cve.bz

Matching records, newest first, page 87

Filter
  1. 5.3CVE-2021-26086KEVExploitEPSS >99.9%

    Affected versions of Atlassian Jira Server and Data Center allow remote attackers to read particular files via a path traversal vulnerability in the /WEB-INF/web.xml endpoint. The affected versions are before version 8.5.14, from version 8…

  2. 9.8CVE-2021-36380KEVExploitEPSS 98%

    Sunhillo SureLine before 8.7.0.1.1 allows Unauthenticated OS Command Injection via shell metacharacters in ipAddr or dnsAddr /cgi/networkDiag.cgi.

  3. 9.8CVE-2021-37350EPSS 79%

    Nagios XI before version 5.8.5 is vulnerable to SQL injection vulnerability in Bulk Modifications Tool due to improper input sanitisation.

  4. 9.8CVE-2021-37346EPSS 74%

    Nagios XI WatchGuard Wizard before version 1.4.8 is vulnerable to remote code execution through Improper neutralisation of special elements used in an OS Command (OS Command injection).

  5. 9.8CVE-2021-37344EPSS 97%

    Nagios XI Switch Wizard before version 2.5.7 is vulnerable to remote code execution through improper neutralisation of special elements used in an OS Command (OS Command injection).

  6. 8.8CVE-2021-37343ExploitEPSS 24%

    A path traversal vulnerability exists in Nagios XI below version 5.8.5 AutoDiscovery component and could lead to post authenticated RCE under security context of the user running Nagios.

  7. 7.8CVE-2021-36958EPSS 31%

    A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. An attacker who successfully exploited this vulnerability could run arbitrary code with SYSTEM privileges. …

  8. 7.8CVE-2021-36948KEVEPSS 23%

    Windows Update Medic Service Elevation of Privilege Vulnerability

  9. 7.5CVE-2021-36942KEVExploitEPSS 66%

    Windows LSA Spoofing Vulnerability

  10. 8.8CVE-2021-34535EPSS 22%

    Remote Desktop Client Remote Code Execution Vulnerability

  11. 7.8CVE-2021-34484KEVEPSS 22%

    Windows User Profile Service Elevation of Privilege Vulnerability

  12. 6.8CVE-2021-34480EPSS 34%

    Scripting Engine Memory Corruption Vulnerability

  13. 7.8CVE-2021-34478EPSS 52%

    Microsoft Office Remote Code Execution Vulnerability

  14. 9.8CVE-2021-26432EPSS 11%

    Windows Services for NFS ONCRPC XDR Driver Remote Code Execution Vulnerability

  15. 9.9CVE-2021-26424EPSS 61%

    Windows TCP/IP Remote Code Execution Vulnerability

  16. 9.1CVE-2021-37425ExploitEPSS 66%

    Altova MobileTogether Server before 7.3 SP1 allows XXE attacks, such as an InfoSetChanges/Changes attack against /workflowmanagement, or reading mobiletogetherserver.cfg and then reading the certificate and private key.

  17. 5.4CVE-2021-37152EPSS 24%

    Multiple XSS issues exist in Sonatype Nexus Repository Manager 3 before 3.33.0. An authenticated attacker with the ability to add HTML files to a repository could redirect users to Nexus Repository Manager’s pages with code modifications.

  18. 8.8CVE-2021-33256EPSS 79%

    A CSV injection vulnerability on the login panel of ManageEngine ADSelfService Plus Version: 6.1 Build No: 6101 can be exploited by an unauthenticated user. The j_username parameter seems to be vulnerable and a reverse shell could be obtai…

  19. 9.8CVE-2021-24507EPSS 11%

    The Astra Pro Addon WordPress plugin before 3.5.2 did not properly sanitise or escape some of the POST parameters from the astra_pagination_infinite and astra_shop_pagination_infinite AJAX action (available to both unauthenticated and auth…

  20. 9.8CVE-2021-24499ExploitEPSS 60%

    The Workreap WordPress theme before 2.2.2 AJAX actions workreap_award_temp_file_uploader and workreap_temp_file_uploader did not perform nonce checks, or validate that the request is from a valid user in any other way. The endpoints allowe…

  21. 7.5CVE-2021-35325EPSS 13%

    A stack overflow in the checkLoginUser function of TOTOLINK A720R A720R_Firmware v4.1.5cu.470_B20200911 allows attackers to cause a denial of service (DOS).

  22. 9.8CVE-2021-35324EPSS 10%

    A vulnerability in the Form_Login function of TOTOLINK A720R A720R_Firmware V4.1.5cu.470_B20200911 allows attackers to bypass authentication.

  23. 7.5CVE-2021-22926EPSS 15%

    libcurl-using applications can ask for a specific client certificate to be used in a transfer. This is done with the `CURLOPT_SSLCERT` option (`--cert` with the command line tool).When libcurl is built to use the macOS native TLS library S…

  24. 9.8CVE-2021-21805ExploitEPSS 70%

    An OS Command Injection vulnerability exists in the ping.php script functionality of Advantech R-SeeNet v 2.4.12 (20.10.2020). A specially crafted HTTP request can lead to arbitrary OS command execution. An attacker can send a crafted HTTP…

  25. 9.8CVE-2021-34371EPSS 13%

    Neo4j through 3.4.18 (with the shell server enabled) exposes an RMI service that arbitrarily deserializes Java objects, e.g., through setSessionVariable. An attacker can abuse this for remote code execution because there are dependencies w…

  26. 9.8CVE-2021-20028KEVEPSS 30%

    Improper neutralization of a SQL Command leading to SQL Injection vulnerability impacting end-of-life Secure Remote Access (SRA) products, specifically the SRA appliances running all 8.x firmware and 9.0.0.9-26sv or earlier

  27. 8.8CVE-2021-32706ExploitEPSS 60%

    Pi-hole's Web interface provides a central location to manage a Pi-hole instance and review performance statistics. Prior to Pi-hole Web interface version 5.5.1, the `validDomainWildcard` preg_match filter allows a malicious character thro…

  28. 7.8CVE-2021-34850EPSS 38%

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or o…

  29. 7.8CVE-2021-34847EPSS 62%

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or o…

  30. 7.8CVE-2021-34842EPSS 13%

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or o…

  31. 7.8CVE-2021-34833EPSS 96%

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.0.0.49893. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or o…

  32. 8.1CVE-2021-32804EPSS 15%

    The npm package "tar" (aka node-tar) before versions 6.1.1, 5.0.6, 4.4.14, and 3.3.2 has a arbitrary File Creation/Overwrite vulnerability due to insufficient absolute path sanitization. node-tar aims to prevent extraction of absolute file…

  33. 8.8CVE-2021-30560EPSS 20%

    Use after free in Blink XSLT in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

  34. 8.8CVE-2021-37557EPSS 27%

    A SQL injection vulnerability in image generation in Centreon before 20.04.14, 20.10.8, and 21.04.2 allows remote authenticated (but low-privileged) attackers to execute arbitrary SQL commands via the include/views/graphs/generateGraphs/ge…

  35. 8.8CVE-2021-37556EPSS 27%

    A SQL injection vulnerability in reporting export in Centreon before 20.04.14, 20.10.8, and 21.04.2 allows remote authenticated (but low-privileged) attackers to execute arbitrary SQL commands via the include/reporting/dashboard/csvExport/…

  36. 8.8CVE-2021-31630EPSS 27%

    Command Injection in Open PLC Webserver v3 allows remote attackers to execute arbitrary code via the "Hardware Layer Code Box" component on the "/hardware" page of the application.

  37. 5.3CVE-2021-26085KEVExploitEPSS >99.9%

    Affected versions of Atlassian Confluence Server allow remote attackers to view restricted resources via a Pre-Authorization Arbitrary File Read vulnerability in the /s/ endpoint. The affected versions are before version 7.4.10, and from v…

  38. 6.1CVE-2021-24488ExploitEPSS 11%

    The slider import search feature and tab parameter of the Post Grid WordPress plugin before 2.1.8 settings are not properly sanitised before being output back in the pages, leading to Reflected Cross-Site Scripting issues

  39. 9.8CVE-2021-24472ExploitEPSS 57%

    The OnAir2 WordPress theme before 3.9.9.2 and QT KenthaRadio WordPress plugin before 2.0.2 have exposed proxy functionality to unauthenticated users, sending requests to this proxy functionality will have the web server fetch and display t…

  40. 7.5CVE-2021-36754ExploitEPSS 65%

    PowerDNS Authoritative Server 4.5.0 before 4.5.1 allows anybody to crash the process by sending a specific query (QTYPE 65535) that causes an out-of-bounds exception.

  41. 5.4CVE-2021-35479EPSS 13%

    Nagios Log Server before 2.1.9 contains Stored XSS in the custom column view for the alert history and audit log function through the affected pp parameter. This affects users who open a crafted link or third-party web page.

  42. 5.4CVE-2021-35478EPSS 77%

    Nagios Log Server before 2.1.9 contains Reflected XSS in the dropdown box for the alert history and audit log function. All parameters used for filtering are affected. This affects users who open a crafted link or third-party web page.

  43. 7.1CVE-2021-32610EPSS 73%

    In Archive_Tar before 1.4.14, symlinks can refer to targets outside of the extracted archive, a different vulnerability than CVE-2020-36193.

  44. 7.5CVE-2021-28966EPSS 58%

    In Ruby through 3.0 on Windows, a remote attacker can submit a crafted path when a Web application handles a parameter with TmpDir.

  45. 9.8CVE-2020-36239EPSS 50%

    Jira Data Center, Jira Core Data Center, Jira Software Data Center from version 6.3.0 before 8.5.16, from 8.6.0 before 8.13.8, from 8.14.0 before 8.17.0 and Jira Service Management Data Center from version 2.0.2 before 4.5.16, from version…

  46. 7.5CVE-2021-32789ExploitEPSS 17%

    woocommerce-gutenberg-products-block is a feature plugin for WooCommerce Gutenberg Blocks. An SQL injection vulnerability impacts all WooCommerce sites running the WooCommerce Blocks feature plugin between version 2.5.0 and prior to versio…

  47. 9.8CVE-2020-7388ExploitEPSS 69%

    Sage X3 Unauthenticated Remote Command Execution (RCE) as SYSTEM in AdxDSrv.exe component. By editing the client side authentication request, an attacker can bypass credential validation. While exploiting this does require knowledge of the…

  48. 5.3CVE-2020-7387ExploitEPSS 34%

    Sage X3 Installation Pathname Disclosure. A specially crafted packet can elicit a response from the AdxDSrv.exe component that reveals the installation directory of the product. Note that this vulnerability can be combined with CVE-2020-73…

  49. 7.5CVE-2021-36222EPSS 11%

    ec_verify in kdc/kdc_preauth_ec.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.18.4 and 1.19.x before 1.19.2 allows remote attackers to cause a NULL pointer dereference and daemon crash. This occurs because a …

  50. 9.8CVE-2021-35464KEVExploitEPSS >99.9%

    ForgeRock AM server before 7.0 has a Java deserialization vulnerability in the jato.pageSession parameter on multiple pages. The exploitation does not require authentication, and remote code execution can be triggered by sending a single c…