Vulnerabilidades em n/a
161.457 resultadosCVE-2018-1000864—A denial of service vulnerability exists in Jenkins 2.153 and earlier, LTS 2.138.3 and earlier in CronTab.java that allows attackers with OvEPSS 2.8%CVE-2019-11339—The studio profile decoder in libavcodec/mpeg4videodec.c in FFmpeg 4.0 before 4.0.4 and 4.1 before 4.1.2 allows remote attackers to cause a EPSS 2.8%CVE-2016-3105—The convert extension in Mercurial before 3.8 might allow context-dependent attackers to execute arbitrary code via a crafted git repositoryEPSS 2.8%CVE-2013-4684—flowd in Juniper Junos 10.4 before 10.4S14, 11.4 before 11.4R8, 12.1 before 12.1R7, and 12.1X44 before 12.1X44-D15 on SRX devices, when PIM EPSS 2.8%CVE-2021-29996—Mark Text through 0.16.3 allows attackers arbitrary command execution. This could lead to Remote Code Execution (RCE) by opening .md files cEPSS 2.8%CVE-2021-3169—An issue in Jumpserver before 2.6.2, before 2.5.4, before 2.4.5 allows attackers to create a connection token through an API which does not EPSS 2.8%CVE-2018-18930—The Tightrope Media Carousel digital signage product 7.0.4.104 contains an arbitrary file upload vulnerability in the Manage Bulletins/UploaEPSS 2.8%CVE-2014-3319—Directory traversal vulnerability in the Real-Time Monitoring Tool (RTMT) in Cisco Unified Communications Manager (CM) 10.0(1) allows remoteEPSS 2.8%CVE-2022-42161HIGHD-Link COVR 1200,1202,1203 v1.08 was discovered to contain a command injection vulnerability via the /SetTriggerWPS/PIN parameter at functioEPSS 2.8%CVE-2001-0202—Picserver web server allows remote attackers to read arbitrary files via a .. (dot dot) attack in an HTTP GET request.EPSS 2.8%CVE-2018-18566—The SIP service in Polycom VVX 500 and 601 devices 5.8.0.12848 and earlier allow remote attackers to obtain sensitive phone configuration inEPSS 2.8%CVE-2016-4169—Adobe Experience Manager 6.0, 6.1, and 6.2 allow attackers to obtain sensitive audit log event information via unspecified vectors.EPSS 2.8%CVE-2022-42156HIGHD-Link COVR 1200,1203 v1.08 was discovered to contain a command injection vulnerability via the tomography_ping_number parameter at functionEPSS 2.8%CVE-2007-6502—Hosting Controller 6.1 Hot fix 3.3 and earlier allows remote authenticated users to obtain sensitive information via (1) the AdminName and AEPSS 2.8%CVE-2020-25854—The function DecWPA2KeyData() in the Realtek RTL8195A Wi-Fi Module prior to versions released in April 2020 (up to and excluding 2.08) does EPSS 2.8%CVE-2017-9726—The Ins_MDRP function in base/ttinterp.c in Artifex Ghostscript GhostXPS 9.21 allows remote attackers to cause a denial of service (heap-basEPSS 2.8%CVE-2020-25855—The function AES_UnWRAP() in the Realtek RTL8195A Wi-Fi Module prior to versions released in April 2020 (up to and excluding 2.08) does not EPSS 2.8%CVE-2016-8902—SQL injection vulnerability in the categoriesServlet servlet in dotCMS before 3.3.1 allows remote not authenticated attackers to execute arbEPSS 2.8%CVE-2022-37149—WAVLINK WL-WN575A3 RPT75A3.V4300.201217 was discovered to contain a command injection vulnerability when operating the file adm.cgi. This vuEPSS 2.8%CVE-2017-9846—Winmail Server 6.1 allows remote code execution by authenticated users who leverage directory traversal in a netdisk.php move_folder_file caEPSS 2.8%