cve.bz

Matching records, newest first, page 164

Filter
  1. 8.8CVE-2017-16352ExploitEPSS 15%

    GraphicsMagick 1.3.26 is vulnerable to a heap-based buffer overflow vulnerability found in the "Display visual image directory" feature of the DescribeImage() function of the magick/describe.c file. One possible way to trigger the vulnerab…

  2. 8.8CVE-2017-16244ExploitEPSS 2.0%

    Cross-Site Request Forgery exists in OctoberCMS 1.0.426 (aka Build 426) due to improper validation of CSRF tokens for postback handling, allowing an attacker to successfully take over the victim's account. The attack bypasses a protection …

  3. 7.0CVE-2017-15884ExploitEPSS 0.9%

    In HashiCorp Vagrant VMware Fusion plugin (aka vagrant-vmware-fusion) 5.0.0, a local attacker or malware can silently subvert the plugin update process in order to escalate to root privileges.

  4. 7.8CVE-2017-15950ExploitEPSS 5.5%

    Flexense SyncBreeze Enterprise version 10.1.16 is vulnerable to a buffer overflow that can be exploited for arbitrary code execution. The flaw is triggered by providing a long input into the "Destination directory" field, either within an …

  5. 9.8CVE-2017-15993ExploitEPSS 2.7%

    Zomato Clone Script allows SQL Injection via the restaurant-menu.php resid parameter.

  6. 9.8CVE-2017-15992ExploitEPSS 2.7%

    Website Broker Script allows SQL Injection via the 'status_id' Parameter to status_list.php.

  7. 9.8CVE-2017-15991ExploitEPSS 2.7%

    Vastal I-Tech Agent Zone (aka The Real Estate Script) allows SQL Injection in searchCommercial.php via the property_type, city, or posted_by parameter, or searchResidential.php via the property_type, city, or bedroom parameter, a different…

  8. 9.8CVE-2017-15990ExploitEPSS 7.7%

    Php Inventory & Invoice Management System allows Arbitrary File Upload via dashboard/edit_myaccountdetail/.

  9. 9.8CVE-2017-15989ExploitEPSS 2.7%

    Online Exam Test Application allows SQL Injection via the resources.php sort parameter in a category action.

  10. 9.8CVE-2017-15988ExploitEPSS 2.7%

    Nice PHP FAQ Script allows SQL Injection via the index.php nice_theme parameter, a different vulnerability than CVE-2008-6525.

  11. 9.8CVE-2017-15987ExploitEPSS 2.0%

    Fake Magazine Cover Script allows SQL Injection via the rate.php value parameter or the content.php id parameter.

  12. 9.8CVE-2017-15986ExploitEPSS 2.7%

    CPA Lead Reward Script allows SQL Injection via the username parameter.

  13. 9.8CVE-2017-15985ExploitEPSS 2.7%

    Basic B2B Script allows SQL Injection via the product_view1.php pid or id parameter.

  14. 9.8CVE-2017-15984ExploitEPSS 2.7%

    Creative Management System (CMS) Lite 1.4 allows SQL Injection via the S parameter to index.php.

  15. 9.8CVE-2017-15983ExploitEPSS 2.7%

    MyMagazine Magazine & Blog CMS 1.0 allows SQL Injection via the id parameter to admin/admin_process.php for form editing.

  16. 9.8CVE-2017-15982ExploitEPSS 2.6%

    Dynamic News Magazine & Blog CMS 1.0 allows SQL Injection via the id parameter to admin/admin_process.php for form editing.

  17. 9.8CVE-2017-15981ExploitEPSS 2.6%

    Responsive Newspaper Magazine & Blog CMS 1.0 allows SQL Injection via the id parameter to admin/admin_process.php for form editing.

  18. 9.8CVE-2017-15980ExploitEPSS 2.7%

    US Zip Codes Database Script 1.0 allows SQL Injection via the state parameter.

  19. 9.8CVE-2017-15979ExploitEPSS 2.7%

    Shareet - Photo Sharing Social Network 1.0 allows SQL Injection via the photo parameter.

  20. 9.8CVE-2017-15978ExploitEPSS 2.7%

    AROX School ERP PHP Script 1.0 allows SQL Injection via the office_admin/ id parameter.

  21. 9.8CVE-2017-15977ExploitEPSS 2.7%

    Protected Links - Expiring Download Links 1.0 allows SQL Injection via the username parameter.

  22. 7.5CVE-2017-15921ExploitEPSS 7.6%

    In Watchdog Anti-Malware 2.74.186.150 and Online Security Pro 2.74.186.150, the zam32.sys driver contains a NULL pointer dereference vulnerability that gets triggered when sending an operation to ioctl 0x80002010. This is due to the input …

  23. 7.5CVE-2017-15920ExploitEPSS 7.6%

    In Watchdog Anti-Malware 2.74.186.150 and Online Security Pro 2.74.186.150, the zam32.sys driver contains a NULL pointer dereference vulnerability that gets triggered when sending an operation to ioctl 0x80002054. This is due to the input …

  24. 8.8CVE-2017-7411ExploitEPSS 66%

    An issue was discovered in Enalean Tuleap 9.6 and prior versions. The vulnerability exists because the User::getRecentElements() method is using the unserialize() function with a preference value that can be arbitrarily manipulated by mali…

  25. 9.8CVE-2012-5357ExploitEPSS 68%

    Ektron Content Management System (CMS) before 8.02 SP5 uses the XslCompiledTransform class with enablescript set to true, which allows remote attackers to execute arbitrary code with NETWORK SERVICE privileges via crafted XSL data.

  26. 9.8CVE-2017-15976ExploitEPSS 3.0%

    ZeeBuddy 2x allows SQL Injection via the admin/editadgroup.php groupid parameter, a different vulnerability than CVE-2008-3604.

  27. 9.8CVE-2017-15975ExploitEPSS 3.0%

    Vastal I-Tech Dating Zone 0.9.9 allows SQL Injection via the 'product_id' to add_to_cart.php, a different vulnerability than CVE-2008-4461.

  28. 9.8CVE-2017-15974ExploitEPSS 3.7%

    tPanel 2009 allows SQL injection for Authentication Bypass via 'or 1=1 or ''=' to login.php.

  29. 9.8CVE-2017-15973ExploitEPSS 2.9%

    Sokial Social Network Script 1.0 allows SQL Injection via the id parameter to admin/members_view.php.

  30. 9.8CVE-2017-15972ExploitEPSS 2.9%

    SoftDatepro Dating Social Network 1.3 allows SQL Injection via the viewprofile.php profid parameter, the viewmessage.php sender_id parameter, or the /admin Email field, a related issue to CVE-2017-15971.

  31. 9.8CVE-2017-15971ExploitEPSS 2.0%

    Same Sex Dating Software Pro 1.0 allows SQL Injection via the viewprofile.php profid parameter, the viewmessage.php sender_id parameter, or the /admin Email field, a related issue to CVE-2017-15972.

  32. 9.8CVE-2017-15970ExploitEPSS 2.2%

    PHP CityPortal 2.0 allows SQL Injection via the nid parameter to index.php in a page=news action, or the cat parameter.

  33. 9.8CVE-2017-15969ExploitEPSS 2.1%

    PG All Share Video 1.0 allows SQL Injection via the PATH_INFO to search/tag, friends/index, users/profile, or video_catalog/category.

  34. 9.8CVE-2017-15968ExploitEPSS 2.1%

    MyBuilder Clone 1.0 allows SQL Injection via the phpsqlsearch_genxml.php subcategory parameter.

  35. 9.8CVE-2017-15967ExploitEPSS 2.1%

    Mailing List Manager Pro 3.0 allows SQL Injection via the edit parameter to admin/users in a sort=login action, or the edit parameter to admin/template.

  36. 9.8CVE-2017-15966ExploitEPSS 3.4%

    The Zh YandexMap (aka com_zhyandexmap) component 6.1.1.0 for Joomla! allows SQL Injection via the placemarklistid parameter to index.php.

  37. 9.8CVE-2017-15965ExploitEPSS 3.4%

    The NS Download Shop (aka com_ns_downloadshop) component 2.2.6 for Joomla! allows SQL Injection via the id parameter in an invoice.create action.

  38. 9.8CVE-2017-15964ExploitEPSS 2.1%

    Job Board Script Software allows SQL Injection via the PATH_INFO to a /job-details URI.

  39. 9.8CVE-2017-15963ExploitEPSS 2.1%

    iTech Gigs Script 1.21 allows SQL Injection via the browse-scategory.php sc parameter or the service-provider.php ser parameter.

  40. 9.8CVE-2017-15962ExploitEPSS 4.9%

    iStock Management System 1.0 allows Arbitrary File Upload via user/profile.

  41. 9.8CVE-2017-15961ExploitEPSS 2.1%

    iProject Management System 1.0 allows SQL Injection via the ID parameter to index.php.

  42. 9.8CVE-2017-15960ExploitEPSS 2.1%

    Article Directory Script 3.0 allows SQL Injection via the id parameter to author.php or category.php.

  43. 9.8CVE-2017-15959ExploitEPSS 2.1%

    Adult Script Pro 2.2.4 allows SQL Injection via the PATH_INFO to a /download URI, a different vulnerability than CVE-2007-6576.

  44. 9.8CVE-2017-15958ExploitEPSS 2.1%

    D-Park Pro Domain Parking Script 1.0 allows SQL Injection via the username to admin/loginform.php.

  45. 8.8CVE-2017-15957ExploitEPSS 3.9%

    my_profile.php in Ingenious School Management System 2.3.0 allows a student or teacher to upload an arbitrary file.

  46. 7.5CVE-2017-15956ExploitEPSS 4.7%

    ConverTo Video Downloader & Converter 1.4.1 allows Arbitrary File Download via the token parameter to download.php.

  47. 9.8CVE-2014-2023ExploitEPSS 4.1%

    Multiple SQL injection vulnerabilities in the Tapatalk plugin 4.9.0 and earlier and 5.x through 5.2.1 for vBulletin allow remote attackers to execute arbitrary SQL commands via a crafted xmlrpc API request to (1) unsubscribe_forum.php or (…

  48. 8.8CVE-2017-15879ExploitEPSS 7.2%

    CSV Injection (aka Excel Macro Injection or Formula Injection) exists in admin/server/api/download.js and lib/list/getCSVData.js in KeystoneJS before 4.0.0-beta.7 via a value that is mishandled in a CSV export.

  49. 6.1CVE-2017-15878ExploitEPSS 3.4%

    A cross-site scripting (XSS) vulnerability exists in fields/types/markdown/MarkdownType.js in KeystoneJS before 4.0.0-beta.7 via the Contact Us feature.

  50. 5.3CVE-2017-15223ExploitEPSS 4.5%

    Denial-of-service vulnerability in ArGoSoft Mini Mail Server 1.0.0.2 and earlier allows remote attackers to waste CPU resources (memory consumption) via unspecified vectors, possibly triggering an infinite loop.