cve.bz

Matching records, newest first, page 53

Filter
  1. 9.8CVE-2023-22515KEVExploitEPSS 99.2%

    Atlassian has been made aware of an issue reported by a handful of customers where external attackers may have exploited a previously unknown vulnerability in publicly accessible Confluence Data Center and Server instances to create unauth…

  2. 7.5CVE-2023-43261ExploitEPSS 64%

    An information disclosure in Milesight UR5X, UR32L, UR32, UR35, UR41 before v35.3.0.7 allows attackers to access sensitive router components.

  3. 6.1CVE-2023-5375ExploitEPSS 39%

    Open Redirect in GitHub repository mosparo/mosparo prior to 1.0.2.

  4. 7.8CVE-2023-4911KEVExploitEPSS 64%

    A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a local attacker to use maliciously crafted GLIBC_TUNABLES environment variables …

  5. 9.1CVE-2023-5350ExploitEPSS 2.2%

    SQL Injection in GitHub repository salesagility/suitecrm prior to 7.14.1.

  6. 6.1CVE-2023-44012ExploitEPSS 1.3%

    Cross Site Scripting vulnerability in mojoPortal v.2.7.0.0 allows a remote attacker to execute arbitrary code via the helpkey parameter in the Help.aspx component.

  7. 9.8CVE-2023-43654ExploitEPSS 42%

    TorchServe is a tool for serving and scaling PyTorch models in production. TorchServe default configuration lacks proper input validation, enabling third parties to invoke remote HTTP download requests and write files to the disk. This iss…

  8. 8.6CVE-2023-43662ExploitEPSS 9.1%

    ShokoServer is a media server which specializes in organizing anime. In affected versions the `/api/Image/WithPath` endpoint is accessible without authentication and is supposed to return default server images. The endpoint accepts the par…

  9. 6.5CVE-2023-43323ExploitEPSS 2.1%

    mooSocial 3.1.8 is vulnerable to external service interaction on post function. When executed, the server sends a HTTP and DNS request to external server. The Parameters effected are multiple - messageText, data[wall_photo], data[userShare…

  10. 6.1CVE-2023-5244ExploitEPSS 1.1%

    Cross-site Scripting (XSS) - Reflected in GitHub repository microweber/microweber prior to 2.0.

  11. 9.8CVE-2023-5222ExploitEPSS 80%

    A vulnerability classified as critical was found in Viessmann Vitogate 300 up to 2.1.3.0. This vulnerability affects the function isValidUser of the file /cgi-bin/vitogate.cgi of the component Web Management Interface. The manipulation lea…

  12. 9.8CVE-2023-43187ExploitEPSS 47%

    A remote code execution (RCE) vulnerability in the xmlrpc.php endpoint of NodeBB Inc NodeBB forum software prior to v1.18.6 allows attackers to execute arbitrary code via crafted XML-RPC requests.

  13. 8.8CVE-2023-40044KEVExploitEPSS 90%

    In WS_FTP Server versions prior to 8.7.4 and 8.8.2, a pre-authenticated attacker could leverage a .NET deserialization vulnerability in the Ad Hoc Transfer module to execute remote commands on the underlying WS_FTP Server operating system.

  14. 6.1CVE-2023-43325ExploitEPSS 2.0%

    A reflected cross-site scripting (XSS) vulnerability in the data[redirect_url] parameter of mooSocial v3.1.8 allows attackers to steal user's session cookies and impersonate their account via a crafted URL.

  15. 6.1CVE-2023-43326ExploitEPSS 1.7%

    A reflected cross-site scripting (XSS) vulnerability exisits in multiple url of mooSocial v3.1.8 allows attackers to steal user's session cookies and impersonate their account via a crafted URL.

  16. 9.8CVE-2023-4521ExploitEPSS 41%

    The Import XML and RSS Feeds WordPress plugin before 2.1.5 contains a web shell, allowing unauthenticated attackers to perform RCE. The plugin/vendor was not compromised and the files are the result of running a PoC for a previously report…

  17. 9.8CVE-2023-4490ExploitEPSS 3.6%

    The WP Job Portal WordPress plugin before 2.0.6 does not sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by unauthenticated users

  18. 6.1CVE-2023-4148ExploitEPSS 0.8%

    The Ditty WordPress plugin before 3.1.25 does not sanitise and escape some parameters and generated URLs before outputting them back in attributes, leading to Reflected Cross-Site Scripting which could be used against high privilege users …

  19. 9.8CVE-2023-31719ExploitEPSS 44%

    FUXA <= 1.1.12 is vulnerable to SQL Injection via /api/signin.

  20. 7.5CVE-2023-39677ExploitEPSS 32%

    MyPrestaModules Prestashop Module v6.2.9 and UpdateProducts Prestashop Module v3.6.9 were discovered to contain a PHPInfo information disclosure vulnerability via send.php.

  21. 6.1CVE-2023-38875ExploitEPSS 0.9%

    A reflected cross-site scripting (XSS) vulnerability in msaad1999's PHP-Login-System 2.0.1 allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the 'validator' paramete…

  22. 9.8CVE-2023-43374ExploitEPSS 3.7%

    Hoteldruid v3.0.5 was discovered to contain a SQL injection vulnerability via the id_utente_log parameter at /hoteldruid/personalizza.php.

  23. 9.8CVE-2023-43373ExploitEPSS 4.2%

    Hoteldruid v3.0.5 was discovered to contain a SQL injection vulnerability via the n_utente_agg parameter at /hoteldruid/interconnessioni.php.

  24. 9.8CVE-2023-5074ExploitEPSS 69%

    Use of a static key to protect a JWT token used in user authentication can allow an for an authentication bypass in D-Link D-View 8 v2.0.1.28

  25. 6.5CVE-2023-40931ExploitEPSS 12%

    A SQL injection vulnerability in Nagios XI from version 5.11.0 up to and including 5.11.1 allows authenticated attackers to execute arbitrary SQL commands via the ID parameter in the POST request to /nagiosxi/admin/banner_message-ajaxhelpe…

  26. 9.8CVE-2023-42793KEVExploitEPSS >99.9%

    In JetBrains TeamCity before 2023.05.4 authentication bypass leading to RCE on TeamCity Server was possible

  27. 5.3CVE-2023-41599ExploitEPSS 12%

    An issue in the component /common/DownController.java of JFinalCMS v5.0.0 allows attackers to execute a directory traversal.

  28. 9.8CVE-2023-33831ExploitEPSS 26%

    A remote command execution (RCE) vulnerability in the /api/runscript endpoint of FUXA 1.1.13 allows attackers to execute arbitrary commands via a crafted POST request.

  29. 6.1CVE-2023-38040ExploitEPSS 2.1%

    A reflected XSS vulnerability exists in Revive Adserver 5.4.1 and earlier versions..

  30. 5.3CVE-2023-42442ExploitEPSS 63%

    JumpServer is an open source bastion host and a professional operation and maintenance security audit system. Starting in version 3.0.0 and prior to versions 3.5.5 and 3.6.4, session replays can download without authentication. Session rep…

  31. 9.8CVE-2023-4974ExploitEPSS 5.3%

    A vulnerability was found in Academy LMS 6.2. It has been rated as critical. Affected by this issue is some unknown functionality of the file /academy/tutor/filter of the component GET Parameter Handler. The manipulation of the argument pr…

  32. 6.1CVE-2023-4973ExploitEPSS 1.9%

    A vulnerability was found in Academy LMS 6.2 on Windows. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /academy/tutor/filter of the component GET Parameter Handler. The manipula…

  33. 6.1CVE-2023-40779ExploitEPSS 1.4%

    An issue in IceWarp Mail Server Deep Castle 2 v.13.0.1.2 allows a remote attacker to execute arbitrary code via a crafted request to the URL.

  34. 7.5CVE-2023-38205KEVExploitEPSS 99.8%

    Adobe ColdFusion versions 2018u18 (and earlier), 2021u8 (and earlier) and 2023u2 (and earlier) are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnera…

  35. 6.5CVE-2023-4568ExploitEPSS 3.9%

    PaperCut NG allows for unauthenticated XMLRPC commands to be run by default. Versions 22.0.12 and below are confirmed to be affected, but later versions may also be affected due to lack of a vendor supplied patch.

  36. 9.8CVE-2023-41892ExploitEPSS 94%

    Craft CMS is a platform for creating digital experiences. This is a high-impact, low-complexity attack vector. Users running Craft installations before 4.4.15 are encouraged to update to at least that version to mitigate the issue. This is…

  37. 9.8CVE-2023-3710ExploitEPSS 49%

    Improper Input Validation vulnerability in Honeywell PM43 on 32 bit, ARM (Printer web page modules) allows Command Injection.This issue affects PM43 versions prior to P10.19.050004. Update to the latest available firmware version of the re…

  38. 8.8CVE-2023-38146ExploitEPSS 37%

    Windows Themes Remote Code Execution Vulnerability

  39. 7.5CVE-2023-4278ExploitEPSS 6.2%

    The MasterStudy LMS WordPress Plugin WordPress plugin before 3.0.18 does not have proper checks in place during registration allowing anyone to register on the site as an instructor. They can then add courses and/or posts.

  40. 6.1CVE-2023-3169ExploitEPSS 1.2%

    The tagDiv Composer WordPress plugin before 4.2, used as a companion by the Newspaper and Newsmag themes from tagDiv, does not have authorisation in a REST route and does not validate as well as escape some parameters when outputting them …

  41. 7.8CVE-2023-31468ExploitEPSS 1.0%

    An issue was discovered in Inosoft VisiWin 7 through 2022-2.1 (Runtime RT7.3 RC3 20221209.5). The "%PROGRAMFILES(X86)%\INOSOFT GmbH" folder has weak permissions for Everyone, allowing an attacker to insert a Trojan horse file that runs as …

  42. 9.8CVE-2023-31069ExploitEPSS 3.7%

    An issue was discovered in TSplus Remote Access through 16.0.2.14. Credentials are stored as cleartext within the HTML source code of the login page.

  43. 9.8CVE-2023-31068ExploitEPSS 5.4%

    An issue was discovered in TSplus Remote Access through 16.0.2.14. There are Full Control permissions for Everyone on some directories under %PROGRAMFILES(X86)%\TSplus\UserDesktop\themes.

  44. 9.8CVE-2023-31067ExploitEPSS 5.5%

    An issue was discovered in TSplus Remote Access through 16.0.2.14. There are Full Control permissions for Everyone on some directories under %PROGRAMFILES(X86)%\TSplus\Clients\www.

  45. 6.1CVE-2023-39676ExploitEPSS 1.4%

    FieldPopupNewsletter Prestashop Module v1.0.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the callback parameter at ajax.php.

  46. 7.5CVE-2023-40924ExploitEPSS 3.2%

    SolarView Compact < 6.00 is vulnerable to Directory Traversal.

  47. 9.8CVE-2023-37759ExploitEPSS 7.0%

    Incorrect access control in the User Registration page of Crypto Currency Tracker (CCT) before v9.5 allows unauthenticated attackers to register as an Admin account via a crafted POST request.

  48. 7.5CVE-2014-5329ExploitEPSS 3.4%

    GIGAPOD file servers (Appliance model and Software model) provide two web interfaces, 80/tcp and 443/tcp for user operation, and 8001/tcp for administrative operation. 8001/tcp is served by a version of Apache HTTP server containing a fla…

  49. 6.5CVE-2021-45811ExploitEPSS 2.5%

    A SQL injection vulnerability in the "Search" functionality of "tickets.php" page in osTicket 1.15.x allows authenticated attackers to execute arbitrary SQL commands via the "keywords" and "topic_id" URL parameters combination.

  50. 6.1CVE-2021-36646ExploitEPSS 0.8%

    A Cross Site Scrtpting (XSS) vulnerability in KodExplorer 4.45 allows remote attackers to run arbitrary code via /index.php page.