Vulnerabilidades em n/a
161.457 resultadosCVE-2006-3286—The internal database in Cisco Wireless Control System (WCS) for Linux and Windows before 3.2(63) stores a hard-coded username and password EPSS 2.7%CVE-2016-4968—The linkreport/tmp/admin_global page in Fortinet FortiWan (formerly AscernLink) before 4.2.5 allows remote authenticated users to discover aEPSS 2.7%CVE-2012-6271—Adobe Shockwave Player through 11.6.8.638 allows remote attackers to trigger installation of arbitrary signed Xtras via a Shockwave movie thEPSS 2.7%CVE-2022-46395—An issue was discovered in the Arm Mali GPU Kernel Driver. A non-privileged user can make improper GPU processing operations to gain access EPSS 2.7%CVE-2017-11104—Knot DNS before 2.4.5 and 2.5.x before 2.5.2 contains a flaw within the TSIG protocol implementation that would allow an attacker with a valEPSS 2.7%CVE-2022-38812—AeroCMS 0.1.1 is vulnerable to SQL Injection via the author parameter.EPSS 2.7%CVE-2006-4636—Directory traversal vulnerability in SZEWO PhpCommander 3.0 and earlier allows remote attackers to include and execute arbitrary local filesEPSS 2.7%CVE-2006-3285—The internal database in Cisco Wireless Control System (WCS) for Linux and Windows before 3.2(51) uses an undocumented, hard-coded username EPSS 2.7%CVE-2017-7103—An issue was discovered in certain Apple products. iOS before 11 is affected. tvOS before 11 is affected. watchOS before 4 is affected. The EPSS 2.7%CVE-2013-3590—Unrestricted file upload vulnerability in admin/uploadImage.html in SearchBlox before 7.5 build 1 allows remote attackers to execute arbitraEPSS 2.7%CVE-2006-3287—Cisco Wireless Control System (WCS) for Linux and Windows 4.0(1) and earlier uses a default administrator username "root" and password "publEPSS 2.7%CVE-2011-3237—WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memoEPSS 2.7%CVE-2006-1035—Unspecified vulnerability in the Oracle Diagnostics module 2.2 and earlier allows remote attackers to access diagnostics tests via unknown aEPSS 2.7%CVE-2020-25618—An issue was discovered in SolarWinds N-Central 12.3.0.670. The sudo configuration has incorrect access control because the nable web user aEPSS 2.7%CVE-2010-3056—Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 2.11.x before 2.11.10.1 and 3.x before 3.3.5.1 allow remote attackers to iEPSS 2.7%CVE-2011-3516—Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 6 Update 27 and earlier, when running on WEPSS 2.7%CVE-2009-3266—Opera before 10.01 does not properly restrict HTML in a (1) RSS or (2) Atom feed, which allows remote attackers to conduct cross-site scriptEPSS 2.7%CVE-2014-3243—SOAPpy 0.12.5 does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memoryEPSS 2.7%CVE-2005-3283—Cross-site scripting (XSS) vulnerability in TikiWiki before 1.9.1.1 allows remote attackers to inject arbitrary web script or HTML via unknoEPSS 2.7%CVE-2019-8411—admin/dl_data.php in zzcms 2018 (2018-10-19) allows remote attackers to delete arbitrary files via action=del&filename=../ directory traversEPSS 2.7%