cve.bz

Matching records, newest first, page 118

Filter
  1. 9.8CVE-2019-18418ExploitEPSS 4.0%

    clonos.php in ClonOS WEB control panel 19.09 allows remote attackers to gain full access via change password requests because there is no session management.

  2. 9.8CVE-2019-18394ExploitEPSS 32%

    A Server Side Request Forgery (SSRF) vulnerability in FaviconServlet.java in Ignite Realtime Openfire through 4.4.2 allows attackers to send arbitrary HTTP GET requests.

  3. 5.3CVE-2019-18393ExploitEPSS 14%

    PluginServlet.java in Ignite Realtime Openfire through 4.4.2 does not ensure that retrieved files are located under the Openfire home directory, aka a directory traversal vulnerability.

  4. 7.5CVE-2019-18371ExploitEPSS 56%

    An issue was discovered on Xiaomi Mi WiFi R3G devices before 2.28.23-stable. There is a directory traversal vulnerability to read arbitrary files via a misconfigured NGINX alias, as demonstrated by api-third-party/download/extdisks../etc/c…

  5. 6.1CVE-2019-10475ExploitEPSS 58%

    A reflected cross-site scripting vulnerability in Jenkins build-metrics Plugin allows attackers to inject arbitrary HTML and JavaScript into web pages provided by this plugin.

  6. 9.8CVE-2015-9499ExploitEPSS 16%

    The Showbiz Pro plugin through 1.7.1 for WordPress has PHP code execution by uploading a .php file within a ZIP archive.

  7. 7.8CVE-2019-17424ExploitEPSS 13%

    A stack-based buffer overflow in the processPrivilage() function in IOS/process-general.c in nipper-ng 0.11.10 allows remote attackers (serving firewall configuration files) to achieve Remote Code Execution or Denial Of Service via a craft…

  8. 6.1CVE-2019-17220ExploitEPSS 4.0%

    Rocket.Chat before 2.1.0 allows XSS via a URL on a ![title] line.

  9. 7.8CVE-2019-9491ExploitEPSS 13%

    Trend Micro Anti-Threat Toolkit (ATTK) versions 1.62.0.1218 and below have a vulnerability that may allow an attacker to place malicious files in the same directory, potentially leading to arbitrary remote code execution (RCE) when execute…

  10. 7.5CVE-2019-18217ExploitEPSS 20%

    ProFTPD before 1.3.6b and 1.3.7rc before 1.3.7rc2 allows remote unauthenticated denial-of-service due to incorrect handling of overly long commands because main.c in a child process enters an infinite loop.

  11. 7.7CVE-2019-10716ExploitEPSS 4.1%

    An Information Disclosure issue in Verodin Director 3.5.3.1 and earlier reveals usernames and passwords of integrated security technologies via a /integrations.json JSON REST API request.

  12. 9.8CVE-2019-8197ExploitEPSS 17%

    Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have a heap overflow vulnerability. Successful exploitation …

  13. 9.8CVE-2019-8196ExploitEPSS 23%

    Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have an untrusted pointer dereference vulnerability. Success…

  14. 9.8CVE-2019-8195ExploitEPSS 23%

    Adobe Acrobat and Reader versions , 2019.012.20040 and earlier, 2017.011.30148 and earlier, 2017.011.30148 and earlier, 2015.006.30503 and earlier, and 2015.006.30503 and earlier have an untrusted pointer dereference vulnerability. Success…

  15. 7.1CVE-2019-15627ExploitEPSS 1.3%

    Versions 10.0, 11.0 and 12.0 of the Trend Micro Deep Security Agent are vulnerable to an arbitrary file delete attack, which may lead to availability impact. Local OS access is required. Please note that only Windows agents are affected.

  16. 8.8CVE-2019-14287ExploitEPSS 64%

    In Sudo before 1.8.28, an attacker with access to a Runas ALL sudoer account can bypass certain policy blacklists and session PAM modules, and can cause incorrect logging, by invoking sudo with a crafted user ID. For example, this allows b…

  17. 7.5CVE-2019-11253ExploitEPSS 26%

    Improper input validation in the Kubernetes API server in versions v1.0-1.12 and versions prior to v1.13.12, v1.14.8, v1.15.5, and v1.16.2 allows authorized users to send malicious YAML or JSON payloads, causing the API server to consume e…

  18. 5.3CVE-2019-17671ExploitEPSS 37%

    In WordPress before 5.2.4, unauthenticated viewing of certain content is possible because the static query property is mishandled.

  19. 9.0CVE-2019-3025ExploitEPSS 14%

    Vulnerability in the Oracle Hospitality RES 3700 component of Oracle Food and Beverage Applications. The supported version that is affected is 5.7. Difficult to exploit vulnerability allows unauthenticated attacker with network access via …

  20. 8.8CVE-2019-3010KEVExploitEPSS 14%

    Vulnerability in the Oracle Solaris product of Oracle Systems (component: XScreenSaver). The supported version that is affected is 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where O…

  21. 9.8CVE-2019-17662ExploitEPSS 97%

    ThinVNC 1.0b1 is vulnerable to arbitrary file read, which leads to a compromise of the VNC server. The vulnerability exists even when authentication is turned on during the deployment of the VNC server. The password for authentication is s…

  22. 7.8CVE-2019-17624ExploitEPSS 3.7%

    "" In X.Org X Server 1.20.4, there is a stack-based buffer overflow in the function XQueryKeymap. For example, by sending ct.c_char 1000 times, an attacker can cause a denial of service (application crash) or possibly have unspecified othe…

  23. 6.1CVE-2019-13392ExploitEPSS 4.0%

    A reflected Cross-Site Scripting (XSS) vulnerability in MindPalette NateMail 3.0.15 allows an attacker to execute remote JavaScript in a victim's browser via a specially crafted POST request. The application will reflect the recipient valu…

  24. 7.8CVE-2019-14737ExploitEPSS 1.7%

    Ubisoft Uplay 92.0.0.6280 has Insecure Permissions.

  25. 9.8CVE-2019-16278KEVExploitEPSS 99.0%

    Directory Traversal in the function http_verify in nostromo nhttpd through 1.9.6 allows an attacker to achieve remote code execution via a crafted HTTP request.

  26. 9.1CVE-2019-17574ExploitEPSS 9.4%

    An issue was discovered in the Popup Maker plugin before 1.8.13 for WordPress. An unauthenticated attacker can partially control the arguments of the do_action function to invoke certain popmake_ or pum_ methods, as demonstrated by control…

  27. 7.5CVE-2019-17538ExploitEPSS 11%

    Jiangnan Online Judge (aka jnoj) 0.8.0 has Directory Traversal for file reading via the web/polygon/problem/viewfile?id=1&name=../ substring.

  28. 7.5CVE-2017-18638ExploitEPSS 15%

    send_email in graphite-web/webapp/graphite/composer/views.py in Graphite through 1.1.5 is vulnerable to SSRF. The vulnerable SSRF endpoint can be used by an attacker to have the Graphite web server request any resource. The response to thi…

  29. 9.8CVE-2019-17508ExploitEPSS 16%

    On D-Link DIR-859 A3-1.06 and DIR-850 A1.13 devices, /etc/services/DEVICE.TIME.php allows command injection via the $SERVER variable.

  30. 9.8CVE-2019-17506ExploitEPSS 56%

    There are some web interfaces without authentication requirements on D-Link DIR-868L B1-2.03 and DIR-817LW A1-1.04 routers. An attacker can get the router's username and password (and other information) via a DEVICE.ACCOUNT value for SERVI…

  31. 7.8CVE-2019-2215KEVExploitEPSS 72%

    A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. No user interaction is required to exploit this vulnerability, however exploitation does require either the installation of a malicious …

  32. 6.1CVE-2019-17504ExploitEPSS 2.8%

    An issue was discovered in Kirona Dynamic Resource Scheduling (DRS) 5.5.3.5. A reflected Cross-site scripting (XSS) vulnerability allows remote attackers to inject arbitrary web script via the /osm/report/ password parameter.

  33. 5.3CVE-2019-17503ExploitEPSS 48%

    An issue was discovered in Kirona Dynamic Resource Scheduling (DRS) 5.5.3.5. An unauthenticated user can access /osm/REGISTER.cmd (aka /osm_tiles/REGISTER.cmd) directly: it contains sensitive information about the database through the SQL …

  34. 7.5CVE-2015-9480ExploitEPSS 13%

    The RobotCPA plugin 5 for WordPress has directory traversal via the f.php l parameter.

  35. 7.8CVE-2019-1364ExploitEPSS 2.9%

    An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1362.

  36. 6.5CVE-2019-1347ExploitEPSS 15%

    A denial of service vulnerability exists when Windows improperly handles objects in memory, aka 'Windows Denial of Service Vulnerability'. This CVE ID is unique from CVE-2019-1343, CVE-2019-1346.

  37. 6.5CVE-2019-1346ExploitEPSS 11%

    A denial of service vulnerability exists when Windows improperly handles objects in memory, aka 'Windows Denial of Service Vulnerability'. This CVE ID is unique from CVE-2019-1343, CVE-2019-1347.

  38. 5.5CVE-2019-1345ExploitEPSS 3.0%

    An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory, aka 'Windows Kernel Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1334.

  39. 5.5CVE-2019-1344ExploitEPSS 3.1%

    An information disclosure vulnerability exists in the way that the Windows Code Integrity Module handles objects in memory, aka 'Windows Code Integrity Module Information Disclosure Vulnerability'.

  40. 6.5CVE-2019-1343ExploitEPSS 11%

    A denial of service vulnerability exists when Windows improperly handles objects in memory, aka 'Windows Denial of Service Vulnerability'. This CVE ID is unique from CVE-2019-1346, CVE-2019-1347.

  41. 7.8CVE-2019-1322KEVExploitEPSS 19%

    An elevation of privilege vulnerability exists when Windows improperly handles authentication requests, aka 'Microsoft Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1320, CVE-2019-1340.

  42. 7.2CVE-2019-17418ExploitEPSS 48%

    An issue was discovered in MetInfo 7.0. There is SQL injection via the admin/?n=language&c=language_general&a=doSearchParameter appno parameter, a different issue than CVE-2019-16997.

  43. 7.2CVE-2019-15715ExploitEPSS 30%

    MantisBT before 1.3.20 and 2.22.1 allows Post Authentication Command Injection, leading to Remote Code Execution.

  44. 9.8CVE-2019-17124ExploitEPSS 23%

    Kramer VIAware 2.5.0719.1034 has Incorrect Access Control.

  45. 9.8CVE-2019-15859ExploitEPSS 31%

    Password disclosure in the web interface on socomec DIRIS A-40 devices before 48250501 allows a remote attacker to get full access to a device via the /password.jsn URI.

  46. 8.8CVE-2019-13529ExploitEPSS 3.1%

    An attacker could send a malicious link to an authenticated operator, which may allow remote attackers to perform actions with the permissions of the user on the Sunny WebBox Firmware Version 1.6 and prior. This device uses IP addresses to…

  47. 9.1CVE-2019-17382ExploitEPSS 53%

    An issue was discovered in zabbix.php?action=dashboard.view&dashboardid=1 in Zabbix through 4.4. An attacker can bypass the login page and access the dashboard page, and then create a Dashboard, Report, Screen, or Map without any Username/…

  48. 7.2CVE-2019-10969ExploitEPSS 11%

    Moxa EDR 810, all versions 5.1 and prior, allows an authenticated attacker to abuse the ping feature to execute unauthorized commands on the router, which may allow an attacker to perform remote code execution.

  49. 4.3CVE-2019-10963ExploitEPSS 6.5%

    Moxa EDR 810, all versions 5.1 and prior, allows an unauthenticated attacker to be able to retrieve some log files from the device, which may allow sensitive information disclosure. Log files must have previously been exported by a legitim…

  50. 6.1CVE-2019-17233ExploitEPSS 2.2%

    Functions/EWD_UFAQ_Import.php in the ultimate-faqs plugin through 1.8.24 for WordPress allows HTML content injection.