Vulnerabilidades em n/a
161.457 resultadosCVE-2013-1855—The sanitize_css method in lib/action_controller/vendor/html-scanner/html/sanitizer.rb in the Action Pack component in Ruby on Rails before EPSS 2.6%CVE-2013-1865—OpenStack Keystone Folsom (2012.2) does not properly perform revocation checks for Keystone PKI tokens when done through a server, which allEPSS 2.6%CVE-2020-10250—BWA DiREX-Pro 1.2181 devices allow remote attackers to execute arbitrary OS commands via shell metacharacters in the PKG parameter to uninstEPSS 2.6%CVE-2005-1351—The ad.cgi script allows remote attackers to execute arbitrary commands via shell metacharacters in the argument.EPSS 2.6%CVE-2020-24549—openMAINT before 1.1-2.4.2 allows remote authenticated users to run arbitrary JSP code on the underlying web server.EPSS 2.6%CVE-2022-34093—Portal do Software Publico Brasileiro i3geo v7.0.5 was discovered to contain a cross-site scripting (XSS) vulnerability via access_token.phpEPSS 2.6%CVE-2022-34094—Portal do Software Publico Brasileiro i3geo v7.0.5 was discovered to contain a cross-site scripting (XSS) vulnerability via request_token.phEPSS 2.6%CVE-2013-4130—The (1) red_channel_pipes_add_type and (2) red_channel_pipes_add_empty_msg functions in server/red_channel.c in SPICE before 0.12.4 do not pEPSS 2.6%CVE-2021-29059—A vulnerability was discovered in IS-SVG version 2.1.0 to 4.2.2 and below where a Regular Expression Denial of Service (ReDOS) occurs if theEPSS 2.6%CVE-2022-26147—The Quectel RG502Q-EA modem before 2022-02-23 allow OS Command Injection.EPSS 2.6%CVE-2022-26290—Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/WriteFacMac.EPSS 2.6%CVE-2015-4590—The extractFrom function in Internals/QuotedString.cpp in Arduino JSON before 4.5 allows remote attackers to cause a denial of service (crasEPSS 2.6%CVE-2006-2712—Secure Elements Class 5 AVR (aka C5 EVM) client and server before 2.8.1 do not verify the integrity of a message digest, which allows remoteEPSS 2.6%CVE-2012-1705—Unspecified vulnerability in the Server component in Oracle MySQL 5.1.66 and earlier and 5.5.28 and earlier allows remote authenticated userEPSS 2.6%CVE-2022-27077—Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /cgi-bin/uploadWeiXinPic.EPSS 2.6%CVE-2005-1748—The embedded LDAP server in BEA WebLogic Server and Express 8.1 through Service Pack 4, and 7.0 through Service Pack 5, allows remote anonymEPSS 2.6%CVE-2005-1746—The cluster cookie parsing code in BEA WebLogic Server 7.0 through Service Pack 5 attempts to contact any host or port specified in a cookieEPSS 2.6%CVE-2002-0333—Directory traversal vulnerability in xtell (xtelld) 1.91.1 and earlier, and 2.x before 2.7, allows remote attackers to read files with shortEPSS 2.6%CVE-2004-2244—The XML parser in Oracle 9i Application Server Release 2 9.0.3.0 and 9.0.3.1, 9.0.2.3 and earlier, and Release 1 1.0.2.2 and 1.0.2.2.2, and EPSS 2.6%CVE-2022-26536—Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a command injection vulnerability via the component /goform/setFixTools.EPSS 2.6%