cve.bz

Matching records, newest first, page 167

Filter
  1. 7.5CVE-2017-14495ExploitEPSS 85%

    Memory leak in dnsmasq before 2.78, when the --add-mac, --add-cpe-id or --add-subnet option is specified, allows remote attackers to cause a denial of service (memory consumption) via vectors involving DNS response creation.

  2. 5.9CVE-2017-14494ExploitEPSS 70%

    dnsmasq before 2.78, when configured as a relay, allows remote attackers to obtain sensitive memory information via vectors involving handling DHCPv6 forwarded requests.

  3. 9.8CVE-2017-14493ExploitEPSS 85%

    Stack-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted DHCPv6 request.

  4. 9.8CVE-2017-14492ExploitEPSS 94%

    Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted IPv6 router advertisement request.

  5. 8.2CVE-2017-11322ExploitEPSS 5.1%

    The chroothole_client executable in UCOPIA Wireless Appliance before 5.1.8 allows remote attackers to gain root privileges via a dollar sign ($) metacharacter in the argument to chroothole_client.

  6. 7.2CVE-2017-11321ExploitEPSS 8.3%

    The restricted shell interface in UCOPIA Wireless Appliance before 5.1.8 allows remote authenticated users to gain 'admin' privileges via shell metacharacters in the less command.

  7. 7.8CVE-2015-7358ExploitEPSS 1.2%

    The IsDriveLetterAvailable method in Driver/Ntdriver.c in TrueCrypt 7.0, VeraCrypt before 1.15, and CipherShed, when running on Windows, does not properly validate drive letter symbolic links, which allows local users to mount an encrypted…

  8. 5.9CVE-2017-14955ExploitEPSS 12%

    Check_MK before 1.2.8p26 mishandles certain errors within the failed-login save feature because of a race condition, which allows remote attackers to obtain sensitive user information by reading a GUI crash report.

  9. 9.8CVE-2017-14942ExploitEPSS 61%

    Intelbras WRN 150 devices allow remote attackers to read the configuration file, and consequently bypass authentication, via a direct request for cgi-bin/DownloadCfg/RouterCfm.cfg containing an admin:language=pt cookie.

  10. 5.5CVE-2017-14939ExploitEPSS 5.9%

    decode_line_info in dwarf2.c in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.29, mishandles a length calculation, which allows remote attackers to cause a denial of service (heap-based buffer over…

  11. 9.8CVE-2017-14738ExploitEPSS 2.6%

    FileRun (version 2017.09.18 and below) suffers from a remote SQL injection vulnerability due to a failure to sanitize input in the metafield parameter inside the metasearch module (under the search function).

  12. 9.8CVE-2017-14702ExploitEPSS 8.3%

    ERS Data System 1.8.1.0 allows remote attackers to execute arbitrary code, related to "com.branaghgroup.ecers.update.UpdateRequest" object deserialization.

  13. 6.1CVE-2017-14620ExploitEPSS 2.5%

    SmarterStats Version 11.3.6347 will Render the Referer Field of HTTP Logfiles from URL /Data/Reports/ReferringURLsWithQueries resulting in Stored Cross Site Scripting.

  14. 9.8CVE-2017-14507ExploitEPSS 5.3%

    Multiple SQL injection vulnerabilities in the Content Timeline plugin 4.4.2 for WordPress allow remote attackers to execute arbitrary SQL commands via the (1) timeline parameter in content_timeline_class.php; or the id parameter to (2) pag…

  15. 7.5CVE-2017-14849ExploitEPSS 54%

    Node.js 8.5.0 before 8.6.0 allows remote attackers to access unintended files, because a change to ".." handling was incompatible with the pathname validation used by unspecified community modules.

  16. 8.8CVE-2017-14847ExploitEPSS 2.7%

    Mojoomla WPAMS Apartment Management System for WordPress allows SQL Injection via the id parameter.

  17. 8.8CVE-2017-14846ExploitEPSS 2.7%

    Mojoomla Hospital Management System for WordPress allows SQL Injection via the id parameter.

  18. 8.8CVE-2017-14845ExploitEPSS 2.7%

    Mojoomla WPCHURCH Church Management System for WordPress allows SQL Injection via the id parameter.

  19. 8.8CVE-2017-14844ExploitEPSS 2.7%

    Mojoomla WPGYM WordPress Gym Management System allows SQL Injection via the id parameter.

  20. 8.8CVE-2017-14843ExploitEPSS 2.7%

    Mojoomla School Management System for WordPress allows SQL Injection via the id parameter.

  21. 8.8CVE-2017-14842ExploitEPSS 2.7%

    Mojoomla SMSmaster Multipurpose SMS Gateway for WordPress allows SQL Injection via the id parameter.

  22. 6.5CVE-2017-14841ExploitEPSS 2.3%

    Mojoomla Annual Maintenance Contract (AMC) Management System allows Arbitrary File Upload in profilesetting image handling.

  23. 8.8CVE-2017-14840ExploitEPSS 3.5%

    TeamWork TicketPlus allows Arbitrary File Upload in updateProfile.

  24. 8.8CVE-2017-14839ExploitEPSS 3.5%

    TeamWork Photo Fusion allows Arbitrary File Upload in changeAvatar and changeCover.

  25. 8.8CVE-2017-14838ExploitEPSS 3.5%

    TeamWork Job Links allows Arbitrary File Upload in profileChange and coverChange.

  26. 6.1CVE-2017-14622ExploitEPSS 2.9%

    Multiple cross-site scripting (XSS) vulnerabilities in the 2kb Amazon Affiliates Store plugin before 2.1.1 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) page parameter or (2) kbAction parameter in …

  27. 6.1CVE-2017-14524ExploitEPSS 2.9%

    Multiple open redirect vulnerabilities in OpenText Documentum Administrator 7.2.0180.0055 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a (1) URL in the startat parameter to xda/help/en/de…

  28. 9.8CVE-2017-11120ExploitEPSS 9.1%

    On Broadcom BCM4355C0 Wi-Fi chips 9.44.78.27.0.1.56 and other chips, an attacker can craft a malformed RRM neighbor report frame to trigger an internal buffer overflow in the Wi-Fi firmware, aka B-V2017061204.

  29. 9.8CVE-2015-8249ExploitEPSS 74%

    The FileUploadServlet class in ManageEngine Desktop Central 9 before build 91093 allows remote attackers to upload and execute arbitrary files via the ConnectionId parameter.

  30. 7.8CVE-2015-3643ExploitEPSS 1.5%

    usb-creator before 0.2.38.3ubuntu0.1 on Ubuntu 12.04 LTS, before 0.2.56.3ubuntu0.1 on Ubuntu 14.04 LTS, before 0.2.62ubuntu0.3 on Ubuntu 14.10, and before 0.2.67ubuntu0.1 on Ubuntu 15.04 allows local users to gain privileges by leveraging …

  31. 7.8CVE-2015-1336ExploitEPSS 1.0%

    The daily mandb cleanup job in Man-db before 2.7.6.1-1 as packaged in Ubuntu and Debian allows local users with access to the man account to gain privileges via vectors involving insecure chown use.

  32. 8.8CVE-2017-14704ExploitEPSS 8.5%

    Multiple unrestricted file upload vulnerabilities in the (1) imageSubmit and (2) proof_submit functions in Claydip Laravel Airbnb Clone 1.0 allow remote authenticated users to execute arbitrary code by uploading a file with an executable e…

  33. 8.0CVE-2017-13129ExploitEPSS 1.1%

    Cross-site request forgery (CSRF) vulnerability in ZKTeco ZKTime Web 2.0.1.12280 allows remote authenticated users to hijack the authentication of administrators for requests that add administrators by leveraging lack of anti-CSRF tokens.

  34. 9.8CVE-2017-14703ExploitEPSS 2.1%

    SQL injection vulnerability in Cash Back Comparison Script 1.0 allows remote attackers to execute arbitrary SQL commands via the PATH_INFO to search/.

  35. 7.5CVE-2014-0997ExploitEPSS 6.4%

    WiFiMonitor in Android 4.4.4 as used in the Nexus 5 and 4, Android 4.2.2 as used in the LG D806, Android 4.2.2 as used in the Samsung SM-T310, Android 4.1.2 as used in the Motorola RAZR HD, and potentially other unspecified Android release…

  36. 8.8CVE-2015-7293ExploitEPSS 3.1%

    Multiple cross-site request forgery (CSRF) vulnerabilities in Zope Management Interface 4.3.7 and earlier, and Plone before 5.x.

  37. 7.8CVE-2015-4669ExploitEPSS 1.1%

    The MySQL "root" user in Xsuite 2.x does not have a password set, which allows local users to access databases on the system.

  38. 6.1CVE-2015-4668ExploitEPSS 6.7%

    Open redirect vulnerability in Xsuite 2.4.4.5 and earlier allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the redirurl parameter.

  39. 9.8CVE-2015-4667ExploitEPSS 11%

    Multiple hardcoded credentials in Xsuite 2.x.

  40. 5.4CVE-2017-14725ExploitEPSS 2.2%

    Before version 4.8.2, WordPress was susceptible to an open redirect attack in wp-admin/edit-tag-form.php and wp-admin/user-edit.php.

  41. 7.8CVE-2017-14627ExploitEPSS 19%

    Stack-based buffer overflows in CyberLink LabelPrint 2.5 allow remote attackers to execute arbitrary code via the (1) author (inside the INFORMATION tag), (2) name (inside the INFORMATION tag), (3) artist (inside the TRACK tag), or (4) def…

  42. 5.4CVE-2017-14717ExploitEPSS 1.4%

    In EPESI 1.8.2 rev20170830, there is Stored XSS in the Tasks Description parameter.

  43. 5.4CVE-2017-14712ExploitEPSS 1.4%

    In EPESI 1.8.2 rev20170830, there is Stored XSS in the Tasks Phonecall Notes Title parameter.

  44. 9.8CVE-2017-14706ExploitEPSS 28%

    DenyAll WAF before 6.4.1 allows unauthenticated remote attackers to obtain authentication information by making a typeOf=debug request to /webservices/download/index.php, and then reading the iToken field in the reply. This affects DenyAll…

  45. 7.5CVE-2017-14680ExploitEPSS 4.3%

    ZKTeco ZKTime Web 2.0.1.12280 allows remote attackers to obtain sensitive employee metadata via a direct request for a PDF document.

  46. 4.8CVE-2017-14651ExploitEPSS 3.8%

    WSO2 Data Analytics Server 3.1.0 has XSS in carbon/resources/add_collection_ajaxprocessor.jsp via the collectionName or parentPath parameter.

  47. 9.8CVE-2017-12930ExploitEPSS 3.1%

    SQL Injection in the admin interface in TecnoVISION DLX Spot Player4 version >1.5.10 allows remote unauthenticated users to access the web interface as administrator via a crafted password.

  48. 8.8CVE-2017-12929ExploitEPSS 10%

    Arbitrary File Upload in resource.php of TecnoVISION DLX Spot Player4 version >1.5.10 allows remote authenticated users to upload arbitrary files leading to Remote Command Execution.

  49. 9.8CVE-2015-1187KEVExploitEPSS 83%

    The ping tool in multiple D-Link and TRENDnet devices allow remote attackers to execute arbitrary code via the ping_addr parameter to ping.ccp.

  50. 6.1CVE-2017-14619ExploitEPSS 2.2%

    Cross-site scripting (XSS) vulnerability in phpMyFAQ through 2.9.8 allows remote attackers to inject arbitrary web script or HTML via the "Title of your FAQ" field in the Configuration Module.