Vulnerabilidades em n/a
161.457 resultadosCVE-2019-14695—A SQL injection vulnerability exists in the Sygnoos Popup Builder plugin before 3.45 for WordPress. Successful exploitation of this vulnerabEPSS 2.7%CVE-2007-4895—Directory traversal vulnerability in dwoprn.php in Sisfo Kampus 2006 (Semarang 3) allows remote attackers to read arbitrary files via the f EPSS 2.7%CVE-2013-0312—389 Directory Server before 1.3.0.4 allows remote attackers to cause a denial of service (crash) via a zero length LDAP control sequence.EPSS 2.7%CVE-2020-15468—Persian VIP Download Script 1.0 allows SQL Injection via the cart_edit.php active parameter.EPSS 2.7%CVE-2010-1941—Unspecified vulnerability in NEC WebSAM DeploymentManager 5.13 and earlier, as used in SigmaSystemCenter 2.1 Update2 and earlier, BladeSysteEPSS 2.7%CVE-2019-14527—An issue was discovered on NETGEAR Nighthawk M1 (MR1100) devices before 12.06.03. System commands can be executed, via the web interface, afEPSS 2.7%CVE-2011-4091—The libobby server in inc/server.hpp in libnet6 (aka net6) before 1.3.14 does not perform authentication before checking the user name, whicEPSS 2.7%CVE-2015-6554—Symantec Endpoint Protection Manager (SEPM) 12.1 before 12.1-RU6-MP3 allows remote attackers to execute arbitrary OS commands via crafted daEPSS 2.7%CVE-2009-3151—Directory traversal vulnerability in actions/downloadFile.php in Ultrize TimeSheet 1.2.2 allows remote attackers to read arbitrary files viaEPSS 2.7%CVE-2012-2181—Directory traversal vulnerability in the Dojo module in IBM WebSphere Portal 7.0.0.1 and 7.0.0.2 before CF14, and 8.0, allows remote attackeEPSS 2.7%CVE-2014-9351—engine/server/server.cpp in Teeworlds 0.6.x before 0.6.3 allows remote attackers to read memory and cause a denial of service (crash) via unEPSS 2.7%CVE-2009-1519—Directory traversal vulnerability in index.php in Pecio CMS 1.1.5 allows remote attackers to read arbitrary files via a .. (dot dot) in the EPSS 2.7%CVE-2020-35125—A cross-site scripting (XSS) vulnerability in the forms component of Mautic before 3.2.4 allows remote attackers to inject executable JavaScEPSS 2.7%CVE-2018-17097—The WavFileBase class in WavFile.cpp in Olli Parviainen SoundTouch 2.0 allows remote attackers to cause a denial of service (double free) orEPSS 2.7%CVE-2016-6727—The Qualcomm GPS subsystem in Android on Android One devices allows remote attackers to execute arbitrary code.EPSS 2.7%CVE-2008-4625—SQL injection vulnerability in stnl_iframe.php in the ShiftThis Newsletter (st_newsletter) plugin for WordPress allows remote attackers to eEPSS 2.7%CVE-2010-1212—js/src/jstracer.cpp in the browser engine in Mozilla Firefox 3.6.x before 3.6.7 and Thunderbird 3.1.x before 3.1.1 allows remote attackers tEPSS 2.7%CVE-2007-0353—Cross-site scripting (XSS) vulnerability in (1) index.php and (2) login.php in myBloggie 2.1.5 allows remote attackers to inject arbitrary wEPSS 2.7%CVE-2013-6744—The Stored Procedure infrastructure in IBM DB2 9.5, 9.7 before FP9a, 10.1 before FP3a, and 10.5 before FP3a on Windows allows remote authentEPSS 2.7%CVE-2016-5354—The USB subsystem in Wireshark 1.12.x before 1.12.12 and 2.x before 2.0.4 mishandles class types, which allows remote attackers to cause a dEPSS 2.7%