cve.bz

Matching records, newest first, page 96

Filter
  1. 7.5CVE-2021-25122EPSS 18%

    When responding to new h2c connection requests, Apache Tomcat versions 10.0.0-M1 to 10.0.0, 9.0.0.M1 to 9.0.41 and 8.5.0 to 8.5.61 could duplicate request headers and a limited amount of request body from one request to another meaning use…

  2. 9.8CVE-2021-27132ExploitEPSS 16%

    SerComm AG Combo VD625 AGSOT_2.1.0 devices allow CRLF injection (for HTTP header injection) in the download function via the Content-Disposition header.

  3. 9.8CVE-2021-3197EPSS 72%

    An issue was discovered in SaltStack Salt before 3002.5. The salt-api's ssh client is vulnerable to a shell injection by including ProxyCommand in an argument, or via ssh_options provided in an API request.

  4. 9.8CVE-2021-25283EPSS 10%

    An issue was discovered in through SaltStack Salt before 3002.5. The jinja renderer does not protect against server side template injection attacks.

  5. 9.1CVE-2021-25282ExploitEPSS 92%

    An issue was discovered in through SaltStack Salt before 3002.5. The salt.wheel.pillar_roots.write method is vulnerable to directory traversal.

  6. 9.8CVE-2021-25281ExploitEPSS 73%

    An issue was discovered in through SaltStack Salt before 3002.5. salt-api does not honor eauth credentials for the wheel_async client. Thus, an attacker can remotely run any wheel modules on the master.

  7. 9.8CVE-2021-27198EPSS 13%

    An issue was discovered in Visualware MyConnection Server before v11.1a. Unauthenticated Remote Code Execution can occur via Arbitrary File Upload in the web service when using a myspeed/sf?filename= URI. This application is written in Jav…

  8. 5.3CVE-2020-27223EPSS 78%

    In Eclipse Jetty 9.4.6.v20170531 to 9.4.36.v20210114 (inclusive), 10.0.0, and 11.0.0 when Jetty handles a request containing multiple Accept headers with a large number of “quality” (i.e. q) parameters, the server may enter a denial of ser…

  9. 8.1CVE-2021-26701EPSS 30%

    .NET Core Remote Code Execution Vulnerability

  10. 9.8CVE-2021-24094EPSS 22%

    Windows TCP/IP Remote Code Execution Vulnerability

  11. 8.8CVE-2021-24093EPSS 46%

    Windows Graphics Component Remote Code Execution Vulnerability

  12. 7.5CVE-2021-24086EPSS 59%

    Windows TCP/IP Denial of Service Vulnerability

  13. 9.8CVE-2021-24078EPSS 12%

    Windows DNS Server Remote Code Execution Vulnerability

  14. 9.8CVE-2021-24074EPSS 26%

    Windows TCP/IP Remote Code Execution Vulnerability

  15. 7.8CVE-2021-1732KEVExploitEPSS 78%

    Windows Win32k Elevation of Privilege Vulnerability

  16. 9.8CVE-2021-27670ExploitEPSS 61%

    Appspace 6.2.4 allows SSRF via the api/v1/core/proxy/jsonprequest url parameter.

  17. 10.0CVE-2021-1388EPSS 15%

    A vulnerability in an API endpoint of Cisco ACI Multi-Site Orchestrator (MSO) installed on the Application Services Engine could allow an unauthenticated, remote attacker to bypass authentication on an affected device. The vulnerability is…

  18. 8.2CVE-2020-11987EPSS 14%

    Apache Batik 1.13 is vulnerable to server-side request forgery, caused by improper input validation by the NodePickerPanel. By using a specially-crafted argument, an attacker could exploit this vulnerability to cause the underlying server …

  19. 8.8CVE-2021-21974EPSS 45%

    OpenSLP as used in ESXi (7.0 before ESXi70U1c-17325551, 6.7 before ESXi670-202102401-SG, 6.5 before ESXi650-202102101-SG) has a heap-overflow vulnerability. A malicious actor residing within the same network segment as ESXi who has access …

  20. 5.3CVE-2021-21973KEVExploitEPSS 88%

    The vSphere Client (HTML5) contains an SSRF (Server Side Request Forgery) vulnerability due to improper validation of URLs in a vCenter Server plugin. A malicious actor with network access to port 443 may exploit this issue by sending a PO…

  21. 9.8CVE-2021-21972KEVExploitEPSS 99.8%

    The vSphere Client (HTML5) contains a remote code execution vulnerability in a vCenter Server plugin. A malicious actor with network access to port 443 may exploit this issue to execute commands with unrestricted privileges on the underlyi…

  22. 5.4CVE-2021-21618EPSS 79%

    Jenkins Repository Connector Plugin 2.0.2 and earlier does not escape parameter names and descriptions for past builds, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.

  23. 4.6CVE-2021-21616EPSS 76%

    Jenkins Active Choices Plugin 2.5.2 and earlier does not escape reference parameter values, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Job/Configure permission.

  24. 6.1CVE-2021-20660EPSS 47%

    Cross-site scripting vulnerability in SolarView Compact SV-CPT-MC310 prior to Ver.6.5 allows an attacker to inject an arbitrary script via unspecified vectors.

  25. 5.5CVE-2021-3407EPSS 50%

    A flaw was found in mupdf 1.18.0. Double free of object during linearization may lead to memory corruption and other potential consequences.

  26. 7.8CVE-2020-16243EPSS 12%

    Multiple buffer overflow vulnerabilities exist when LeviStudioU (Version 2019-09-21 and prior) processes project files. Opening a specially crafted project file could allow an attacker to exploit and execute code under the privileges of th…

  27. 9.8CVE-2020-28429ExploitEPSS 63%

    All versions of package geojson2kml are vulnerable to Command Injection via the index.js file. PoC: var a =require("geojson2kml"); a("./","& touch JHU",function(){})

  28. 5.3CVE-2020-29453ExploitEPSS 20%

    The CachingResourceDownloadRewriteRule class in Jira Server and Jira Data Center before version 8.5.11, from 8.6.0 before 8.13.3, and from 8.14.0 before 8.15.0 allowed unauthenticated remote attackers to read arbitrary files within WEB-INF…

  29. 9.8CVE-2021-3120EPSS 37%

    An arbitrary file upload vulnerability in the YITH WooCommerce Gift Cards Premium plugin before 3.3.1 for WordPress allows remote attackers to achieve remote code execution on the operating system in the security context of the web server.…

  30. 9.8CVE-2020-21224ExploitEPSS 39%

    A Remote Code Execution vulnerability has been found in Inspur ClusterEngine V4.0. A remote attacker can send a malicious login packet to the control server

  31. 9.8CVE-2021-26120EPSS 82%

    Smarty before 3.1.39 allows code injection via an unexpected function name after a {function name= substring.

  32. 8.8CVE-2021-27513EPSS 28%

    The module admin_ITSM in EyesOfNetwork 5.3-10 allows remote authenticated users to upload arbitrary .xml.php files because it relies on "le filtre userside."

  33. 9.8CVE-2019-25024ExploitEPSS 28%

    OpenRepeater (ORP) before 2.2 allows unauthenticated command injection via shell metacharacters in the functions/ajax_system.php post_service parameter.

  34. 9.8CVE-2021-26747EPSS 55%

    Netis WF2780 2.3.40404 and WF2411 1.1.29629 devices allow Shell Metacharacter Injection into the ping command, leading to remote code execution.

  35. 8.1CVE-2020-8625EPSS 64%

    BIND servers are vulnerable if they are running an affected version and are configured to use GSS-TSIG features. In a configuration which uses BIND's default settings the vulnerable code path is not exposed, but a server can be rendered vu…

  36. 7.5CVE-2021-27224EPSS 38%

    The WPG plugin before 3.1.0.0 for IrfanView 4.57 has a user-mode write access violation starting at WPG+0x0000000000012ec6, which might allow remote attackers to execute arbitrary code.

  37. 9.8CVE-2021-27104KEVEPSS 57%

    Accellion FTA 9_12_370 and earlier is affected by OS command execution via a crafted POST request to various admin endpoints. The fixed version is FTA_9_12_380 and later.

  38. 9.8CVE-2021-27103KEVEPSS 11%

    Accellion FTA 9_12_411 and earlier is affected by SSRF via a crafted POST request to wmProgressstat.html. The fixed version is FTA_9_12_416 and later.

  39. 7.5CVE-2021-23840EPSS 51%

    Calls to EVP_CipherUpdate, EVP_EncryptUpdate and EVP_DecryptUpdate may overflow the output length argument in some cases where the input length is close to the maximum permissable length for an integer on the platform. In such cases the re…

  40. 7.8CVE-2021-21315KEVExploitEPSS 91%

    The System Information Library for Node.JS (npm package "systeminformation") is an open source collection of functions to retrieve detailed hardware, system and OS information. In systeminformation before version 5.3.1 there is a command i…

  41. 9.8CVE-2021-3239ExploitEPSS 19%

    E-Learning System 1.0 suffers from an unauthenticated SQL injection vulnerability, which allows remote attackers to execute arbitrary code on the hosting web server and gain a reverse shell.

  42. 7.2CVE-2020-28337ExploitEPSS 17%

    A directory traversal issue in the Utils/Unzip module in Microweber through 1.1.20 allows an authenticated attacker to gain remote code execution via the backup restore feature. To exploit the vulnerability, an attacker must have the crede…

  43. 8.8CVE-2020-24899EPSS 17%

    Nagios XI 5.7.2 is affected by a remote code execution (RCE) vulnerability. An authenticated user can inject additional commands into normal webapp query.

  44. 7.2CVE-2020-22427EPSS 14%

    NagiosXI 5.6.11 is affected by a remote code execution (RCE) vulnerability. An authenticated nagiosadmin user can inject additional commands into a request. NOTE: the vendor disputes whether the CVE and its references are actionable becaus…

  45. 9.8CVE-2020-35775ExploitEPSS 13%

    CITSmart before 9.1.2.23 allows LDAP Injection.

  46. 6.1CVE-2021-25299ExploitEPSS 98%

    Nagios XI version xi-5.7.5 is affected by cross-site scripting (XSS). The vulnerability exists in the file /usr/local/nagiosxi/html/admin/sshterm.php due to improper sanitization of user-controlled input. A maliciously crafted URL, when cl…

  47. 8.8CVE-2021-25298KEVExploitEPSS 74%

    Nagios XI version xi-5.7.5 is affected by OS command injection. The vulnerability exists in the file /usr/local/nagiosxi/html/includes/configwizards/cloud-vm/cloud-vm.inc.php due to improper sanitization of authenticated user-controlled in…

  48. 8.8CVE-2021-25297KEVExploitEPSS 57%

    Nagios XI version xi-5.7.5 is affected by OS command injection. The vulnerability exists in the file /usr/local/nagiosxi/html/includes/configwizards/switch/switch.inc.php due to improper sanitization of authenticated user-controlled input …

  49. 8.8CVE-2021-25296KEVExploitEPSS 72%

    Nagios XI version xi-5.7.5 is affected by OS command injection. The vulnerability exists in the file /usr/local/nagiosxi/html/includes/configwizards/windowswmi/windowswmi.inc.php due to improper sanitization of authenticated user-controlle…

  50. 7.2CVE-2021-23337ExploitEPSS 21%

    Lodash versions prior to 4.17.21 are vulnerable to Command Injection via the template function.