Vulnerabilidades em n/a
161.457 resultadosCVE-2022-35254HIGHAn unauthenticated attacker can cause a denial-of-service to the following products: Ivanti Connect Secure (ICS) in versions prior to 9.1R14EPSS 2.7%CVE-2009-4192—Directory traversal vulnerability in dialog/file_manager.php in Interspire Knowledge Manager 5 allows remote attackers to read arbitrary filEPSS 2.7%CVE-2009-2723—Unspecified vulnerability in deserialization in the Provider class in Sun Java SE 5.0 before Update 20 has unknown impact and attack vectorsEPSS 2.7%CVE-2011-2703—Multiple SQL injection vulnerabilities in MapServer before 4.10.7, 5.x before 5.6.7, and 6.x before 6.0.1 allow remote attackers to execute EPSS 2.7%CVE-2015-7271—Dell Integrated Remote Access Controller (iDRAC) 7/8 before 2.21.21.21 has a format string issue in racadm getsystinfo.EPSS 2.7%CVE-2002-0353—The ASN.1 parser in Ethereal 0.9.2 and earlier allows remote attackers to cause a denial of service (crash) via a certain malformed packet, EPSS 2.7%CVE-2001-1075—poprelayd script before 2.0 in Cobalt RaQ3 servers allows remote attackers to bypass authentication for relaying by causing a "POP login by EPSS 2.7%CVE-2006-3203—The installation of Ultimate PHP Board (UPB) 1.9.6 and earlier includes a default administrator login account and password, which allows remEPSS 2.7%CVE-2022-35258—An unauthenticated attacker can cause a denial-of-service to the following products: Ivanti Connect Secure (ICS) in versions prior to 9.1R14EPSS 2.7%CVE-2008-2146—wp-includes/vars.php in Wordpress before 2.2.3 does not properly extract the current path from the PATH_INFO ($PHP_SELF), which allows remotEPSS 2.7%CVE-2010-1309—Directory traversal vulnerability in Irmin CMS (formerly Pepsi CMS) 0.6 BETA2 allows remote attackers to read arbitrary files via a .. (dot EPSS 2.7%CVE-2011-0817—Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 25 and earlier, when running on WindowsEPSS 2.7%CVE-2019-12935HIGHShopware before 5.5.8 has XSS via the Query String to the backend/Login or backend/Login/load/ URI.EPSS 2.7%CVE-2016-6634—Cross-site scripting (XSS) vulnerability in the network settings page in WordPress before 4.5 allows remote attackers to inject arbitrary weEPSS 2.7%CVE-2015-5951—A file upload issue exists in the specid parameter in Thomson Reuters FATCH before 5.2, which allows malicious users to upload arbitrary PHPEPSS 2.7%CVE-2008-1392—The default configuration of VMware Workstation 6.0.2, VMware Player 2.0.x before 2.0.3, and VMware ACE 2.0.x before 2.0.1 makes the consoleEPSS 2.7%CVE-2017-9754—The process_otr function in bfd/versados.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.28, doEPSS 2.7%CVE-2007-2257—PHP remote file inclusion vulnerability in subscp.php in Fully Modded phpBB2 allows remote attackers to execute arbitrary PHP code via a URLEPSS 2.7%CVE-2005-2334—Y.SAK allows remote attackers to execute arbitrary commands via shell metacharacters in the $no variable to (1) w_s3mbfm.cgi, (2) w_s3adix.cEPSS 2.7%CVE-2014-8652—Elipse E3 3.x and earlier allows remote attackers to cause a denial of service (application crash and plant outage) via a rapid series of HTEPSS 2.7%