cve.bz

Matching records, newest first, page 159

Filter
  1. 9.8CVE-2017-17873ExploitEPSS 2.7%

    Vanguard Marketplace Digital Products PHP 1.4 has SQL Injection via the PATH_INFO to the /p URI.

  2. 9.8CVE-2017-17872ExploitEPSS 2.7%

    The JEXTN Video Gallery extension 3.0.5 for Joomla! has SQL Injection via the id parameter in a view=category action.

  3. 9.8CVE-2017-17871ExploitEPSS 2.7%

    The "JEXTN Question And Answer" extension 3.1.0 for Joomla! has SQL Injection via the an parameter in a view=tags action, or the ques-srch parameter.

  4. 9.8CVE-2017-17870ExploitEPSS 3.0%

    The JBuildozer extension 1.4.1 for Joomla! has SQL Injection via the appid parameter in an entriessearch action.

  5. 9.8CVE-2017-17849ExploitEPSS 19%

    A buffer overflow vulnerability in GetGo Download Manager 5.3.0.2712 and earlier could allow remote HTTP servers to execute arbitrary code on NAS devices via a long response.

  6. 7.8CVE-2017-16995ExploitEPSS 30%

    The check_alu_op function in kernel/bpf/verifier.c in the Linux kernel through 4.4 allows local users to cause a denial of service (memory corruption) or possibly have unspecified other impact by leveraging incorrect sign extension.

  7. 7.1CVE-2017-13878ExploitEPSS 1.0%

    An issue was discovered in certain Apple products. macOS before 10.13.2 is affected. The issue involves the "Intel Graphics Driver" component. It allows local users to bypass intended memory-read restrictions or cause a denial of service (…

  8. 7.8CVE-2017-13876ExploitEPSS 5.1%

    An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. tvOS before 11.2 is affected. watchOS before 4.2 is affected. The issue involves the "Kernel" component. It allows attackers …

  9. 7.8CVE-2017-13875ExploitEPSS 4.4%

    An issue was discovered in certain Apple products. macOS before 10.13.2 is affected. The issue involves the "Intel Graphics Driver" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of servi…

  10. 5.5CVE-2017-13869ExploitEPSS 4.7%

    An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. tvOS before 11.2 is affected. watchOS before 4.2 is affected. The issue involves the "Kernel" component. It allows attackers …

  11. 5.5CVE-2017-13868ExploitEPSS 4.7%

    An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. tvOS before 11.2 is affected. watchOS before 4.2 is affected. The issue involves the "Kernel" component. It allows attackers …

  12. 7.8CVE-2017-13867ExploitEPSS 5.1%

    An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. tvOS before 11.2 is affected. watchOS before 4.2 is affected. The issue involves the "Kernel" component. It allows attackers …

  13. 5.5CVE-2017-13865ExploitEPSS 4.2%

    An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. tvOS before 11.2 is affected. watchOS before 4.2 is affected. The issue involves the "Kernel" component. It allows attackers …

  14. 7.8CVE-2017-13861ExploitEPSS 15%

    An issue was discovered in certain Apple products. iOS before 11.2 is affected. tvOS before 11.2 is affected. watchOS before 4.2 is affected. The issue involves the "IOSurface" component. It allows attackers to execute arbitrary code in a …

  15. 5.5CVE-2017-13855ExploitEPSS 4.8%

    An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. tvOS before 11.2 is affected. watchOS before 4.2 is affected. The issue involves the "Kernel" component. It allows attackers …

  16. 7.8CVE-2017-13847ExploitEPSS 5.0%

    An issue was discovered in certain Apple products. iOS before 11.2 is affected. macOS before 10.13.2 is affected. The issue involves the "IOKit" component. It allows attackers to execute arbitrary code in a privileged context or cause a de…

  17. 7.5CVE-2017-17692ExploitEPSS 79%

    Samsung Internet Browser 5.4.02.3 allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via crafted JavaScript code that redirects to a child tab and rewrites the innerHTML property.

  18. 9.8CVE-2017-17411ExploitEPSS 88%

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Linksys WVBR0. Authentication is not required to exploit this vulnerability. The specific flaw exists within the web management portal. The…

  19. 8.0CVE-2017-5262ExploitEPSS 4.9%

    In versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware, the SNMP read-only (RO) community string has access to sensitive information by OID reference.

  20. 8.8CVE-2017-5261ExploitEPSS 8.9%

    In versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware, the 'ping' and 'traceroute' functions of the web administrative console expose a file path traversal vulnerability, accessible to all authenticated users.

  21. 8.8CVE-2017-5260ExploitEPSS 8.1%

    In versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware, although the option to access the configuration file is not available in the normal web administrative console for the 'user' account, the configuration file is accessibl…

  22. 8.8CVE-2017-5259ExploitEPSS 33%

    In versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware, an undocumented, root-privilege administration web shell is available using the HTTP path https://<device-ip-or-hostname>/adm/syscmd.asp.

  23. 8.8CVE-2017-5255ExploitEPSS 74%

    In version 3.5 and prior of Cambium Networks ePMP firmware, a lack of input sanitation for certain parameters on the web management console allows any authenticated user (including the otherwise low-privilege readonly user) to inject shell…

  24. 8.8CVE-2017-5254ExploitEPSS 52%

    In version 3.5 and prior of Cambium Networks ePMP firmware, the non-administrative users 'installer' and 'home' have the capability of changing passwords for other accounts, including admin, after disabling a client-side protection mechani…

  25. 9.8CVE-2012-2576ExploitEPSS 60%

    SQL injection vulnerability in the LoginServlet page in SolarWinds Storage Manager before 5.1.2, SolarWinds Storage Profiler before 5.1.2, and SolarWinds Backup Profiler before 5.1.2 allows remote attackers to execute arbitrary SQL command…

  26. 6.1CVE-2017-17752ExploitEPSS 1.4%

    Ability Mail Server 3.3.2 has Cross Site Scripting (XSS) via the body of an e-mail message, with JavaScript code executed on the Read Mail screen (aka the /_readmail URI). This is fixed in version 4.2.4.

  27. 9.8CVE-2017-17761ExploitEPSS 7.5%

    An issue was discovered on Ichano AtHome IP Camera devices. The device runs the "noodles" binary - a service on port 1300 that allows a remote (LAN) unauthenticated user to run arbitrary commands. This binary requires the "system" XML elem…

  28. 7.5CVE-2017-17088ExploitEPSS 7.0%

    The Enterprise version of SyncBreeze 10.2.12 and earlier is affected by a Remote Denial of Service vulnerability. The web server does not check bounds when reading server requests in the Host header on making a connection, resulting in a c…

  29. 8.8CVE-2017-15049ExploitEPSS 17%

    The ZoomLauncher binary in the Zoom client for Linux before 2.0.115900.1201 does not properly sanitize user input when constructing a shell command, which allows remote attackers to execute arbitrary code by leveraging the zoommtg:// schem…

  30. 8.8CVE-2017-15048ExploitEPSS 10%

    Stack-based buffer overflow in the ZoomLauncher binary in the Zoom client for Linux before 2.0.115900.1201 allows remote attackers to execute arbitrary code by leveraging the zoommtg:// scheme handler.

  31. 9.8CVE-2017-17759ExploitEPSS 11%

    Conarc iChannel allows remote attackers to obtain sensitive information, modify the configuration, or cause a denial of service (by deleting the configuration) via a wc.dll?wwMaint~EditConfig request (which reaches an older version of a We…

  32. 9.8CVE-2017-17105ExploitEPSS 85%

    Zivif PR115-204-P-RS V2.3.4.2103 and V4.7.4.2121 (and possibly in-between versions) web cameras are vulnerable to unauthenticated, blind remote command injection via CGI scripts used as part of the web interface, as demonstrated by a cgi-b…

  33. 9.8CVE-2017-16949ExploitEPSS 19%

    An issue was discovered in the AccessKeys AccessPress Anonymous Post Pro plugin through 3.1.9 for WordPress. Improper input sanitization allows the attacker to override the settings for allowed file extensions and upload file size, related…

  34. 9.8CVE-2017-17721ExploitEPSS 3.6%

    CWEBNET/WOSummary/List in ZUUSE BEIMS ContractorWeb .NET 5.18.0.0 allows SQL injection via the tradestatus, assetno, assignto, building, domain, jobtype, site, trade, woType, workorderno, or workorderstatus parameter.

  35. 9.8CVE-2017-17651ExploitEPSS 3.0%

    Paid To Read Script 2.0.5 has SQL Injection via the admin/userview.php uid parameter, the admin/viewemcamp.php fnum parameter, or the admin/viewvisitcamp.php fn parameter.

  36. 6.1CVE-2017-17649ExploitEPSS 2.5%

    Readymade Video Sharing Script 3.2 has HTML Injection via the single-video-detail.php comment parameter.

  37. 9.8CVE-2017-17645ExploitEPSS 3.0%

    Bus Booking Script 1.0 has SQL Injection via the txtname parameter to admin/index.php.

  38. 9.8CVE-2017-17643ExploitEPSS 3.0%

    FS Lynda Clone 1.0 has SQL Injection via the keywords parameter to tutorial/.

  39. 9.8CVE-2017-17739ExploitEPSS 12%

    The BrightSign Digital Signage (4k242) device (Firmware 6.2.63 and below) has directory traversal via the /storage.html rp parameter, allowing an attacker to read or write to files.

  40. 7.5CVE-2017-17738ExploitEPSS 5.8%

    The BrightSign Digital Signage (4k242) device (Firmware 6.2.63 and below) allows renaming and modifying files via /tools.html.

  41. 6.1CVE-2017-17737ExploitEPSS 2.1%

    The BrightSign Digital Signage (4k242) device (Firmware 6.2.63 and below) has XSS via the REF parameter to /network_diagnostics.html or /storage_info.html.

  42. 9.8CVE-2017-17731ExploitEPSS 13%

    DedeCMS through 5.7 has SQL Injection via the $_FILES superglobal to plus/recommend.php.

  43. 9.8CVE-2017-3195ExploitEPSS 21%

    Commvault Edge Communication Service (cvd) prior to version 11 SP7 or version 11 SP6 with hotfix 590 is prone to a stack-based buffer overflow vulnerability that could lead to arbitrary code execution with administrative privileges.

  44. 5.9CVE-2017-12373ExploitEPSS 13%

    A vulnerability in the TLS protocol implementation of legacy Cisco ASA 5500 Series (ASA 5505, 5510, 5520, 5540, and 5550) devices could allow an unauthenticated, remote attacker to access sensitive information, aka a Return of Bleichenbach…

  45. 6.5CVE-2017-16787ExploitEPSS 6.6%

    The Web Configuration Utility in Meinberg LANTIME devices with firmware before 6.24.004 allows remote attackers to read arbitrary files by leveraging failure to restrict URL access.

  46. 8.8CVE-2017-17405ExploitEPSS 74%

    Ruby before 2.4.3 allows Net::FTP command injection. Net::FTP#get, getbinaryfile, gettextfile, put, putbinaryfile, and puttextfile use Kernel#open to open a local file. If the localfile argument starts with the "|" pipe character, the comm…

  47. 8.8CVE-2017-5264ExploitEPSS 2.7%

    Versions of Nexpose prior to 6.4.66 fail to adequately validate the source of HTTP requests intended for the Automated Actions administrative web application, and are susceptible to a cross-site request forgery (CSRF) attack.

  48. 9.8CVE-2017-17672ExploitEPSS 15%

    In vBulletin through 5.3.x, there is an unauthenticated deserialization vulnerability that leads to arbitrary file deletion and, under certain circumstances, code execution, because of unsafe usage of PHP's unserialize() in vB_Library_Temp…

  49. 9.8CVE-2017-17648ExploitEPSS 3.8%

    Entrepreneur Dating Script 2.0.1 has SQL Injection via the search_result.php marital, gender, country, or profileid parameter.

  50. 5.9CVE-2017-17427ExploitEPSS 16%

    Radware Alteon devices with a firmware version between 31.0.0.0-31.0.3.0 are vulnerable to an adaptive-chosen ciphertext attack ("Bleichenbacher attack"). This allows an attacker to decrypt observed traffic that has been encrypted with the…