traversal vulnerability in print.cgi in Technote allows remote attackers to read arbitrary files via a .. (dot dot) attack in the EPSS 3.0%CVE-2016-5234—Buffer overflow in Huawei VP9660, VP9650, and VP9630 multipoint control unit devices with software before V500R002C00SPC200 and RSE6500 videEPSS 3.0%