cve.bz

Matching records, newest first, page 121

Filter
  1. 6.1CVE-2019-13234ExploitEPSS 2.9%

    In the Alkacon OpenCms Apollo Template 10.5.4 and 10.5.5, there is XSS in the search engine.

  2. 6.1CVE-2017-18590ExploitEPSS 1.4%

    The timesheet plugin before 0.1.5 for WordPress has multiple XSS issues.

  3. 8.8CVE-2019-15642ExploitEPSS 37%

    rpc.cgi in Webmin through 1.920 allows authenticated Remote Code Execution via a crafted object name because unserialise_variable makes an eval call. NOTE: the Webmin_Servers_Index documentation states "RPC can be used to run any command o…

  4. 8.1CVE-2019-15637ExploitEPSS 14%

    Numerous Tableau products are vulnerable to XXE via a malicious workbook, extension, or data source, leading to information disclosure or a DoS. This affects Tableau Server, Tableau Desktop, Tableau Reader, and Tableau Public Desktop.

  5. 6.1CVE-2019-15501ExploitEPSS 8.1%

    Reflected cross site scripting (XSS) in L-Soft LISTSERV before 16.5-2018a exists via the /scripts/wa.exe OK parameter.

  6. 7.3CVE-2019-15092ExploitEPSS 5.1%

    The webtoffee "WordPress Users & WooCommerce Customers Import Export" plugin 1.3.0 for WordPress allows CSV injection in the user_url, display_name, first_name, and last_name columns in an exported CSV file created by the WF_CustomerImpExp…

  7. 5.3CVE-2019-8446ExploitEPSS 18%

    The /rest/issueNav/1/issueTable resource in Jira before version 8.3.2 allows remote attackers to enumerate usernames via an incorrect authorisation check.

  8. 6.5CVE-2019-11013ExploitEPSS 26%

    Nimble Streamer 3.0.2-2 through 3.5.4-9 has a ../ directory traversal vulnerability. Successful exploitation could allow an attacker to traverse the file system to access files or directories that are outside of the restricted directory on…

  9. 9.8CVE-2018-20985ExploitEPSS 7.7%

    The wp-payeezy-pay plugin before 2.98 for WordPress has local file inclusion in pay.php, donate.php, donate-rec, and pay-rec.

  10. 9.8CVE-2017-18580ExploitEPSS 12%

    The shortcodes-ultimate plugin before 5.0.1 for WordPress has remote code execution via a filter in a meta, post, or user shortcode.

  11. 7.5CVE-2016-10924ExploitEPSS 12%

    The ebook-download plugin before 1.2 for WordPress has directory traversal.

  12. 9.8CVE-2019-1937ExploitEPSS 76%

    A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data could allow an unauthenticated, remote attacker to acquire a …

  13. 7.2CVE-2019-1936ExploitEPSS 39%

    A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data could allow an authenticated, remote attacker to execute arbi…

  14. 9.8CVE-2019-1935ExploitEPSS 83%

    A vulnerability in Cisco Integrated Management Controller (IMC) Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data could allow an unauthenticated, remote attacker to log in to the CLI of an affected system by using…

  15. 8.8CVE-2019-12624ExploitEPSS 18%

    A vulnerability in the web-based management interface of Cisco IOS XE New Generation Wireless Controller (NGWC) could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack and perform arbitrary act…

  16. 6.1CVE-2017-18562ExploitEPSS 1.4%

    The error-log-viewer plugin before 1.0.6 for WordPress has multiple XSS issues.

  17. 6.1CVE-2017-18516ExploitEPSS 1.7%

    The bws-linkedin plugin before 1.0.5 for WordPress has multiple XSS issues.

  18. 6.1CVE-2017-18564ExploitEPSS 1.4%

    The sender plugin before 1.2.1 for WordPress has multiple XSS issues.

  19. 6.1CVE-2017-18565ExploitEPSS 1.4%

    The updater plugin before 1.35 for WordPress has multiple XSS issues.

  20. 6.1CVE-2017-18558ExploitEPSS 1.4%

    The bws-testimonials plugin before 0.1.9 for WordPress has multiple XSS issues.

  21. 6.1CVE-2017-18557ExploitEPSS 1.4%

    The bws-google-maps plugin before 1.3.6 for WordPress has multiple XSS issues.

  22. 6.1CVE-2017-18556ExploitEPSS 1.4%

    The bws-google-analytics plugin before 1.7.1 for WordPress has multiple XSS issues.

  23. 6.1CVE-2017-18537ExploitEPSS 1.6%

    The visitors-online plugin before 1.0.0 for WordPress has multiple XSS issues.

  24. 6.1CVE-2017-18536ExploitEPSS 2.0%

    The stop-user-enumeration plugin before 1.3.8 for WordPress has XSS.

  25. 9.8CVE-2019-8050ExploitEPSS 41%

    Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.30497 and earlier, and 2015.006.30498 and earlier have a heap overflow vulnerability…

  26. 9.8CVE-2019-8049ExploitEPSS 20%

    Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.30497 and earlier, and 2015.006.30498 and earlier have a heap overflow vulnerability…

  27. 9.8CVE-2019-8048ExploitEPSS 35%

    Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.30497 and earlier, and 2015.006.30498 and earlier have a buffer error vulnerability.…

  28. 9.8CVE-2019-8046ExploitEPSS 18%

    Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.30497 and earlier, and 2015.006.30498 and earlier have a heap overflow vulnerability…

  29. 9.8CVE-2019-8045ExploitEPSS 16%

    Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.30497 and earlier, and 2015.006.30498 and earlier have an untrusted pointer derefere…

  30. 9.8CVE-2019-8044ExploitEPSS 14%

    Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.30497 and earlier, and 2015.006.30498 and earlier have a double free vulnerability. …

  31. 7.5CVE-2019-8043ExploitEPSS 13%

    Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.30497 and earlier, and 2015.006.30498 and earlier have an out-of-bounds read vulnera…

  32. 9.8CVE-2019-8042ExploitEPSS 17%

    Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.30497 and earlier, and 2015.006.30498 and earlier have a heap overflow vulnerability…

  33. 9.8CVE-2019-8041ExploitEPSS 18%

    Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.30497 and earlier, and 2015.006.30498 and earlier have a heap overflow vulnerability…

  34. 9.8CVE-2019-8024ExploitEPSS 15%

    Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.30497 and earlier, and 2015.006.30498 and earlier have an use after free vulnerabili…

  35. 9.8CVE-2019-8017ExploitEPSS 13%

    Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.30497 and earlier, and 2015.006.30498 and earlier have an untrusted pointer derefere…

  36. 9.8CVE-2019-8016ExploitEPSS 22%

    Adobe Acrobat and Reader versions 2019.012.20035 and earlier, 2019.012.20035 and earlier, 2017.011.30142 and earlier, 2017.011.30143 and earlier, 2015.006.30497 and earlier, and 2015.006.30498 and earlier have an out-of-bounds write vulner…

  37. 6.1CVE-2017-18566ExploitEPSS 1.4%

    The user-role plugin before 1.5.6 for WordPress has multiple XSS issues.

  38. 6.1CVE-2017-18532ExploitEPSS 1.4%

    The realty plugin before 1.1.0 for WordPress has multiple XSS issues.

  39. 6.1CVE-2017-18530ExploitEPSS 1.4%

    The rating-bws plugin before 0.2 for WordPress has multiple XSS issues.

  40. 6.1CVE-2017-18529ExploitEPSS 1.6%

    The promobar plugin before 1.1.1 for WordPress has multiple XSS issues.

  41. 6.1CVE-2017-18528ExploitEPSS 1.8%

    The pdf-print plugin before 1.9.4 for WordPress has multiple XSS issues.

  42. 6.1CVE-2017-18527ExploitEPSS 1.7%

    The pagination plugin before 1.0.7 for WordPress has multiple XSS issues.

  43. 6.1CVE-2017-18518ExploitEPSS 1.6%

    The bws-smtp plugin before 1.1.0 for WordPress has multiple XSS issues.

  44. 6.1CVE-2017-18517ExploitEPSS 1.6%

    The bws-pinterest plugin before 1.0.5 for WordPress has multiple XSS issues.

  45. 5.3CVE-2019-14430ExploitEPSS 3.0%

    plugin/Audit/Objects/AuditTable.php in YouPHPTube through 7.2 allows SQL Injection.

  46. 7.8CVE-2019-13069ExploitEPSS 1.2%

    extenua SilverSHielD 6.x fails to secure its ProgramData folder, leading to a Local Privilege Escalation to SYSTEM. The attacker must replace SilverShield.config.sqlite with a version containing an additional user account, and then use SSH…

  47. 6.1CVE-2017-18542ExploitEPSS 1.4%

    The zendesk-help-center plugin before 1.0.5 for WordPress has multiple XSS issues.

  48. 9.8CVE-2015-9323ExploitEPSS 45%

    The 404-to-301 plugin before 2.0.3 for WordPress has SQL injection.

  49. 9.8CVE-2019-15107KEVExploitEPSS 99.7%

    An issue was discovered in Webmin <=1.920. The parameter old in password_change.cgi contains a command injection vulnerability.

  50. 9.8CVE-2019-15106ExploitEPSS 25%

    An issue was discovered in Zoho ManageEngine OpManager in builds before 14310. One can bypass the user password requirement and execute commands on the server. The "username+'@opm' string is used for the password. For example, if the usern…