cve.bz

Matching records, newest first, page 64

Filter
  1. 5.4CVE-2023-1315ExploitEPSS 1.1%

    Cross-site Scripting (XSS) - Reflected in GitHub repository osticket/osticket prior to v1.16.6.

  2. 7.5CVE-2023-25573ExploitEPSS 52%

    metersphere is an open source continuous testing platform. In affected versions an improper access control vulnerability exists in `/api/jmeter/download/files`, which allows any user to download any file without authentication. This issue …

  3. 10.0CVE-2023-27482ExploitEPSS 72%

    homeassistant is an open source home automation tool. A remotely exploitable vulnerability bypassing authentication for accessing the Supervisor API through Home Assistant has been discovered. This impacts all Home Assistant installation t…

  4. 6.1CVE-2023-24657ExploitEPSS 3.9%

    phpipam v1.6 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the closeClass parameter at /subnet-masks/popup.php.

  5. 5.3CVE-2023-1263ExploitEPSS 1.4%

    The CMP – Coming Soon & Maintenance plugin for WordPress is vulnerable to Information Exposure in versions up to, and including, 4.1.6 via the cmp_get_post_detail function. This can allow unauthenticated individuals to obtain the contents…

  6. 7.5CVE-2022-41333ExploitEPSS 7.2%

    An uncontrolled resource consumption vulnerability [CWE-400] in FortiRecorder version 6.4.3 and below, 6.0.11 and below login authentication mechanism may allow an unauthenticated attacker to make the device unavailable via crafted GET req…

  7. 7.2CVE-2023-1211ExploitEPSS 3.0%

    SQL Injection in GitHub repository phpipam/phpipam prior to v1.5.2.

  8. 8.8CVE-2023-24217ExploitEPSS 4.5%

    AgileBio Electronic Lab Notebook v4.234 was discovered to contain a local file inclusion vulnerability.

  9. 6.1CVE-2023-24737ExploitEPSS 1.2%

    PMB v7.4.6 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the query parameter at /admin/convert/export_z3950.php.

  10. 6.1CVE-2023-24735ExploitEPSS 1.1%

    PMB v7.4.6 was discovered to contain an open redirect vulnerability via the component /opac_css/pmb.php. This vulnerability allows attackers to redirect victim users to an external domain via a crafted URL.

  11. 6.1CVE-2023-24733ExploitEPSS 1.2%

    PMB v7.4.6 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the query parameter at /admin/convert/export_z3950_new.php.

  12. 9.8CVE-2022-4328ExploitEPSS 4.4%

    The WooCommerce Checkout Field Manager WordPress plugin before 18.0 does not validate files to be uploaded, which could allow unauthenticated attackers to upload arbitrary files such as PHP on the server

  13. 6.1CVE-2023-22432ExploitEPSS 2.4%

    Open redirect vulnerability exists in web2py versions prior to 2.23.1. When using the tool, a web2py user may be redirected to an arbitrary website by accessing a specially crafted URL. As a result, the user may become a victim of a phishi…

  14. 6.1CVE-2023-27641ExploitEPSS 1.1%

    The REPORT (after z but before a) parameter in wa.exe in L-Soft LISTSERV 16.5 before 17 allows an attacker to conduct XSS attacks via a crafted URL.

  15. 9.1CVE-2023-27290ExploitEPSS 8.6%

    Docker based datastores for IBM Instana (IBM Observability with Instana 239-0 through 239-2, 241-0 through 241-2, and 243-0) do not currently require authentication. Due to this, an attacker within the network could access the datastores w…

  16. 6.1CVE-2023-0968ExploitEPSS 1.3%

    The Watu Quiz plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘dn’, 'email', 'points', and 'date' parameters in versions up to, and including, 3.3.9 due to insufficient input sanitization and output escaping. T…

  17. 6.1CVE-2023-0084ExploitEPSS 29%

    The Metform Elementor Contact Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via text areas on forms in versions up to, and including, 3.1.2 due to insufficient input sanitization and output escaping. This m…

  18. 7.5CVE-2022-47076ExploitEPSS 6.2%

    An issue was discovered in Smart Office Web 20.28 and earlier allows attackers to view sensitive information via DisplayParallelLogData.aspx.

  19. 7.5CVE-2022-47075ExploitEPSS 59%

    An issue was discovered in Smart Office Web 20.28 and earlier allows attackers to download sensitive information via the action name parameter to ExportEmployeeDetails.aspx, and to ExportReportingManager.aspx.

  20. 9.8CVE-2023-27372ExploitEPSS 99.6%

    SPIP before 4.2.1 allows Remote Code Execution via form values in the public area because serialization is mishandled. The fixed versions are 3.2.18, 4.0.10, 4.1.8, and 4.2.1.

  21. 5.4CVE-2023-27292ExploitEPSS 1.0%

    An open redirect vulnerability exposes OpenCATS to template injection due to improper validation of user-supplied GET parameters.

  22. 7.5CVE-2023-26256ExploitEPSS 12%

    An unauthenticated path traversal vulnerability affects the "STAGIL Navigation for Jira - Menu & Themes" plugin before 2.0.52 for Jira. By modifying the fileName parameter to the snjFooterNavigationConfig endpoint, it is possible to traver…

  23. 7.5CVE-2023-26255ExploitEPSS 47%

    An unauthenticated path traversal vulnerability affects the "STAGIL Navigation for Jira - Menu & Themes" plugin before 2.0.52 for Jira. By modifying the fileName parameter to the snjCustomDesignConfig endpoint, it is possible to traverse a…

  24. 6.1CVE-2023-1080ExploitEPSS 1.3%

    The GN Publisher plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘tab’ parameter in versions up to, and including, 1.5.5 due to insufficient input sanitization and output escaping. This makes it possible for un…

  25. 9.8CVE-2023-23156ExploitEPSS 3.7%

    Art Gallery Management System Project in PHP 1.0 was discovered to contain a SQL injection vulnerability via the pid parameter in the single-product page.

  26. 5.4CVE-2023-0552ExploitEPSS 24%

    The Registration Forms WordPress plugin before 3.8.2.3 does not properly validate the redirection URL when logging in and login out, leading to an Open Redirect vulnerability

  27. 6.1CVE-2023-0334ExploitEPSS 0.9%

    The ShortPixel Adaptive Images WordPress plugin before 3.6.3 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against any high privilege users s…

  28. 7.2CVE-2023-26609ExploitEPSS 39%

    ABUS TVIP 20000-21150 devices allows remote attackers to execute arbitrary code via shell metacharacters in the /cgi-bin/mft/wireless_mft ap field.

  29. 9.8CVE-2023-26602ExploitEPSS 17%

    ASUS ASMB8 iKVM firmware through 1.14.51 allows remote attackers to execute arbitrary code by using SNMP to create extensions, as demonstrated by snmpset for NET-SNMP-EXTEND-MIB with /bin/sh for command execution.

  30. 9.8CVE-2023-26035ExploitEPSS 80%

    ZoneMinder is a free, open source Closed-circuit television software application for Linux which supports IP, USB and Analog cameras. Versions prior to 1.36.33 and 1.37.33 are vulnerable to Unauthenticated Remote Code Execution via Missing…

  31. 9.8CVE-2023-0963ExploitEPSS 4.7%

    A vulnerability was found in SourceCodester Music Gallery Site 1.0. It has been rated as critical. This issue affects some unknown processing of the file Users.php of the component POST Request Handler. The manipulation leads to improper a…

  32. 8.8CVE-2023-0962ExploitEPSS 1.7%

    A vulnerability was found in SourceCodester Music Gallery Site 1.0. It has been declared as critical. This vulnerability affects unknown code of the file Master.php of the component GET Request Handler. The manipulation of the argument id …

  33. 9.8CVE-2023-0961ExploitEPSS 1.9%

    A vulnerability was found in SourceCodester Music Gallery Site 1.0. It has been classified as critical. This affects an unknown part of the file view_music_details.php of the component GET Request Handler. The manipulation of the argument …

  34. 7.5CVE-2023-23063ExploitEPSS 2.4%

    Cellinx NVT v1.0.6.002b was discovered to contain a local file disclosure vulnerability via the component /cgi-bin/GetFileContent.cgi.

  35. 9.8CVE-2023-0947ExploitEPSS 3.6%

    Path Traversal in GitHub repository flatpressblog/flatpress prior to 1.3.

  36. 9.8CVE-2023-25157ExploitEPSS 86%

    GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. GeoServer includes support for the OGC Filter expression language and the OGC Common Query Language (CQL) as part of the Web F…

  37. 8.8CVE-2023-0943ExploitEPSS 2.3%

    A vulnerability, which was classified as problematic, has been found in SourceCodester Best POS Management System 1.0. This issue affects the function save_settings of the file index.php?page=site_settings of the component Image Handler. T…

  38. 6.1CVE-2023-0942ExploitEPSS 1.2%

    The Japanized For WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘tab’ parameter in versions up to, and including, 2.5.4 due to insufficient input sanitization and output escaping. This makes it po…

  39. 9.8CVE-2023-0938ExploitEPSS 1.8%

    A vulnerability classified as critical has been found in SourceCodester Music Gallery Site 1.0. This affects an unknown part of the file music_list.php of the component GET Request Handler. The manipulation of the argument cid leads to sql…

  40. 6.1CVE-2022-4897ExploitEPSS 0.9%

    The BackupBuddy WordPress plugin before 8.8.3 does not sanitise and escape some parameters before outputting them back in various places, leading to Reflected Cross-Site Scripting

  41. 9.6CVE-2021-32853ExploitEPSS 3.1%

    Erxes, an experience operating system (XOS) with a set of plugins, is vulnerable to cross-site scripting in versions 0.22.3 and prior. This results in client-side code execution. The victim must follow a malicious link or be redirected the…

  42. 8.8CVE-2023-0916ExploitEPSS 3.1%

    A vulnerability classified as critical was found in SourceCodester Auto Dealer Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /adms/classes/Users.php. The manipulation leads to improper access…

  43. 8.8CVE-2023-0915ExploitEPSS 1.7%

    A vulnerability classified as critical has been found in SourceCodester Auto Dealer Management System 1.0. Affected is an unknown function of the file /adms/admin/?page=user/manage_user. The manipulation of the argument id leads to sql inj…

  44. 8.8CVE-2023-0913ExploitEPSS 1.6%

    A vulnerability classified as critical was found in SourceCodester Auto Dealer Management System 1.0. This vulnerability affects unknown code of the file /adms/admin/?page=vehicles/sell_vehicle. The manipulation of the argument id leads to…

  45. 8.8CVE-2023-0912ExploitEPSS 1.6%

    A vulnerability classified as critical has been found in SourceCodester Auto Dealer Management System 1.0. This affects an unknown part of the file /adms/admin/?page=vehicles/view_transaction. The manipulation of the argument id leads to s…

  46. 7.5CVE-2023-0905ExploitEPSS 3.2%

    A vulnerability classified as critical has been found in SourceCodester Employee Task Management System 1.0. Affected is an unknown function of the file changePasswordForEmployee.php. The manipulation leads to improper authentication. It i…

  47. 8.8CVE-2023-0904ExploitEPSS 1.7%

    A vulnerability was found in SourceCodester Employee Task Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file task-details.php. The manipulation of the argument task_id leads to sql …

  48. 5.4CVE-2023-0902ExploitEPSS 2.7%

    A vulnerability was found in SourceCodester Simple Food Ordering System 1.0. It has been classified as problematic. This affects an unknown part of the file process_order.php. The manipulation of the argument order leads to cross site scri…

  49. 5.3CVE-2023-22232ExploitEPSS 83%

    Adobe Connect versions 11.4.5 (and earlier), 12.1.5 (and earlier) are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to impact the integrit…

  50. 9.8CVE-2022-47986KEVExploitEPSS >99.9%

    IBM Aspera Faspex 4.4.2 Patch Level 1 and earlier could allow a remote attacker to execute arbitrary code on the system, caused by a YAML deserialization flaw. By sending a specially crafted obsolete API call, an attacker could exploit thi…