cve.bz

Matching records, newest first, page 169

Filter
  1. 5.5CVE-2017-8684ExploitEPSS 4.3%

    Windows GDI+ on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT 8.1, allows information disclosure by the way it discloses kernel memory addresses, aka "Windows GDI+…

  2. 5.5CVE-2017-8683ExploitEPSS 23%

    Windows graphics on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016, allows an attacker to execute re…

  3. 8.8CVE-2017-8682ExploitEPSS 50%

    Windows graphics on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, Windows Server 2016, Microsoft Office Word Viewer, Micros…

  4. 5.5CVE-2017-8681ExploitEPSS 4.2%

    The Windows kernel component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an information…

  5. 5.5CVE-2017-8680ExploitEPSS 4.2%

    The Windows kernel component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT 8.1 allows an information disclosure vulnerability when it improperly handles objects…

  6. 5.5CVE-2017-8678ExploitEPSS 4.2%

    The Windows kernel component on Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an information…

  7. 7.5CVE-2017-11764ExploitEPSS 64%

    Microsoft Edge in Microsoft Windows 10 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to the way that the Microsoft Edge scripting engine handles objects in memory, …

  8. 9.8CVE-2017-14396ExploitEPSS 2.9%

    In osTicket before 1.10.1, SQL injection is possible by constructing an array via use of square brackets at the end of a parameter name, as demonstrated by the key parameter to file.php.

  9. 5.5CVE-2017-8918ExploitEPSS 2.2%

    XXE in Dive Assistant - Template Builder in Blackwave Dive Assistant - Desktop Edition 8.0 allows attackers to remotely view local files via a crafted template.xml file.

  10. 7.8CVE-2017-14344ExploitEPSS 1.8%

    This vulnerability allows local attackers to escalate privileges on Jungo WinDriver 12.4.0 and earlier. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. T…

  11. 8.0CVE-2017-1000251ExploitEPSS 16%

    The native Bluetooth stack in the Linux Kernel (BlueZ), starting at the Linux kernel version 2.6.32 and up to and including 4.13.1, are vulnerable to a stack overflow vulnerability in the processing of L2CAP configuration responses resulti…

  12. 7.5CVE-2017-14335ExploitEPSS 28%

    On Beijing Hanbang Hanbanggaoke devices, because user-controlled input is not sufficiently sanitized, sending a PUT request to /ISAPI/Security/users/1 allows an admin password change.

  13. 7.8CVE-2017-14266ExploitEPSS 3.6%

    tcprewrite in Tcpreplay 3.4.4 has a Heap-Based Buffer Overflow vulnerability triggered by a crafted PCAP file, a related issue to CVE-2016-6160.

  14. 6.1CVE-2017-3133ExploitEPSS 11%

    A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.6.0 and earlier allows attackers to execute unauthorized code or commands via the Replacement Message HTML for SSL-VPN.

  15. 6.1CVE-2017-3132ExploitEPSS 8.1%

    A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.6.0 and earlier allows attackers to Execute unauthorized code or commands via the action input during the activation of a FortiToken.

  16. 5.4CVE-2017-3131ExploitEPSS 7.7%

    A Cross-Site Scripting vulnerability in Fortinet FortiOS versions 5.4.0 through 5.4.4 and 5.6.0 allows attackers to execute unauthorized code or commands via the filter input in "Applications" under FortiView.

  17. 9.0CVE-2015-8351ExploitEPSS 37%

    PHP remote file inclusion vulnerability in the Gwolle Guestbook plugin before 1.5.4 for WordPress, when allow_url_include is enabled, allows remote authenticated users to execute arbitrary PHP code via a URL in the abspath parameter to fro…

  18. 6.1CVE-2015-8350ExploitEPSS 2.6%

    Multiple cross-site scripting (XSS) vulnerabilities in the Calls to Action plugin before 2.5.1 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) open-tab parameter in a wp_cta_global_settings action to…

  19. 6.1CVE-2015-8349ExploitEPSS 3.3%

    Cross-site scripting (XSS) vulnerability in SourceBans before 2.0 pre-alpha allows remote attackers to inject arbitrary web script or HTML via the advSearch parameter to index.php.

  20. 7.8CVE-2017-14153ExploitEPSS 1.8%

    This vulnerability allows local attackers to escalate privileges on Jungo WinDriver 12.4.0 and earlier. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. T…

  21. 7.8CVE-2017-14075ExploitEPSS 1.8%

    This vulnerability allows local attackers to escalate privileges on Jungo WinDriver 12.4.0 and earlier. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. T…

  22. 9.3CVE-2015-4523ExploitEPSS 4.5%

    Blue Coat Malware Analysis Appliance (MAA) before 4.2.5 and Malware Analyzer G2 allow remote attackers to bypass a virtual machine protection mechanism and consequently write to arbitrary files, cause a denial of service (host reboot or re…

  23. 5.5CVE-2017-9095ExploitEPSS 3.7%

    XXE in Diving Log 6.0 allows attackers to remotely view local files through a crafted dive.xml file that is mishandled during a Subsurface import.

  24. 6.1CVE-2017-14219ExploitEPSS 1.4%

    XSS (persistent) on the Intelbras Wireless N 150Mbps router with firmware WRN 240 allows attackers to steal wireless credentials without being connected to the network, related to userRpm/popupSiteSurveyRpm.htm and userRpm/WlanSecurityRpm.…

  25. 8.1CVE-2015-3314ExploitEPSS 4.9%

    SQL injection vulnerability in WordPress Tune Library plugin before 1.5.5.

  26. 9.8CVE-2015-3313ExploitEPSS 8.3%

    SQL injection vulnerability in WordPress Community Events plugin before 1.4.

  27. 7.0CVE-2015-3222ExploitEPSS 2.0%

    syscheck/seechanges.c in OSSEC 2.7 through 2.8.1 on NIX systems allows local users to execute arbitrary code as root.

  28. 9.8CVE-2017-9834ExploitEPSS 4.1%

    SQL injection vulnerability in the WatuPRO plugin before 5.5.3.7 for WordPress allows remote attackers to execute arbitrary SQL commands via the watupro_questions parameter in a watupro_submit action to wp-admin/admin-ajax.php.

  29. 9.8CVE-2017-14147ExploitEPSS 66%

    An issue was discovered on FiberHome User End Routers Bearing Model Number AN1020-25 which could allow an attacker to easily restore a router to its factory settings by simply browsing to the link http://[Default-Router-IP]/restoreinfo.cgi…

  30. 5.4CVE-2017-13754ExploitEPSS 3.9%

    Cross-site scripting (XSS) vulnerability in the "advanced settings - time server" module in Wibu-Systems CodeMeter before 6.50b allows remote attackers to inject arbitrary web script or HTML via the "server name" field in actions/ChangeCon…

  31. 8.8CVE-2017-13713ExploitEPSS 9.1%

    T&W WIFI Repeater BE126 allows remote authenticated users to execute arbitrary code via shell metacharacters in the user parameter to cgi-bin/webupg.

  32. 6.1CVE-2017-12794ExploitEPSS 24%

    In Django 1.10.x before 1.10.8 and 1.11.x before 1.11.5, HTML autoescaping was disabled in a portion of the template for the technical 500 debug page. Given the right circumstances, this allowed a cross-site scripting attack. This vulnerab…

  33. 8.8CVE-2017-11567ExploitEPSS 4.1%

    Cross-site request forgery (CSRF) vulnerability in Mongoose Web Server before 6.9 allows remote attackers to hijack the authentication of users for requests that modify Mongoose.conf via a request to __mg_admin?save. NOTE: this issue can …

  34. 9.8CVE-2015-7241ExploitEPSS 13%

    XML External Entity (XXE) vulnerability in SAP Netweaver before 7.01.

  35. 6.5CVE-2017-1130ExploitEPSS 29%

    IBM Notes 8.5 and 9.0 is vulnerable to a denial of service. If a user is persuaded to click on a malicious link, it would open up many file select dialog boxes which would cause the client hang and have to be restarted. IBM X-Force ID: 121…

  36. 6.5CVE-2017-1129ExploitEPSS 30%

    IBM Notes 8.5 and 9.0 is vulnerable to a denial of service. If a user is persuaded to click on a malicious link, it could cause the Notes client to hang and have to be restarted. IBM X-Force ID: 121370.

  37. 7.8CVE-2017-1000083ExploitEPSS 51%

    backend/comics/comics-document.c (aka the comic book backend) in GNOME Evince before 3.24.1 allows remote attackers to execute arbitrary commands via a .cbt file that is a TAR archive containing a filename beginning with a "--" command-lin…

  38. 9.8CVE-2017-14135ExploitEPSS 22%

    enigma2-plugins/blob/master/webadmin/src/WebChilds/Script.py in the webadmin plugin for opendreambox 2.0.0 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the command parameter to the /script URI.

  39. 6.1CVE-2017-14126ExploitEPSS 2.3%

    The Participants Database plugin before 1.7.5.10 for WordPress has XSS.

  40. 5.9CVE-2017-14117ExploitEPSS 8.0%

    The AT&T U-verse 9.2.2h0d83 firmware for the Arris NVG589 and NVG599 devices, when IP Passthrough mode is not used, configures an unauthenticated proxy service on WAN TCP port 49152, which allows remote attackers to establish arbitrary TCP…

  41. 5.9CVE-2017-3898ExploitEPSS 3.2%

    A man-in-the-middle attack vulnerability in the non-certificate-based authentication mechanism in McAfee LiveSafe (MLS) versions prior to 16.0.3 allows network attackers to modify the Windows registry value associated with the McAfee updat…

  42. 9.8CVE-2017-3897ExploitEPSS 12%

    A Code Injection vulnerability in the non-certificate-based authentication mechanism in McAfee Live Safe versions prior to 16.0.3 and McAfee Security Scan Plus (MSS+) versions prior to 3.11.599.3 allows network attackers to perform a malic…

  43. 8.8CVE-2015-5958ExploitEPSS 27%

    phpFileManager 0.9.8 allows remote attackers to execute arbitrary commands via a crafted URL.

  44. 5.3CVE-2014-8677ExploitEPSS 3.5%

    The installation process for SOPlanning 1.32 and earlier allows remote authenticated users with a prepared database, and access to an existing database with a crafted name, or permissions to create arbitrary databases, or if PHP before 5.2…

  45. 5.3CVE-2014-8676ExploitEPSS 40%

    Directory traversal vulnerability in the file_get_contents function in SOPlanning 1.32 and earlier allows remote attackers to determine the existence of arbitrary files via a .. (dot dot) in a URL path parameter.

  46. 7.5CVE-2014-8675ExploitEPSS 13%

    Soplanning 1.32 and earlier generates static links for sharing ICAL calendars with embedded login information, which allows remote attackers to obtain a calendar owner's password via a brute-force attack on the embedded password hash.

  47. 6.1CVE-2017-7855ExploitEPSS 2.0%

    In the webmail component in IceWarp Server 11.3.1.5, there was an XSS vulnerability discovered in the "language" parameter.

  48. 7.5CVE-2017-0901ExploitEPSS 29%

    RubyGems version 2.6.12 and earlier fails to validate specification names, allowing a maliciously crafted gem to potentially overwrite any file on the filesystem.

  49. 9.8CVE-2017-13708ExploitEPSS 12%

    Buffer overflow in the web server service in VX Search Enterprise 10.0.14 allows remote attackers to execute arbitrary code via a crafted GET request.

  50. 6.5CVE-2016-10504ExploitEPSS 8.2%

    Heap-based buffer overflow vulnerability in the opj_mqc_byteout function in mqc.c in OpenJPEG before 2.2.0 allows remote attackers to cause a denial of service (application crash) via a crafted bmp file.