cve.bz

Matching records, newest first, page 67

Filter
  1. 4.8CVE-2022-4260ExploitEPSS 0.9%

    The WP-Ban WordPress plugin before 1.69.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is di…

  2. 7.5CVE-2022-4140ExploitEPSS 3.2%

    The Welcart e-Commerce WordPress plugin before 2.8.5 does not validate user input before using it to output the content of a file, which could allow unauthenticated attacker to read arbitrary files on the server

  3. 9.8CVE-2022-4059ExploitEPSS 5.1%

    The Cryptocurrency Widgets Pack WordPress plugin before 2.0 does not sanitise and escape some parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection.

  4. 5.3CVE-2022-4057ExploitEPSS 1.5%

    The Autoptimize WordPress plugin before 3.1.0 uses an easily guessable path to store plugin's exported settings and logs.

  5. 9.8CVE-2022-4049ExploitEPSS 5.1%

    The WP User WordPress plugin through 7.0 does not properly sanitize and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by unauthenticated users.

  6. 6.1CVE-2022-48197ExploitEPSS 7.1%

    Reflected cross-site scripting (XSS) exists in Sandbox examples in the YUI2 repository. The download distributions, TreeView component and the YUI Javascript library overall are not affected. NOTE: This vulnerability only affects products …

  7. 8.8CVE-2022-48194ExploitEPSS 33%

    TP-Link TL-WR902AC devices through V3 0.9.1 allow remote authenticated attackers to execute arbitrary code or cause a Denial of Service (DoS) by uploading a crafted firmware update because the signature check is inadequate.

  8. 6.1CVE-2022-30519ExploitEPSS 2.7%

    XSS in signing form in Reprise Software RLM License Administration v14.2BL4 allows remote attacker to inject arbitrary code via password field.

  9. 6.1CVE-2022-23544ExploitEPSS 1.7%

    MeterSphere is a one-stop open source continuous testing platform, covering test management, interface testing, UI testing and performance testing. Versions prior to 2.5.0 are subject to a Server-Side Request Forgery that leads to Cross-Si…

  10. 6.1CVE-2022-36664ExploitEPSS 4.0%

    Password Manager for IIS 2.0 has a cross-site scripting (XSS) vulnerability via the /isapi/PasswordManager.dll ResultURL parameter.

  11. 9.8CVE-2022-4117ExploitEPSS 5.3%

    The IWS WordPress plugin through 1.0 does not properly escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to an unauthenticated SQL injection.

  12. 6.1CVE-2021-30134ExploitEPSS 1.3%

    php-mod/curl (a wrapper of the PHP cURL extension) before 2.3.2 allows XSS via the post_file_path_upload.php key parameter and the POST data to post_multidimensional.php.

  13. 9.8CVE-2021-45467ExploitEPSS 71%

    In CWP (aka Control Web Panel or CentOS Web Panel) before 0.9.8.1107, an unauthenticated attacker can use %00 bytes to cause /user/loader.php to register an arbitrary API key, as demonstrated by a /user/loader.php?api=1&scripts= .%00./.%00…

  14. 7.8CVE-2022-37706ExploitEPSS 6.0%

    enlightenment_sys in Enlightenment before 0.25.4 allows local users to gain privileges because it is setuid root, and the system library function mishandles pathnames that begin with a /dev/.. substring.

  15. 7.5CVE-2022-42953ExploitEPSS 5.2%

    Certain ZKTeco products (ZEM500-510-560-760, ZEM600-800, ZEM720, ZMM) allow access to sensitive information via direct requests for the form/DataApp?style=1 and form/DataApp?style=0 URLs. The affected versions may be before 8.88 (ZEM500-51…

  16. 9.8CVE-2022-47945ExploitEPSS 30%

    ThinkPHP Framework before 6.0.14 allows local file inclusion via the lang parameter when the language pack feature is enabled (lang_switch_on=true). An unauthenticated and remote attacker can exploit this to execute arbitrary operating sys…

  17. 7.5CVE-2022-23854ExploitEPSS 50%

    AVEVA InTouch Access Anywhere versions 2020 R2 and older are vulnerable to a path traversal exploit that could allow an unauthenticated user with network access to read files on the system outside of the secure gateway web server.

  18. 5.3CVE-2022-23513ExploitEPSS 42%

    Pi-Hole is a network-wide ad blocking via your own Linux hardware, AdminLTE is a Pi-hole Dashboard for stats and more. In case of an attack, the threat actor will obtain the ability to perform an unauthorized query for blocked domains on …

  19. 7.5CVE-2022-3805ExploitEPSS 1.7%

    The Jeg Elementor Kit plugin for WordPress is vulnerable to authorization bypass in various functions used to update the plugin settings in versions up to, and including, 2.5.6. Unauthenticated users can use an easily available nonce, obta…

  20. 5.3CVE-2022-41697ExploitEPSS 20%

    A user enumeration vulnerability exists in the login functionality of Ghost Foundation Ghost 5.9.4. A specially-crafted HTTP request can lead to a disclosure of sensitive information. An attacker can send a series of HTTP requests to trigg…

  21. 9.8CVE-2022-46020ExploitEPSS 39%

    WBCE CMS v1.5.4 can implement getshell by modifying the upload file type.

  22. 9.8CVE-2022-40624ExploitEPSS 18%

    pfSense pfBlockerNG through 2.1.4_27 allows remote attackers to execute arbitrary OS commands as root via the HTTP Host header, a different vulnerability than CVE-2022-31814.

  23. 9.8CVE-2022-4063ExploitEPSS 10%

    The InPost Gallery WordPress plugin before 2.1.4.1 insecurely uses PHP's extract() function when rendering HTML views, allowing attackers to force the inclusion of malicious files & URLs, which may enable them to run code on servers.

  24. 9.8CVE-2022-4050ExploitEPSS 5.1%

    The JoomSport WordPress plugin before 5.2.8 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by unauthenticated users

  25. 7.0CVE-2022-46689ExploitEPSS 48%

    A race condition was addressed with additional validation. This issue is fixed in tvOS 16.2, macOS Monterey 12.6.2, macOS Ventura 13.1, macOS Big Sur 11.7.2, iOS 15.7.2 and iPadOS 15.7.2, iOS 16.2 and iPadOS 16.2, watchOS 9.2. An app may b…

  26. 9.8CVE-2022-44588ExploitEPSS 2.4%

    Unauth. SQL Injection vulnerability in Cryptocurrency Widgets Pack Plugin <=1.8.1 on WordPress.

  27. 8.8CVE-2022-46443ExploitEPSS 38%

    mesinkasir Bangresto 1.0 is vulnberable to SQL Injection via the itemqty%5B%5D parameter.

  28. 9.8CVE-2022-46071ExploitEPSS 4.7%

    There is SQL Injection vulnerability at Helmet Store Showroom v1.0 Login Page. This vulnerability can be exploited to bypass admin access.

  29. 6.1CVE-2022-46073ExploitEPSS 1.3%

    Helmet Store Showroom 1.0 is vulnerable to Cross Site Scripting (XSS).

  30. 5.9CVE-2022-3590ExploitEPSS 3.4%

    WordPress is affected by an unauthenticated blind SSRF in the pingback feature. Because of a TOCTOU race condition between the validation checks and the HTTP request, attackers can reach internal hosts that are explicitly forbidden.

  31. 6.1CVE-2022-46381ExploitEPSS 1.8%

    Certain Linear eMerge E3-Series devices are vulnerable to XSS via the type parameter (e.g., to the badging/badge_template_v0.php component). This affects 0.32-08f, 0.32-07p, 0.32-07e, 0.32-09c, 0.32-09b, 0.32-09a, and 0.32-08e.

  32. 8.8CVE-2022-4223ExploitEPSS 80%

    The pgAdmin server includes an HTTP API that is intended to be used to validate the path a user selects to external PostgreSQL utilities such as pg_dump and pg_restore. The utility is executed by the server to determine what PostgreSQL ver…

  33. 7.5CVE-2022-45269ExploitEPSS 3.4%

    A directory traversal vulnerability in the component SCS.Web.Server.SPI/1.0 of Linx Sphere LINX 7.35.ST15 allows attackers to read arbitrary files.

  34. 9.8CVE-2022-3982ExploitEPSS 4.8%

    The Booking calendar, Appointment Booking System WordPress plugin before 3.2.2 does not validate uploaded files, which could allow unauthenticated users to upload arbitrary files, such as PHP and achieve RCE

  35. 5.4CVE-2022-3934ExploitEPSS 0.9%

    The FlatPM WordPress plugin before 3.0.13 does not sanitise and escape some parameters before outputting them back in pages, leading to Reflected Cross-Site Scripting which could be used against high privilege users such as admin

  36. 5.4CVE-2022-3933ExploitEPSS 0.9%

    The Essential Real Estate WordPress plugin before 3.9.6 does not sanitize and escapes some parameters, which could allow users with a role as low as Admin to perform Cross-Site Scripting attacks.

  37. 6.1CVE-2022-3908ExploitEPSS 0.9%

    The Helloprint WordPress plugin before 1.4.7 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting

  38. 9.8CVE-2022-37932ExploitEPSS 2.9%

    A potential security vulnerability has been identified in Hewlett Packard Enterprise OfficeConnect 1820, 1850, and 1920S Network switches. The vulnerability could be remotely exploited to allow authentication bypass. HPE has made the follo…

  39. 6.1CVE-2022-4407ExploitEPSS 4.9%

    Cross-site Scripting (XSS) - Reflected in GitHub repository thorsten/phpmyfaq prior to 3.1.9.

  40. 5.4CVE-2022-25630ExploitEPSS 1.6%

    An authenticated user can embed malicious content with XSS into the admin group policy page.

  41. 9.8CVE-2022-4375ExploitEPSS 3.1%

    A vulnerability was found in Mingsoft MCMS up to 5.2.9. It has been classified as critical. Affected is an unknown function of the file /cms/category/list. The manipulation of the argument sqlWhere leads to sql injection. It is possible to…

  42. 7.5CVE-2022-46770ExploitEPSS 23%

    qubes-mirage-firewall (aka Mirage firewall for QubesOS) 0.8.x through 0.8.3 allows guest OS users to cause a denial of service (CPU consumption and loss of forwarding) via a crafted multicast UDP packet (IP address range of 224.0.0.0 throu…

  43. 8.7CVE-2022-41800ExploitEPSS 77%

    In all versions of BIG-IP, when running in Appliance mode, an authenticated user assigned the Administrator role may be able to bypass Appliance mode restrictions, utilizing an undisclosed iControl REST endpoint. A successful exploit can a…

  44. 8.8CVE-2022-41622ExploitEPSS 92%

    In all versions,  BIG-IP and BIG-IQ are vulnerable to cross-site request forgery (CSRF) attacks through iControl SOAP.   Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

  45. 6.1CVE-2022-45917ExploitEPSS 2.2%

    ILIAS before 7.16 has an Open Redirect.

  46. 9.8CVE-2020-6627ExploitEPSS 13%

    The web-management application on Seagate Central NAS STCG2000300, STCG3000300, and STCG4000300 devices allows OS command injection via mv_backend_launch in cirrus/application/helpers/mv_backend_helper.php by leveraging the "start" state a…

  47. 9.8CVE-2022-46169KEVExploitEPSS 99.8%

    Cacti is an open source platform which provides a robust and extensible operational monitoring and fault management framework for users. In affected versions a command injection vulnerability allows an unauthenticated user to execute arbit…

  48. 7.1CVE-2022-35507ExploitEPSS 1.5%

    A response-header CRLF injection vulnerability in the Proxmox Virtual Environment (PVE) and Proxmox Mail Gateway (PMG) web interface allows a remote attacker to set cookies for a victim's browser that are longer than the server expects, ca…

  49. 5.4CVE-2022-44957ExploitEPSS 1.1%

    webtareas 2.4p5 was discovered to contain a cross-site scripting (XSS) vulnerability in the component /clients/listclients.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected int…

  50. 5.4CVE-2022-44952ExploitEPSS 1.0%

    Rukovoditel v3.2.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability in /index.php?module=configuration/application. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted paylo…