cve.bz

Matching records, newest first, page 120

Filter
  1. 10.0CVE-2019-5485ExploitEPSS 59%

    NPM package gitlabhook version 0.0.17 is vulnerable to a Command Injection vulnerability. Arbitrary commands can be injected through the repository name.

  2. 7.8CVE-2019-11660ExploitEPSS 7.8%

    Privileges manipulation in Micro Focus Data Protector, versions 10.00, 10.01, 10.02, 10.03, 10.04, 10.10, 10.20, 10.30, 10.40. This vulnerability could be exploited by a low-privileged user to execute a custom binary with higher privileges.

  3. 9.8CVE-2010-5333ExploitEPSS 16%

    The web server in Integard Pro and Home before 2.0.0.9037 and 2.2.x before 2.2.0.9037 has a buffer overflow via a long password in an administration login POST request, leading to arbitrary code execution. An SEH-overwrite buffer overflow …

  4. 6.5CVE-2019-12922ExploitEPSS 11%

    A CSRF issue in phpMyAdmin 4.9.0.1 allows deletion of any server in the Setup page.

  5. 7.2CVE-2016-10940ExploitEPSS 5.4%

    The zm-gallery plugin 1.0 for WordPress has SQL injection via the order parameter.

  6. 5.4CVE-2019-1262ExploitEPSS 3.0%

    A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'.

  7. 7.8CVE-2019-1253KEVExploitEPSS 12%

    An elevation of privilege vulnerability exists when the Windows AppX Deployment Server improperly handles junctions.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Elevation …

  8. 6.5CVE-2019-1245ExploitEPSS 13%

    An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory, aka 'DirectWrite Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1244, CVE-2019-1251.

  9. 6.5CVE-2019-1244ExploitEPSS 12%

    An information disclosure vulnerability exists when DirectWrite improperly discloses the contents of its memory, aka 'DirectWrite Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1245, CVE-2019-1251.

  10. 7.8CVE-2019-1215KEVExploitEPSS 19%

    An elevation of privilege vulnerability exists in the way that ws2ifsl.sys (Winsock) handles objects in memory, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1253, CVE-2019-1278, CVE-2019-1303.

  11. 8.1CVE-2019-3759ExploitEPSS 3.2%

    The RSA Identity Governance and Lifecycle software and RSA Via Lifecycle and Governance products prior to 7.1.0 P08 contain a code injection vulnerability. A remote authenticated malicious user could potentially exploit this vulnerability …

  12. 6.5CVE-2019-8451ExploitEPSS 94%

    The /plugins/servlet/gadgets/makeRequest resource in Jira before version 8.4.0 allows remote attackers to access the content of internal network resources via a Server Side Request Forgery (SSRF) vulnerability due to a logic bug in the Jir…

  13. 5.3CVE-2019-8449ExploitEPSS 86%

    The /rest/api/latest/groupuserpicker resource in Jira before version 8.4.0 allows remote attackers to enumerate usernames via an information disclosure vulnerability.

  14. 5.4CVE-2019-16223ExploitEPSS 5.2%

    WordPress before 5.2.3 allows XSS in post previews by authenticated users.

  15. 6.1CVE-2017-18598ExploitEPSS 1.9%

    The Qards plugin through 2017-10-11 for WordPress has XSS via a remote document specified in the url parameter to html2canvasproxy.php.

  16. 7.0CVE-2019-6793ExploitEPSS 3.5%

    An issue was discovered in GitLab Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. The Jira integration feature is vulnerable to an unauthenticated blind SSRF issue.

  17. 5.4CVE-2019-16173ExploitEPSS 3.7%

    LimeSurvey before v3.17.14 allows reflected XSS for escalating privileges from a low-privileged account to, for example, SuperAdmin. This occurs in application/core/Survey_Common_Action.php,

  18. 5.4CVE-2019-16172ExploitEPSS 4.6%

    LimeSurvey before v3.17.14 allows stored XSS for escalating privileges from a low-privileged account to, for example, SuperAdmin. The attack uses a survey group in which the title contains JavaScript that is mishandled upon group deletion.

  19. 7.2CVE-2019-10669ExploitEPSS 81%

    An issue was discovered in LibreNMS through 1.47. There is a command injection vulnerability in html/includes/graphs/device/collectd.inc.php where user supplied parameters are filtered with the mysqli_escape_real_string function. This func…

  20. 7.5CVE-2019-16123ExploitEPSS 17%

    In Kartatopia PilusCart 1.4.1, the parameter filename in the file catalog.php is mishandled, leading to ../ Local File Disclosure.

  21. 9.8CVE-2019-16119ExploitEPSS 25%

    SQL injection in the photo-gallery (10Web Photo Gallery) plugin before 1.5.35 for WordPress exists via the admin/controllers/Albumsgalleries.php album_id parameter.

  22. 6.1CVE-2019-16118ExploitEPSS 5.3%

    Cross site scripting (XSS) in the photo-gallery (10Web Photo Gallery) plugin before 1.5.35 for WordPress exists via admin/controllers/Options.php.

  23. 6.1CVE-2019-16117ExploitEPSS 4.6%

    Cross site scripting (XSS) in the photo-gallery (10Web Photo Gallery) plugin before 1.5.35 for WordPress exists via admin/models/Galleries.php.

  24. 8.8CVE-2019-16113ExploitEPSS 78%

    Bludit 3.9.2 allows remote code execution via bl-kernel/ajax/upload-images.php because PHP code can be entered with a .jpg file name, and then this PHP code can write other PHP code to a ../ pathname.

  25. 6.5CVE-2019-16097ExploitEPSS 22%

    core/api/user.go in Harbor 1.7.0 through 1.8.2 allows non-admin users to create admin accounts via the POST /api/users API, when Harbor is setup with DB as authentication backend and allow user to do self-registration. Fixed version: v1.7.…

  26. 6.1CVE-2019-14223ExploitEPSS 4.5%

    An issue was discovered in Alfresco Community Edition versions below 5.2.6, 6.0.N and 6.1.N. The Alfresco Share application is vulnerable to an Open Redirect attack via a crafted POST request. By manipulating the POST parameters, an attack…

  27. 8.8CVE-2019-15029ExploitEPSS 12%

    FusionPBX 4.4.8 allows an attacker to execute arbitrary system commands by submitting a malicious command to the service_edit.php file (which will insert the malicious command into the database). To trigger the command, one needs to call t…

  28. 5.5CVE-2019-14339ExploitEPSS 5.4%

    The ContentProvider in the Canon PRINT jp.co.canon.bsd.ad.pixmaprint 2.5.5 application for Android does not properly restrict canon.ij.printer.capability.data data access. This allows an attacker's malicious application to obtain sensitive…

  29. 9.9CVE-2019-15954ExploitEPSS 79%

    An issue was discovered in Total.js CMS 12.0.0. An authenticated user with the widgets privilege can gain achieve Remote Command Execution (RCE) on the remote server by creating a malicious widget with a special tag containing JavaScript c…

  30. 8.8CVE-2019-15949KEVExploitEPSS 77%

    Nagios XI before 5.6.6 allows remote command execution as root. The exploit requires access to the server as the nagios user, or access as the admin user via the web interface. The getprofile.sh script, invoked by downloading a system prof…

  31. 6.1CVE-2019-10677ExploitEPSS 7.3%

    Multiple Cross-Site Scripting (XSS) issues in the web interface on DASAN Zhone ZNID GPON 2426A EU version S3.1.285 devices allow a remote attacker to execute arbitrary JavaScript via manipulation of an unsanitized GET parameter: /zhndnsdis…

  32. 6.1CVE-2019-14470ExploitEPSS 83%

    cosenary Instagram-PHP-API (aka Instagram PHP API V2), as used in the UserPro plugin through 4.9.32 for WordPress, has XSS via the example/success.php error_description parameter.

  33. 5.4CVE-2019-15814ExploitEPSS 1.6%

    Multiple stored XSS vulnerabilities in Sentrifugo 3.2 could allow authenticated users to inject arbitrary web script or HTML.

  34. 8.8CVE-2019-15813ExploitEPSS 33%

    Multiple file upload restriction bypass vulnerabilities in Sentrifugo 3.2 could allow authenticated users to execute arbitrary code via a webshell.

  35. 9.8CVE-2019-10709ExploitEPSS 12%

    AsusPTPFilter.sys on Asus Precision TouchPad 11.0.0.25 hardware has a Pool Overflow associated with the \\.\AsusTP device, leading to a DoS or potentially privilege escalation via a crafted DeviceIoControl call.

  36. 5.6CVE-2019-1125ExploitEPSS 4.5%

    An information disclosure vulnerability exists when certain central processing units (CPU) speculatively access memory. An attacker who successfully exploited the vulnerability could read privileged data across trust boundaries. To exploit…

  37. 6.1CVE-2019-15889ExploitEPSS 11%

    The download-manager plugin before 2.9.94 for WordPress has XSS via the category shortcode feature, as demonstrated by the orderby or search[publish_date] parameter.

  38. 7.5CVE-2019-15043ExploitEPSS 63%

    In Grafana 2.x through 6.x before 6.3.4, parts of the HTTP API allow unauthenticated use. This makes it possible to run a denial of service attack against the server running Grafana.

  39. 8.8CVE-2019-15858ExploitEPSS 20%

    admin/includes/class.import.snippet.php in the "Woody ad snippets" plugin before 2.2.5 for WordPress allows unauthenticated options import, as demonstrated by storing an XSS payload for remote code execution.

  40. 4.8CVE-2019-15829ExploitEPSS 1.2%

    The photoblocks-grid-gallery plugin before 1.1.33 for WordPress has wp-admin/admin.php?page=photoblocks-edit&id= XSS.

  41. 9.8CVE-2019-15823ExploitEPSS 8.6%

    The wps-hide-login plugin before 1.5.3 for WordPress has an action=confirmaction protection bypass.

  42. 6.1CVE-2019-15811ExploitEPSS 7.0%

    In DomainMOD through 4.13, the parameter daterange in the file reporting/domains/cost-by-month.php has XSS.

  43. 7.5CVE-2019-13608KEVExploitEPSS 30%

    Citrix StoreFront Server before 1903, 7.15 LTSR before CU4 (3.12.4000), and 7.6 LTSR before CU8 (3.0.8000) allows XXE attacks.

  44. 6.1CVE-2019-15774ExploitEPSS 2.1%

    The nd-booking plugin before 2.5 for WordPress has a nopriv_ AJAX action that allows modification of the siteurl setting.

  45. 8.2CVE-2019-11248ExploitEPSS 75%

    The debugging endpoint /debug/pprof is exposed over the unauthenticated Kubelet healthz port. The go pprof endpoint is exposed over the Kubelet's healthz port. This debugging endpoint can potentially leak sensitive information such as inte…

  46. 7.8CVE-2019-15752KEVExploitEPSS 49%

    Docker Desktop Community Edition before 2.1.0.1 allows local users to gain privileges by placing a Trojan horse docker-credential-wincred.exe file in %PROGRAMDATA%\DockerDesktop\version-bin\ as a low-privilege user, and then waiting for an…

  47. 6.1CVE-2019-15713ExploitEPSS 2.2%

    The my-calendar plugin before 3.1.10 for WordPress has XSS.

  48. 4.3CVE-2019-13237ExploitEPSS 7.3%

    In Alkacon OpenCms 10.5.4 and 10.5.5, there are multiple resources vulnerable to Local File Inclusion that allow an attacker to access server resources: clearhistory.jsp, convertxml.jsp, group_new.jsp, loginmessage.jsp, xmlcontentrepair.js…

  49. 6.1CVE-2019-13236ExploitEPSS 3.1%

    In system/workplace/ in Alkacon OpenCms 10.5.4 and 10.5.5, there are multiple Reflected and Stored XSS issues in the management interface.

  50. 6.1CVE-2019-13235ExploitEPSS 2.9%

    In the Alkacon OpenCms Apollo Template 10.5.4 and 10.5.5, there is XSS in the Login form.