Vulnerabilidades em n/a
161.016 resultadosCVE-2002-1417—Directory traversal vulnerability in Novell NetBasic Scripting Server (NSN) for Netware 5.1 and 6, and Novell Small Business Suite 5.1 and 6EPSS 16.6%CVE-2020-24899—Nagios XI 5.7.2 is affected by a remote code execution (RCE) vulnerability. An authenticated user can inject additional commands into normalEPSS 16.6%CVE-2024-37732HIGHCross Site Scripting vulnerability in Anchor CMS v.0.12.7 allows a remote attacker to execute arbitrary code via a crafted .pdf file.EPSS 16.6%CVE-2016-7124—ext/standard/var_unserializer.c in PHP before 5.6.25 and 7.x before 7.0.10 mishandles certain invalid objects, which allows remote attackersEPSS 16.6%CVE-2020-28337—A directory traversal issue in the Utils/Unzip module in Microweber through 1.1.20 allows an authenticated attacker to gain remote code execEPSS 16.6%CVE-2013-6189—Unspecified vulnerability in the Archive Query Server in HP Application Information Optimizer (formerly HP Database Archiving) 6.2, 6.3, 6.4EPSS 16.6%CVE-2012-0145—Cross-site scripting (XSS) vulnerability in wizardlist.aspx in Microsoft Office SharePoint Server 2010 Gold and SP1 and SharePoint FoundatioEPSS 16.6%CVE-2012-0144—Cross-site scripting (XSS) vulnerability in themeweb.aspx in Microsoft Office SharePoint Server 2010 Gold and SP1 and SharePoint Foundation EPSS 16.6%CVE-2012-0017—Cross-site scripting (XSS) vulnerability in inplview.aspx in Microsoft SharePoint Foundation 2010 Gold and SP1 allows remote attackers to inEPSS 16.6%CVE-2001-0400—nph-maillist.pl allows remote attackers to execute arbitrary commands via shell metacharacters ("`") in the email address.EPSS 16.6%CVE-2021-36711—WebInterface in OctoBot before 0.4.4 allows remote code execution because Tentacles upload is mishandled.EPSS 16.6%CVE-2011-2012—Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold, Update 1, Update 2, and SP1 does not properly validate session cookies, which alEPSS 16.6%CVE-2014-8176—The dtls1_clear_queues function in ssl/d1_lib.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h frees data structureEPSS 16.6%CVE-2020-9376—D-Link DIR-610 devices allow Information Disclosure via SERVICES=DEVICE.ACCOUNT%0AAUTHORIZED_GROUP=1 to getcfg.php. NOTE: This vulnerabilityEPSS 16.6%CVE-2020-15492—An issue was discovered in INNEO Startup TOOLS 2017 M021 12.0.66.3784 through 2018 M040 13.0.70.3804. The sut_srv.exe web application (serveEPSS 16.6%CVE-2015-0023—Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafEPSS 16.6%CVE-2014-4132—Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafEPSS 16.6%CVE-2003-0567—Cisco IOS 11.x and 12.0 through 12.2 allows remote attackers to cause a denial of service (traffic block) by sending a particular sequence oEPSS 16.6%CVE-2017-6315—Astaro Security Gateway (aka ASG) 7 allows remote attackers to execute arbitrary code via a crafted request to index.plx.EPSS 16.6%CVE-2004-1898—Stack-based buffer overflow in the administration interface in Monit 1.4 through 4.2 allows remote attackers to execute arbitrary code via aEPSS 16.6%