cve.bz

Matching records, newest first, page 122

Filter
  1. 8.8CVE-2019-15105ExploitEPSS 7.8%

    An issue was discovered in Zoho ManageEngine Application Manager through 14.2. There is a SQL Injection vulnerability in jsp/NewThresholdConfiguration.jsp via the resourceid parameter. Therefore, a low-authority user can gain the authority…

  2. 8.8CVE-2019-15104ExploitEPSS 7.8%

    An issue was discovered in Zoho ManageEngine OpManager through 12.4x. There is a SQL Injection vulnerability in jsp/NewThresholdConfiguration.jsp via the resourceid parameter. Therefore, a low-authority user can gain the authority of SYSTE…

  3. 7.8CVE-2019-15084ExploitEPSS 0.9%

    Realtek Waves MaxxAudio driver 1.6.2.0, as used on Dell laptops, installs with incorrect file permissions. As a result, a local attacker can escalate to SYSTEM.

  4. 9.8CVE-2019-9851ExploitEPSS 78%

    LibreOffice is typically bundled with LibreLogo, a programmable turtle vector graphics script, which can execute arbitrary python commands contained with the document it is launched from. Protection was added, to address CVE-2019-9848, to …

  5. 8.8CVE-2019-14422ExploitEPSS 16%

    An issue was discovered in in TortoiseSVN 1.12.1. The Tsvncmd: URI handler allows a customised diff operation on Excel workbooks, which could be used to open remote workbooks without protection from macro security settings to execute arbit…

  6. 6.1CVE-2019-14789ExploitEPSS 1.6%

    The Custom 404 Pro plugin 3.2.8 for WordPress has XSS via the wp-admin/admin.php?page=c4p-main page parameter.

  7. 4.8CVE-2019-15081ExploitEPSS 2.0%

    OpenCart 3.x, when the attacker has login access to the admin panel, allows stored XSS within the Source/HTML editing feature of the Categories, Product, and Information pages.

  8. 6.7CVE-2019-1184ExploitEPSS 70%

    An elevation of privilege vulnerability exists when Windows Core Shell COM Server Registrar improperly handles COM calls. An attacker who successfully exploited this vulnerability could potentially set certain items to run at a higher leve…

  9. 7.9CVE-2019-1170ExploitEPSS 2.4%

    An elevation of privilege vulnerability exists when reparse points are created by sandboxed processes allowing sandbox escape. An attacker who successfully exploited the vulnerability could use the sandbox escape to elevate privileges on a…

  10. 5.5CVE-2019-1153ExploitEPSS 2.8%

    An information disclosure vulnerability exists when the Microsoft Windows Graphics Component improperly handles objects in memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the …

  11. 8.8CVE-2019-1152ExploitEPSS 13%

    A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts. An attacker who successfully exploited the vulnerability could take control of the affected system. An attacker…

  12. 8.8CVE-2019-1151ExploitEPSS 15%

    A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts. An attacker who successfully exploited the vulnerability could take control of the affected system. An attacker…

  13. 8.8CVE-2019-1150ExploitEPSS 26%

    A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts. An attacker who successfully exploited the vulnerability could take control of the affected system. An attacker…

  14. 8.8CVE-2019-1149ExploitEPSS 14%

    A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts. An attacker who successfully exploited the vulnerability could take control of the affected system. An attacker…

  15. 5.5CVE-2019-1148ExploitEPSS 2.8%

    An information disclosure vulnerability exists when the Microsoft Windows Graphics Component improperly handles objects in memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the …

  16. 8.8CVE-2019-1145ExploitEPSS 13%

    A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts. An attacker who successfully exploited the vulnerability could take control of the affected system. An attacker…

  17. 8.8CVE-2019-1144ExploitEPSS 13%

    A remote code execution vulnerability exists when the Windows font library improperly handles specially crafted embedded fonts. An attacker who successfully exploited the vulnerability could take control of the affected system. An attacker…

  18. 6.1CVE-2018-19386ExploitEPSS 9.0%

    SolarWinds Database Performance Analyzer 11.1.457 contains an instance of Reflected XSS in its idcStateError component, where the page parameter is reflected into the HREF of the 'Try Again' Button on the page, aka a /iwc/idcStateError.iwc…

  19. 6.1CVE-2019-14974ExploitEPSS 28%

    SugarCRM Enterprise 9.0.0 allows mobile/error-not-supported-platform.html?desktop_url= XSS.

  20. 6.1CVE-2015-9312ExploitEPSS 1.9%

    The newstatpress plugin before 1.0.5 for WordPress has XSS related to an IMG element.

  21. 6.1CVE-2017-18487ExploitEPSS 1.5%

    The adsense-plugin (aka Google AdSense) plugin before 1.44 for WordPress has multiple XSS issues.

  22. 6.1CVE-2017-18496ExploitEPSS 1.4%

    The htaccess plugin before 1.7.6 for WordPress has multiple XSS issues.

  23. 6.1CVE-2017-18494ExploitEPSS 1.4%

    The custom-search-plugin plugin before 1.36 for WordPress has multiple XSS issues.

  24. 6.1CVE-2017-18493ExploitEPSS 1.4%

    The custom-admin-page plugin before 0.1.2 for WordPress has multiple XSS issues.

  25. 6.1CVE-2017-18492ExploitEPSS 1.5%

    The contact-form-to-db plugin before 1.5.7 for WordPress has multiple XSS issues.

  26. 6.1CVE-2017-18491ExploitEPSS 1.5%

    The contact-form-plugin plugin before 4.0.6 for WordPress has multiple XSS issues.

  27. 6.1CVE-2017-18490ExploitEPSS 1.5%

    The contact-form-multi plugin before 1.2.1 for WordPress has multiple XSS issues.

  28. 8.8CVE-2019-14530ExploitEPSS 66%

    An issue was discovered in custom/ajax_download.php in OpenEMR before 5.0.2 via the fileName parameter. An attacker can download any file (that is readable by the user www-data) from server storage. If the requested file is writable for th…

  29. 9.1CVE-2019-13462ExploitEPSS 11%

    Lansweeper before 7.1.117.4 allows unauthenticated SQL injection.

  30. 6.1CVE-2017-18505ExploitEPSS 1.7%

    The twitter-plugin plugin before 2.55 for WordPress has XSS.

  31. 6.1CVE-2017-18502ExploitEPSS 1.7%

    The subscriber plugin before 1.3.5 for WordPress has multiple XSS issues.

  32. 6.1CVE-2017-18501ExploitEPSS 1.4%

    The social-login-bws plugin before 0.2 for WordPress has multiple XSS issues.

  33. 6.1CVE-2017-18500ExploitEPSS 1.4%

    The social-buttons-pack plugin before 1.1.1 for WordPress has multiple XSS issues.

  34. 6.1CVE-2019-14950ExploitEPSS 1.2%

    The wp-live-chat-support plugin before 8.0.27 for WordPress has XSS via the GDPR page.

  35. 7.5CVE-2019-12258ExploitEPSS 23%

    Wind River VxWorks 6.6 through vx7 has Session Fixation in the TCP component. This is a IPNET security vulnerability: DoS of TCP connection via malformed TCP options.

  36. 9.8CVE-2019-12255ExploitEPSS 75%

    Wind River VxWorks has a Buffer Overflow in the TCP component (issue 1 of 4). This is a IPNET security vulnerability: TCP Urgent Pointer = 0 that leads to an integer underflow.

  37. 9.8CVE-2019-11581KEVExploitEPSS 85%

    There was a server-side template injection vulnerability in Jira Server and Data Center, in the ContactAdministrators and the SendBulkMail actions. An attacker is able to remotely execute code on systems that run a vulnerable version of Ji…

  38. 4.8CVE-2019-14804ExploitEPSS 2.7%

    studio/polyglot.php?page=etemplates in UNA 10.0.0-RC1 allows XSS via the System Name field under Emails during template editing.

  39. 6.5CVE-2019-14793ExploitEPSS 1.7%

    The Meta Box plugin before 4.16.3 for WordPress allows file deletion via ajax, with the wp-admin/admin-ajax.php?action=rwmb_delete_file attachment_id parameter.

  40. 6.5CVE-2019-14312ExploitEPSS 21%

    Aptana Jaxer 1.0.3.4547 is vulnerable to a local file inclusion vulnerability in the wikilite source code viewer. This vulnerability allows a remote attacker to read internal files on the server via a tools/sourceViewer/index.html?filename…

  41. 5.4CVE-2019-14221ExploitEPSS 1.7%

    1CRM On-Premise Software 8.5.7 allows XSS via a payload that is mishandled during a Run Report operation.

  42. 9.8CVE-2019-13101ExploitEPSS 67%

    An issue was discovered on D-Link DIR-600M 3.02, 3.03, 3.04, and 3.06 devices. wan.htm can be accessed directly without authentication, which can lead to disclosure of information about the WAN, and can also be leveraged by an attacker to …

  43. 6.1CVE-2019-14750ExploitEPSS 11%

    An issue was discovered in osTicket before 1.10.7 and 1.12.x before 1.12.1. Stored XSS exists in setup/install.php. It was observed that no input sanitization was provided in the firstname and lastname fields of the application. The insert…

  44. 8.8CVE-2019-14749ExploitEPSS 9.6%

    An issue was discovered in osTicket before 1.10.7 and 1.12.x before 1.12.1. CSV (aka Formula) injection exists in the export spreadsheets functionality. These spreadsheets are generated dynamically from unvalidated or unfiltered user input…

  45. 5.4CVE-2019-14748ExploitEPSS 2.7%

    An issue was discovered in osTicket before 1.10.7 and 1.12.x before 1.12.1. The Ticket creation form allows users to upload files along with queries. It was found that the file-upload functionality has fewer (or no) mitigations implemented…

  46. 7.2CVE-2019-1914ExploitEPSS 25%

    A vulnerability in the web management interface of Cisco Small Business 220 Series Smart Switches could allow an authenticated, remote attacker to perform a command injection attack. The vulnerability is due to insufficient validation of u…

  47. 9.8CVE-2019-1913ExploitEPSS 26%

    Multiple vulnerabilities in the web management interface of Cisco Small Business 220 Series Smart Switches could allow an unauthenticated, remote attacker to overflow a buffer, which then allows the execution of arbitrary code with root pr…

  48. 9.1CVE-2019-1912ExploitEPSS 17%

    A vulnerability in the web management interface of Cisco Small Business 220 Series Smart Switches could allow an unauthenticated, remote attacker to upload arbitrary files. The vulnerability is due to incomplete authorization checks in the…

  49. 8.8CVE-2019-14347ExploitEPSS 9.3%

    Internal/Views/addUsers.php in Schben Adive 2.0.7 allows remote unprivileged users (editor or developer) to create an administrator account via admin/user/add, as demonstrated by a Python PoC script.

  50. 6.1CVE-2019-14696ExploitEPSS 16%

    Open-School 3.0, and Community Edition 2.3, allows XSS via the osv/index.php?r=students/guardians/create id parameter.