cve.bz

Matching records, newest first, page 130

Filter
  1. 8.8CVE-2018-4441ExploitEPSS 13%

    A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12.1.1, tvOS 12.1.1, watchOS 5.1.2, Safari 12.0.2, iTunes 12.9.2 for Windows, iCloud for Windows 7.9.

  2. 8.8CVE-2018-4438ExploitEPSS 5.8%

    A logic issue existed resulting in memory corruption. This was addressed with improved state management. This issue affected versions prior to iOS 12.1.1, tvOS 12.1.1, watchOS 5.1.2, Safari 12.0.2, iTunes 12.9.2 for Windows, iCloud for Win…

  3. 7.8CVE-2018-4435ExploitEPSS 3.1%

    A logic issue was addressed with improved restrictions. This issue affected versions prior to iOS 12.1.1, macOS Mojave 10.14.2, tvOS 12.1.1, watchOS 5.1.2.

  4. 8.8CVE-2018-4416ExploitEPSS 35%

    Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 12.1, tvOS 12.1, watchOS 5.1, Safari 12.0.1, iTunes 12.9.1, iCloud for Windows 7.8.

  5. 8.8CVE-2018-4386ExploitEPSS 6.5%

    Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 12.1, tvOS 12.1, watchOS 5.1, Safari 12.0.1, iTunes 12.9.1, iCloud for Windows 7.8.

  6. 7.8CVE-2018-4384ExploitEPSS 2.8%

    A memory corruption issue was addressed with improved input validation. This issue affected versions prior to iOS 12.1, watchOS 5.1.

  7. 8.8CVE-2018-4382ExploitEPSS 5.8%

    Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 12.1, tvOS 12.1, watchOS 5.1, Safari 12.0.1, iTunes 12.9.1, iCloud for Windows 7.8.

  8. 9.8CVE-2018-4367ExploitEPSS 6.5%

    A memory corruption issue was addressed with improved input validation. This issue affected versions prior to iOS 12.1.

  9. 7.5CVE-2018-4366ExploitEPSS 6.4%

    A memory corruption issue was addressed with improved input validation. This issue affected versions prior to iOS 12.1.

  10. 8.8CVE-2018-4328ExploitEPSS 9.7%

    Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 12, tvOS 12, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7.

  11. 8.8CVE-2018-4323ExploitEPSS 9.6%

    Multiple memory corruption issues were addressed with improved memory handling. This issue affected versions prior to iOS 12, tvOS 12, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7.

  12. 8.8CVE-2018-4318ExploitEPSS 9.3%

    A use after free issue was addressed with improved memory management. This issue affected versions prior to iOS 12, tvOS 12, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7.

  13. 8.8CVE-2018-4317ExploitEPSS 9.3%

    A use after free issue was addressed with improved memory management. This issue affected versions prior to iOS 12, tvOS 12, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7.

  14. 8.8CVE-2018-4315ExploitEPSS 9.4%

    A use after free issue was addressed with improved memory management. This issue affected versions prior to iOS 12, tvOS 12, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7.

  15. 8.8CVE-2018-4314ExploitEPSS 10%

    A use after free issue was addressed with improved memory management. This issue affected versions prior to iOS 12, tvOS 12, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7.

  16. 8.8CVE-2018-4312ExploitEPSS 9.3%

    A use after free issue was addressed with improved memory management. This issue affected versions prior to iOS 12, tvOS 12, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7.

  17. 8.8CVE-2018-4306ExploitEPSS 9.3%

    A use after free issue was addressed with improved memory management. This issue affected versions prior to iOS 12, tvOS 12, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7.

  18. 8.8CVE-2018-4197ExploitEPSS 9.3%

    A use after free issue was addressed with improved memory management. This issue affected versions prior to iOS 12, tvOS 12, Safari 12, iTunes 12.9 for Windows, iCloud for Windows 7.7.

  19. 4.8CVE-2019-10261ExploitEPSS 2.3%

    CentOS Web Panel (CWP) 0.9.8.789 is vulnerable to Stored/Persistent XSS for the "Name Server 1" and "Name Server 2" fields via a "DNS Functions" "Edit Nameservers IPs" action.

  20. 9.8CVE-2019-10692ExploitEPSS 77%

    In the wp-google-maps plugin before 7.11.18 for WordPress, includes/class.rest-api.php in the REST API does not sanitize field names before a SELECT statement.

  21. 7.2CVE-2019-9193ExploitEPSS 92%

    In PostgreSQL 9.3 through 11.2, the "COPY TO/FROM PROGRAM" function allows superusers and users in the 'pg_execute_server_program' group to execute arbitrary code in the context of the database's operating system user. This functionality i…

  22. 7.3CVE-2018-19113ExploitEPSS 0.8%

    The Pronestor PNHM (aka Health Monitoring or HealthMonitor) add-in before 8.1.13.0 for Outlook has "BUILTIN\Users:(I)(F)" permissions for the "%PROGRAMFILES(X86)%\proNestor\Outlook add-in for Pronestor\PronestorHealthMonitor.exe" file, whi…

  23. 7.5CVE-2019-6715ExploitEPSS 19%

    pub/sns.php in the W3 Total Cache plugin before 0.9.4 for WordPress allows remote attackers to read arbitrary files via the SubscribeURL field in SubscriptionConfirmation JSON data.

  24. 7.5CVE-2019-10678ExploitEPSS 17%

    Domoticz before 4.10579 neglects to categorize \n and \r as insecure argument options.

  25. 9.8CVE-2019-10664ExploitEPSS 8.2%

    Domoticz before 4.10578 allows SQL Injection via the idx parameter in CWebServer::GetFloorplanImage in WebServer.cpp.

  26. 9.8CVE-2019-10655ExploitEPSS 15%

    Grandstream GAC2500 1.0.3.35, GXP2200 1.0.3.27, GVC3202 1.0.3.51, GXV3275 before 1.0.3.219 Beta, and GXV3240 before 1.0.3.219 Beta devices allow unauthenticated remote code execution via shell metacharacters in a /manager?action=getlogcat …

  27. 7.2CVE-2019-10652ExploitEPSS 7.0%

    An issue was discovered in flatCore 1.4.7. acp/acp.php allows remote authenticated administrators to upload arbitrary .php files, related to the addons feature.

  28. 9.8CVE-2019-10647ExploitEPSS 6.6%

    ZZZCMS zzzphp v1.6.3 allows remote attackers to execute arbitrary PHP code via a .php URL in the plugins/ueditor/php/controller.php?action=catchimage source[] parameter because of a lack of inc/zzz_file.php restrictions. For example, sourc…

  29. 7.5CVE-2019-9922ExploitEPSS 10%

    An issue was discovered in the Harmis JE Messenger component 1.2.2 for Joomla!. Directory Traversal allows read access to arbitrary files.

  30. 9.8CVE-2017-18365ExploitEPSS 21%

    The Management Console in GitHub Enterprise 2.8.x before 2.8.7 has a deserialization issue that allows unauthenticated remote attackers to execute arbitrary code. This occurs because the enterprise session secret is always the same, and ca…

  31. 9.8CVE-2019-10232ExploitEPSS 22%

    Teclib GLPI through 9.3.3 has SQL injection via the "cycle" parameter in /scripts/unlock_tasks.php.

  32. 9.8CVE-2019-5420ExploitEPSS 89%

    A remote code execution vulnerability in development mode Rails <5.2.2.1, <6.0.0.beta3 can allow an attacker to guess the automatically generated development mode secret token. This secret token can be used in combination with other Rails …

  33. 7.5CVE-2019-5418KEVExploitEPSS 99%

    There is a File Content Disclosure vulnerability in Action View <5.2.2.1, <5.1.6.2, <5.0.7.2, <4.2.11.1 and v3 where specially crafted accept headers can cause contents of arbitrary files on the target system's filesystem to be exposed.

  34. 9.8CVE-2019-10068KEVExploitEPSS 95%

    An issue was discovered in Kentico 12.0.x before 12.0.15, 11.0.x before 11.0.48, 10.0.x before 10.0.52, and 9.x versions. Due to a failure to validate security headers, it was possible for a specially crafted request to the staging service…

  35. 8.8CVE-2019-9055ExploitEPSS 12%

    An issue was discovered in CMS Made Simple 2.2.8. In the module DesignManager (in the files action.admin_bulk_css.php and action.admin_bulk_template.php), with an unprivileged user with Designer permission, it is possible reach an unserial…

  36. 8.1CVE-2019-9053ExploitEPSS 69%

    An issue was discovered in CMS Made Simple 2.2.8. It is possible with the News module, through a crafted URL, to achieve unauthenticated blind time-based SQL injection via the m1_idlist parameter.

  37. 4.8CVE-2019-7646ExploitEPSS 7.1%

    CentOS-WebPanel.com (aka CWP) CentOS Web Panel through 0.9.8.763 is vulnerable to Stored/Persistent XSS for the "Package Name" field via the add_package module parameter.

  38. 10.0CVE-2019-7609KEVExploitEPSS 95%

    Kibana versions before 5.6.15 and 6.6.1 contain an arbitrary code execution flaw in the Timelion visualizer. An attacker with access to the Timelion application could send a request that will attempt to execute javascript code. This could …

  39. 9.8CVE-2019-3396KEVExploitEPSS >99.9%

    The Widget Connector macro in Atlassian Confluence Server before version 6.6.12 (the fixed version for 6.6.x), from version 6.7.0 before 6.12.3 (the fixed version for 6.12.x), from version 6.13.0 before 6.13.3 (the fixed version for 6.13.x…

  40. 6.1CVE-2018-12653ExploitEPSS 2.6%

    A Reflected Cross Site Scripting (XSS) vulnerability exists in Adrenalin HRMS 5.4.0. An attacker can input malicious JavaScript code in /RPT/SSRSDynamicEditReports.aspx via 'ReportId' parameter.

  41. 6.1CVE-2019-3810ExploitEPSS 14%

    A flaw was found in moodle versions 3.6 to 3.6.1, 3.5 to 3.5.3, 3.4 to 3.4.6, 3.1 to 3.1.15 and earlier unsupported versions. The /userpix/ page did not escape users' full names, which are included as text when hovering over profile images…

  42. 9.8CVE-2018-16858ExploitEPSS 67%

    It was found that libreoffice before versions 6.0.7 and 6.1.3 was vulnerable to a directory traversal attack which could be used to execute arbitrary macros bundled with a document. An attacker could craft a document, which when opened by …

  43. 6.1CVE-2019-9978KEVExploitEPSS 73%

    The social-warfare plugin before 3.5.3 for WordPress has stored XSS via the wp-admin/admin-post.php?swp_debug=load_options swp_url parameter, as exploited in the wild in March 2019. This affects Social Warfare and Social Warfare Pro.

  44. 9.8CVE-2019-9960ExploitEPSS 13%

    The downloadZip function in application/controllers/admin/export.php in LimeSurvey through 3.16.1+190225 allows a relative path.

  45. 5.3CVE-2019-9649ExploitEPSS 15%

    An issue was discovered in the SFTP Server component in Core FTP 2.0 Build 674. Using the MDTM FTP command, a remote attacker can use a directory traversal technique (..\..\) to browse outside the root directory to determine the existence …

  46. 5.3CVE-2019-9648ExploitEPSS 14%

    An issue was discovered in the SFTP Server component in Core FTP 2.0 Build 674. A directory traversal vulnerability exists using the SIZE command along with a \..\..\ substring, allowing an attacker to enumerate file existence based on the…

  47. 6.1CVE-2019-9915ExploitEPSS 3.6%

    GetSimpleCMS 3.3.13 has an Open Redirect via the admin/index.php redirect parameter.

  48. 6.1CVE-2019-9912ExploitEPSS 3.1%

    The wp-google-maps plugin before 7.10.43 for WordPress has XSS via the wp-admin/admin.php PATH_INFO.

  49. 9.8CVE-2019-7238KEVExploitEPSS 77%

    Sonatype Nexus Repository Manager before 3.15.0 has Incorrect Access Control.

  50. 9.8CVE-2019-9083ExploitEPSS 18%

    SQLiteManager 1.20 and 1.24 allows SQL injection via the /sqlitemanager/main.php dbsel parameter. NOTE: This product is discontinued.