cve.bz

Matching records, newest first, page 112

Filter
  1. 8.1CVE-2013-4862ExploitEPSS 3.7%

    MiCasaVerde VeraLite with firmware 1.5.408 does not properly restrict access, which allows remote authenticated users to (1) update the firmware via the squashfs parameter to upgrade_step2.sh or (2) obtain hashed passwords via the cgi-bin/…

  2. 6.5CVE-2013-4861ExploitEPSS 6.6%

    Directory traversal vulnerability in cgi-bin/cmh/get_file.sh in MiCasaVerde VeraLite with firmware 1.5.408 allows remote authenticated users to read arbirary files via a .. (dot dot) in the filename parameter.

  3. 8.8CVE-2012-6610ExploitEPSS 11%

    Polycom HDX Video End Points before 3.0.4 and UC APL before 2.7.1.J allows remote authenticated users to execute arbitrary commands as demonstrated by a ; (semicolon) to the ping command feature.

  4. 9.8CVE-2013-2571ExploitEPSS 16%

    Iris 3.8 before build 1548, as used in Xpient point of sale (POS) systems, allows remote attackers to execute arbitrary commands via a crafted request to TCP port 7510, as demonstrated by opening the cash drawer.

  5. 5.4CVE-2020-7934ExploitEPSS 4.5%

    In LifeRay Portal CE 7.1.0 through 7.2.1 GA2, the First Name, Middle Name, and Last Name fields for user accounts in MyAccountPortlet are all vulnerable to a persistent XSS issue. Any user can modify these fields with a particular XSS payl…

  6. 7.5CVE-2013-2474ExploitEPSS 10%

    Directory traversal vulnerability in AWS XMS 2.5 allows remote attackers to view arbitrary files via the 'what' parameter.

  7. 7.2CVE-2013-2267ExploitEPSS 8.8%

    PHP Code Injection vulnerability in FUDforum Bulletin Board Software 3.0.4 could allow remote attackers to execute arbitrary code on the system.

  8. 6.1CVE-2012-6448ExploitEPSS 1.5%

    Cross-site Scripting (XSS) in cPanel WebHost Manager (WHM) 11.34.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

  9. 6.1CVE-2019-19143ExploitEPSS 7.3%

    TP-LINK TL-WR849N 0.9.1 4.16 devices do not require authentication to replace the firmware via a POST request to the cgi/softup URI.

  10. 8.8CVE-2019-19824ExploitEPSS 25%

    On certain TOTOLINK Realtek SDK based routers, an authenticated attacker may execute arbitrary OS commands via the sysCmd parameter to the boafrm/formSysCmd URI, even if the GUI (syscmd.htm) is not available. This allows for full control o…

  11. 7.5CVE-2019-19823ExploitEPSS 6.4%

    A certain router administration interface (that includes Realtek APMIB 0.11f for Boa 0.94.14rc21) stores cleartext administrative passwords in flash memory and in a file. This affects TOTOLINK A3002RU through 2.0.0, A702R through 2.1.3, N3…

  12. 7.5CVE-2019-19822ExploitEPSS 8.7%

    A certain router administration interface (that includes Realtek APMIB 0.11f for Boa 0.94.14rc21) allows remote attackers to retrieve the configuration, including sensitive data (usernames and passwords). This affects TOTOLINK A3002RU thro…

  13. 9.8CVE-2014-8741ExploitEPSS 77%

    Directory traversal vulnerability in the GfdFileUploadServerlet servlet in Lexmark MarkVision Enterprise before 2.1 allows remote attackers to write to arbitrary files via unspecified vectors.

  14. 9.8CVE-2013-7390ExploitEPSS 75%

    Unrestricted file upload vulnerability in AgentLogUploadServlet in ManageEngine DesktopCentral 7.x and 8.0.0 before build 80293 allows remote attackers to execute arbitrary code by uploading a file with a jsp extension, then accessing it v…

  15. 7.8CVE-2020-7949ExploitEPSS 4.2%

    schemasystem.dll in Valve Dota 2 before 7.23f allows remote attackers to achieve code execution or denial of service by creating a gaming server and inviting a victim to this server, because a crafted map is mishandled during a GetValue ca…

  16. 9.8CVE-2019-19825ExploitEPSS 30%

    On certain TOTOLINK Realtek SDK based routers, the CAPTCHA text can be retrieved via an {"topicurl":"setting/getSanvas"} POST to the boafrm/formLogin URI, leading to a CAPTCHA bypass. (Also, the CAPTCHA text is not needed once the attacker…

  17. 8.8CVE-2012-1496ExploitEPSS 2.5%

    Local file inclusion in WebCalendar before 1.2.5.

  18. 9.8CVE-2012-1495ExploitEPSS 80%

    install/index.php in WebCalendar before 1.2.5 allows remote attackers to execute arbitrary code via the form_single_user_login parameter.

  19. 7.2CVE-2011-4558ExploitEPSS 4.3%

    Tiki 8.2 and earlier allows remote administrators to execute arbitrary PHP code via crafted input to the regexres and regex parameters.

  20. 8.8CVE-2020-7991ExploitEPSS 3.1%

    Adive Framework 2.0.8 has admin/config CSRF to change the Administrator password.

  21. 9.8CVE-2020-7980ExploitEPSS 83%

    Intellian Aptus Web 1.24 allows remote attackers to execute arbitrary OS commands via the Q field within JSON data to the cgi-bin/libagent.cgi URI. NOTE: a valid sid cookie for a login to the intellian default account might be needed.

  22. 9.8CVE-2013-1744ExploitEPSS 5.1%

    IRIS citations management tool through 1.3 allows remote attackers to execute arbitrary commands.

  23. 8.8CVE-2013-1598ExploitEPSS 20%

    A Command Injection vulnerability exists in Vivotek PT7135 IP Cameras 0300a and 0400a via the system.ntp parameter to the farseer.out binary file, which cold let a malicious user execute arbitrary code.

  24. 6.5CVE-2013-1597ExploitEPSS 14%

    A Directory Traversal vulnerability exists in Vivotek PT7135 IP Cameras 0300a and 0400a via a specially crafted GET request, which could let a malicious user obtain user credentials.

  25. 7.8CVE-2019-19363ExploitEPSS 4.4%

    An issue was discovered in Ricoh (including Savin and Lanier) Windows printer drivers prior to 2020 that allows attackers local privilege escalation. Affected drivers and versions are: PCL6 Driver for Universal Print - Version 4.0 or later…

  26. 5.3CVE-2013-1596ExploitEPSS 10%

    An Authentication Bypass Vulnerability exists in Vivotek PT7135 IP Camera 0300a and 0400a via specially crafted RTSP packets to TCP port 554.

  27. 9.8CVE-2013-1595ExploitEPSS 42%

    A Buffer Overflow vulnerability exists in Vivotek PT7135 IP Camera 0300a and 0400a via a specially crafted packet in the Authorization header field sent to the RTSP service, which could let a remote malicious user execute arbitrary code or…

  28. 7.5CVE-2013-1594ExploitEPSS 7.3%

    An Information Disclosure vulnerability exists via a GET request in Vivotek PT7135 IP Camera 0300a and 0400a due to wireless keys and 3rd party credentials stored in clear text.

  29. 7.5CVE-2012-6663ExploitEPSS 9.5%

    General Electric D20ME devices are not properly configured and reveal plaintext passwords.

  30. 9.8CVE-2012-6649ExploitEPSS 16%

    WordPress WP GPX Maps Plugin 1.1.21 allows remote attackers to execute arbitrary PHP code via improper file upload.

  31. 7.8CVE-2012-5340ExploitEPSS 5.7%

    SumatraPDF 2.1.1/MuPDF 1.0 allows remote attackers to cause an Integer Overflow in the lex_number() function via a corrupt PDF file.

  32. 9.8CVE-2013-1592ExploitEPSS 24%

    A Buffer Overflow vulnerability exists in the Message Server service _MsJ2EE_AddStatistics() function when sending specially crafted SAP Message Server packets to remote TCP ports 36NN and/or 39NN in SAP NetWeaver 2004s, 7.01 SR1, 7.02 SP0…

  33. 5.3CVE-2019-16516ExploitEPSS 20%

    An issue was discovered in ConnectWise Control (formerly known as ScreenConnect) 19.3.25270.7185. There is a user enumeration vulnerability, allowing an unauthenticated attacker to determine with certainty if an account exists for a given …

  34. 7.5CVE-2012-6083ExploitEPSS 12%

    Freeciv before 2.3.3 allows remote attackers to cause a denial of service via a crafted packet.

  35. 9.8CVE-2013-6792ExploitEPSS 3.0%

    Google Android prior to 4.4 has an APK Signature Security Bypass Vulnerability

  36. 4.3CVE-2013-6785ExploitEPSS 4.4%

    Directory traversal vulnerability in url_redirect.cgi in Supermicro IPMI before SMT_X9_315 allows authenticated attackers to read arbitrary files via the url_name parameter.

  37. 9.8CVE-2012-5699ExploitEPSS 4.9%

    BabyGekko before 1.2.4 allows PHP file inclusion.

  38. 8.8CVE-2012-5698ExploitEPSS 1.8%

    BabyGekko before 1.2.4 has SQL injection.

  39. 6.1CVE-2019-6146ExploitEPSS 3.0%

    It has been reported that cross-site scripting (XSS) is possible in Forcepoint Web Security, version 8.x, via host header injection. CVSSv3.0: 5.3 (Medium) (/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)

  40. 8.2CVE-2019-18426KEVExploitEPSS 68%

    A vulnerability in WhatsApp Desktop versions prior to 0.3.9309 when paired with WhatsApp for iPhone versions prior to 2.20.10 allows cross-site scripting and local file reading. Exploiting the vulnerability requires the victim to click a l…

  41. 3.7CVE-2019-19411ExploitEPSS 1.2%

    USG9500 with versions of V500R001C30SPC100, V500R001C30SPC200, V500R001C30SPC600, V500R001C60SPC500, V500R005C00SPC100, V500R005C00SPC200 have an information leakage vulnerability. Due to improper processing of the initialization vector us…

  42. 5.5CVE-2020-6857ExploitEPSS 1.0%

    CarbonFTP v1.4 uses insecure proprietary password encryption with a hard-coded weak encryption key. The key for local FTP server passwords is hard-coded in the binary.

  43. 9.8CVE-2012-5190ExploitEPSS 4.7%

    Prizm Content Connect 5.1 has an Arbitrary File Upload Vulnerability

  44. 6.1CVE-2011-4095ExploitEPSS 1.9%

    Jara 1.6 has an XSS vulnerability

  45. 9.8CVE-2011-4094ExploitEPSS 2.7%

    Jara 1.6 has a SQL injection vulnerability.

  46. 8.8CVE-2020-7246ExploitEPSS 83%

    A remote code execution (RCE) vulnerability exists in qdPM 9.1 and earlier. An attacker can upload a malicious PHP code file via the profile photo functionality, by leveraging a path traversal vulnerability in the users['photop_preview'] d…

  47. 9.8CVE-2014-5007ExploitEPSS 37%

    Directory traversal vulnerability in the agentLogUploader servlet in ZOHO ManageEngine Desktop Central (DC) and Desktop Central Managed Service Providers (MSP) edition before 9 build 90055 allows remote attackers to write to and execute ar…

  48. 5.3CVE-2020-6862ExploitEPSS 6.3%

    V6.0.10P2T2 and V6.0.10P2T5 of F6x2W product are impacted by Information leak vulnerability. Unauthorized users could log in directly to obtain page information without entering a verification code.

  49. 7.5CVE-2019-19142ExploitEPSS 7.8%

    Intelbras WRN240 devices do not require authentication to replace the firmware via a POST request to the incoming/Firmware.cfg URI.

  50. 7.8CVE-2019-15742ExploitEPSS 5.0%

    A local privilege-escalation vulnerability exists in the Poly Plantronics Hub before 3.14 for Windows client application. A local attacker can exploit this issue to gain elevated privileges.