cve.bz

Matching records, newest first, page 179

Filter
  1. 6.1CVE-2017-7896ExploitEPSS 4.3%

    Trend Micro InterScan Messaging Security Virtual Appliance (IMSVA) 9.1 before CP 1644 has XSS.

  2. 9.8CVE-2017-5645ExploitEPSS 89%

    In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server to receive serialized log events from another application, a specially crafted binary payload can be sent that, when deserialized, can execute arbitrar…

  3. 6.1CVE-2015-8256ExploitEPSS 51%

    Multiple cross-site scripting (XSS) vulnerabilities in Axis network cameras.

  4. 8.8CVE-2017-7615ExploitEPSS 91%

    MantisBT through 2.3.0 allows arbitrary password reset and unauthenticated admin access via an empty confirm_hash value to verify.php.

  5. 7.8CVE-2017-7690ExploitEPSS 1.0%

    Proxifier for Mac before 2.19.2, when first run, allows local users to gain privileges by replacing the KLoader binary with a Trojan horse program.

  6. 7.2CVE-2017-6554ExploitEPSS 16%

    pmmasterd in Quest Privilege Manager before 6.0.0.061, when configured as a policy server, allows remote attackers to write to arbitrary files and consequently execute arbitrary code with root privileges via an ACT_NEWFILESENT action.

  7. 6.5CVE-2016-5312ExploitEPSS 54%

    Directory traversal vulnerability in the charting component in Symantec Messaging Gateway before 10.6.2 allows remote authenticated users to read arbitrary files via a .. (dot dot) in the sn parameter to brightmail/servlet/com.ve.kavachart…

  8. 5.5CVE-2016-5310ExploitEPSS 5.3%

    The RAR file parser component in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection: Network (ATP); Symantec Email Security.Cloud; Symantec Data Center Security: Server; Symantec Endpoint Protection (SEP) for Windows be…

  9. 5.5CVE-2016-5309ExploitEPSS 6.9%

    The RAR file parser component in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection: Network (ATP); Symantec Email Security.Cloud; Symantec Data Center Security: Server; Symantec Endpoint Protection (SEP) for Windows be…

  10. 7.3CVE-2016-1713ExploitEPSS 17%

    Unrestricted file upload vulnerability in the Settings_Vtiger_CompanyDetailsSave_Action class in modules/Settings/Vtiger/actions/CompanyDetailsSave.php in Vtiger CRM 6.4.0 allows remote authenticated users to execute arbitrary code by uplo…

  11. 7.8CVE-2016-0727ExploitEPSS 1.3%

    The crontab script in the ntp package before 1:4.2.6.p3+dfsg-1ubuntu3.11 on Ubuntu 12.04 LTS, before 1:4.2.6.p5+dfsg-3ubuntu2.14.04.10 on Ubuntu 14.04 LTS, on Ubuntu Wily, and before 1:4.2.8p4+dfsg-3ubuntu5.3 on Ubuntu 16.04 LTS allows loc…

  12. 8.8CVE-2015-6568ExploitEPSS 11%

    Wolf CMS before 0.8.3.1 allows unrestricted file rename and PHP Code Execution because admin/plugin/file_manager/browse/ (aka the filemanager) does not prevent a change of a file extension to ".php" after originally using the parameter "fi…

  13. 8.8CVE-2015-6567ExploitEPSS 11%

    Wolf CMS before 0.8.3.1 allows unrestricted file upload and PHP Code Execution because admin/plugin/file_manager/browse/ (aka the filemanager) does not validate the parameter "filename" properly. Exploitation requires a registered user who…

  14. 7.8CVE-2017-7643ExploitEPSS 1.0%

    Proxifier for Mac before 2.19 allows local users to gain privileges via the first parameter to the KLoader setuid program.

  15. 5.0CVE-2017-7457ExploitEPSS 1.8%

    XML External Entity via ".AOP" files used by Moxa MX-AOPC Server 1.5 result in remote file disclosure.

  16. 7.5CVE-2017-7456ExploitEPSS 29%

    Moxa MXView 2.8 allows remote attackers to cause a Denial of Service by sending overly long junk payload for the MXView client login credentials.

  17. 7.5CVE-2017-7455ExploitEPSS 16%

    Moxa MXView 2.8 allows remote attackers to read web server's private key file, no access control.

  18. 8.0CVE-2015-8356ExploitEPSS 2.7%

    Multiple SQL injection vulnerabilities in the mcart.xls module 6.5.2 and earlier for Bitrix allow remote authenticated users to execute arbitrary SQL commands via the (1) xls_profile parameter to admin/mcart_xls_import.php or the (2) xls_i…

  19. 6.1CVE-2017-7725ExploitEPSS 2.8%

    concrete5 8.1.0 places incorrect trust in the HTTP Host header during caching, if the administrator did not define a "canonical" URL on installation of concrete5 using the "Advanced Options" settings. Remote attackers can make a GET reques…

  20. 8.8CVE-2016-7834ExploitEPSS 3.9%

    SONY SNC-CH115, SNC-CH120, SNC-CH160, SNC-CH220, SNC-CH260, SNC-DH120, SNC-DH120T, SNC-DH160, SNC-DH220, SNC-DH220T, SNC-DH260, SNC-EB520, SNC-EM520, SNC-EM521, SNC-ZB550, SNC-ZM550, SNC-ZM551, SNC-EP550, SNC-EP580, SNC-ER550, SNC-ER550C, …

  21. 9.8CVE-2016-2555ExploitEPSS 80%

    SQL injection vulnerability in include/lib/mysql_connect.inc.php in ATutor 2.2.1 allows remote attackers to execute arbitrary SQL commands via the searchFriends function to friends.inc.php.

  22. 6.1CVE-2016-1915ExploitEPSS 4.0%

    Multiple cross-site scripting (XSS) vulnerabilities in BlackBerry Enterprise Server 12 (BES12) Self-Service before 12.4 allow remote attackers to inject arbitrary web script or HTML via the locale parameter to (1) mydevice/index.jsp or (2)…

  23. 8.8CVE-2016-1914ExploitEPSS 4.1%

    Multiple SQL injection vulnerabilities in the com.rim.mdm.ui.server.ImageServlet servlet in BlackBerry Enterprise Server 12 (BES12) Self-Service before 12.4 allow remote attackers to execute arbitrary SQL commands via the imageName paramet…

  24. 8.8CVE-2015-8284ExploitEPSS 4.2%

    SeaWell Networks Spectrum SDC 02.05.00 allows remote viewer users to perform administrative functions.

  25. 6.5CVE-2015-8283ExploitEPSS 6.8%

    Directory traversal vulnerability in configure_manage.php in SeaWell Networks Spectrum SDC 02.05.00.

  26. 9.8CVE-2015-8282ExploitEPSS 6.6%

    SeaWell Networks Spectrum SDC 02.05.00 has a default password of "admin" for the "admin" account.

  27. 9.8CVE-2016-4337ExploitEPSS 2.3%

    SQL injection vulnerability in the mgr.login.php file in Ktools.net Photostore before 4.7.5 allows remote attackers to execute arbitrary SQL commands via the email parameter in a recover_login action.

  28. 9.8CVE-2015-7564ExploitEPSS 3.4%

    Multiple SQL injection vulnerabilities in TeamPass 2.1.24 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) id parameter in an action_on_quick_icon action to item.query.php or the (2) order or (3) direction p…

  29. 8.8CVE-2015-7563ExploitEPSS 3.1%

    Cross-site request forgery (CSRF) vulnerability in TeamPass 2.1.24 and earlier allows remote attackers to hijack the authentication of an authenticated user.

  30. 6.1CVE-2015-7562ExploitEPSS 1.8%

    Multiple cross-site scripting (XSS) vulnerabilities in TeamPass 2.1.24 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) label value of an item or (2) name of a role.

  31. 10.0CVE-2017-7722ExploitEPSS 13%

    In SolarWinds Log & Event Manager (LEM) before 6.3.1 Hotfix 4, a menu system is encountered when the SSH service is accessed with "cmc" and "password" (the default username and password). By exploiting a vulnerability in the restrictssh fe…

  32. 7.8CVE-2017-3064ExploitEPSS 13%

    Adobe Flash Player versions 25.0.0.127 and earlier have an exploitable memory corruption vulnerability when parsing a shape outline. Successful exploitation could lead to arbitrary code execution.

  33. 9.8CVE-2017-3061ExploitEPSS 25%

    Adobe Flash Player versions 25.0.0.127 and earlier have an exploitable memory corruption vulnerability in the SWF parser. Successful exploitation could lead to arbitrary code execution.

  34. 8.8CVE-2017-3006ExploitEPSS 11%

    Adobe Thor versions 3.9.5.353 and earlier have a vulnerability related to the use of improper resource permissions during the installation of Creative Cloud desktop applications.

  35. 5.5CVE-2017-0211ExploitEPSS 14%

    An elevation of privilege vulnerability exists in Windows 10, Windows 8.1, Windows RT 8.1, Windows Server 2012, Windows Server 2012 R2, and Windows Server 2016 versions of Microsoft Windows OLE when it fails an integrity-level check, aka "…

  36. 7.5CVE-2017-0202ExploitEPSS 46%

    A remote code execution vulnerability exists when Internet Explorer improperly accesses objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current use…

  37. 7.8CVE-2017-0199KEVExploitEPSS 99.4%

    Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1, Microsoft Office 2016, Microsoft Windows Vista SP2, Windows Server 2008 SP2, Windows 7 SP1, Windows 8.1 allow remote attackers to execute arbitrary code via a…

  38. 5.5CVE-2017-0167ExploitEPSS 5.5%

    An information disclosure vulnerability exists in Windows 8.1, Windows RT 8.1, Windows Server 2012 R2, Windows 10, and Windows Server 2016 when the Windows kernel improperly handles objects in memory. An attacker who successfully exploited…

  39. 7.8CVE-2017-0165ExploitEPSS 3.3%

    An elevation of privilege vulnerability exists when Microsoft Windows running on Windows 10, Windows 10 1511, Windows 8.1, Windows RT 8.1, and Windows Server 2012 R2 fails to properly sanitize handles in memory, aka "Windows Elevation of P…

  40. 7.8CVE-2017-0160ExploitEPSS 18%

    Microsoft .NET Framework 2.0, 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2 and 4.7 allows an attacker with access to the local system to execute malicious code, aka ".NET Remote Code Execution Vulnerability."

  41. 4.7CVE-2017-0058ExploitEPSS 3.7%

    A Win32k information disclosure vulnerability exists in Microsoft Windows when the win32k component improperly provides kernel information. An attacker who successfully exploited the vulnerability could obtain information to further compro…

  42. 9.8CVE-2017-7588ExploitEPSS 34%

    On certain Brother devices, authorization is mishandled by including a valid AuthCookie cookie in the HTTP response to a failed login attempt. Affected models are: MFC-J6973CDW MFC-J4420DW MFC-8710DW MFC-J4620DW MFC-L8850CDW MFC-J3720 MFC-…

  43. 9.8CVE-2016-7552ExploitEPSS 93%

    On the Trend Micro Threat Discovery Appliance 2.6.1062r1, directory traversal when processing a session_id cookie allows a remote, unauthenticated attacker to delete arbitrary files as root. This can be used to bypass authentication or cau…

  44. 9.8CVE-2016-7547ExploitEPSS 92%

    A command execution flaw on the Trend Micro Threat Discovery Appliance 2.6.1062r1 exists with the timezone parameter in the admin_sys_time.cgi interface.

  45. 8.8CVE-2015-7893ExploitEPSS 7.4%

    SecEmailUI in Samsung Galaxy S6 does not sanitize HTML email content, allows remote attackers to execute arbitrary JavaScript.

  46. 7.2CVE-2017-6088ExploitEPSS 5.8%

    Multiple SQL injection vulnerabilities in EyesOfNetwork (aka EON) 5.0 and earlier allow remote authenticated users to execute arbitrary SQL commands via the (1) bp_name, (2) display, (3) search, or (4) equipment parameter to module/monitor…

  47. 9.8CVE-2017-7462ExploitEPSS 13%

    Intellinet NFC-30ir IP Camera has a vendor backdoor that can allow a remote attacker access to a vendor-supplied CGI script in the web directory.

  48. 4.9CVE-2017-7461ExploitEPSS 11%

    Directory traversal vulnerability in the web-based management site on the Intellinet NFC-30ir IP Camera with firmware LM.1.6.16.05 allows remote attackers to read arbitrary files via a request to a vendor-supplied CGI script that is used t…

  49. 7.5CVE-2017-7185ExploitEPSS 12%

    Use-after-free vulnerability in the mg_http_multipart_wait_for_boundary function in mongoose.c in Cesanta Mongoose Embedded Web Server Library 6.7 and earlier and Mongoose OS 1.2 and earlier allows remote attackers to cause a denial of ser…

  50. 9.8CVE-2017-5983ExploitEPSS 16%

    The JIRA Workflow Designer Plugin in Atlassian JIRA Server before 6.3.0 improperly uses an XML parser and deserializer, which allows remote attackers to execute arbitrary code, read arbitrary files, or cause a denial of service via a craft…