cve.bz

Matching records, newest first, page 72

Filter
  1. 7.5CVE-2022-2414ExploitEPSS 85%

    Access to external entities when parsing XML documents can lead to XML external entity (XXE) attacks. This flaw allows a remote attacker to potentially retrieve the content of arbitrary files by sending specially crafted HTTP requests.

  2. 5.4CVE-2022-34140ExploitEPSS 4.8%

    A stored cross-site scripting (XSS) vulnerability in /index.php?r=site%2Fsignup of Feehi CMS v2.1.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the username field.

  3. 7.5CVE-2022-34121ExploitEPSS 3.9%

    Cuppa CMS v1.0 was discovered to contain a local file inclusion (LFI) vulnerability via the component /templates/default/html/windows/right.php.

  4. 7.5CVE-2022-36883ExploitEPSS 7.0%

    A missing permission check in Jenkins Git Plugin 4.11.3 and earlier allows unauthenticated attackers to trigger builds of jobs configured to use an attacker-specified Git repository and to cause them to check out an attacker-specified comm…

  5. 7.5CVE-2022-34576ExploitEPSS 3.9%

    A vulnerability in /cgi-bin/ExportAllSettings.sh of WAVLINK WN535 G3 M35G3R.V5030.180927 allows attackers to execute arbitrary code via a crafted POST request.

  6. 6.1CVE-2022-35653ExploitEPSS 4.8%

    A reflected XSS issue was identified in the LTI module of Moodle. The vulnerability exists due to insufficient sanitization of user-supplied data in the LTI module. A remote attacker can trick the victim to follow a specially crafted link …

  7. 9.8CVE-2022-33965ExploitEPSS 4.4%

    Multiple Unauthenticated SQL Injection (SQLi) vulnerabilities in Osamaesh WP Visitor Statistics plugin <= 5.7 at WordPress.

  8. 7.2CVE-2022-2219ExploitEPSS 1.7%

    The Unyson WordPress plugin before 2.7.27 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting

  9. 6.1CVE-2022-0899ExploitEPSS 1.3%

    The Header Footer Code Manager WordPress plugin before 1.1.24 does not escape generated URLs before outputting them back in attributes in an admin page, leading to a Reflected Cross-Site Scripting.

  10. 5.3CVE-2022-0594ExploitEPSS 2.2%

    The Professional Social Sharing Buttons, Icons & Related Posts WordPress plugin before 9.7.6 does not have proper authorisation check in one of the AJAX action, available to unauthenticated (in v < 9.7.5) and author+ (in v9.7.5) users, all…

  11. 9.8CVE-2022-36446ExploitEPSS 96%

    software/apt-lib.pl in Webmin before 1.997 lacks HTML escaping for a UI command.

  12. 7.5CVE-2022-33901ExploitEPSS 2.8%

    Unauthenticated Arbitrary File Read vulnerability in MultiSafepay plugin for WooCommerce plugin <= 4.13.1 at WordPress.

  13. 4.3CVE-2022-29495ExploitEPSS 0.5%

    Cross-Site Request Forgery (CSRF) vulnerability in Sygnoos Popup Builder plugin <= 4.1.11 at WordPress allows an attacker to update plugin settings.

  14. 9.8CVE-2022-2143ExploitEPSS 63%

    The affected product is vulnerable to two instances of command injection, which may allow an attacker to remotely execute arbitrary code.

  15. 5.3CVE-2022-34487ExploitEPSS 3.3%

    Unauthenticated Arbitrary Option Update vulnerability in biplob018's Shortcode Addons plugin <= 3.0.2 at WordPress.

  16. 5.3CVE-2022-33198ExploitEPSS 3.3%

    Unauthenticated WordPress Options Change vulnerability in Biplob Adhikari's Accordions plugin <= 2.0.2 at WordPress.

  17. 7.8CVE-2022-35899ExploitEPSS 0.9%

    There is an unquoted service path in ASUSTeK Aura Ready Game SDK service (GameSDK.exe) 1.0.0.4. This might allow a local user to escalate privileges by creating a %PROGRAMFILES(X86)%\ASUS\GameSDK.exe file.

  18. 5.3CVE-2022-28666ExploitEPSS 1.5%

    Broken Access Control vulnerability in YIKES Inc. Custom Product Tabs for WooCommerce plugin <= 1.7.7 at WordPress leading to &yikes-the-content-toggle option update.

  19. 7.5CVE-2022-32430ExploitEPSS 5.0%

    An access control issue in Lin CMS Spring Boot v0.2.1 allows attackers to access the backend information and functions within the application.

  20. 7.2CVE-2022-34590ExploitEPSS 5.3%

    Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the editid parameter in /HMS/admin.php.

  21. 9.8CVE-2022-26138KEVExploitEPSS 98%

    The Atlassian Questions For Confluence app for Confluence Server and Data Center creates a Confluence user account in the confluence-users group with the username disabledsystemuser and a hardcoded password. A remote, unauthenticated attac…

  22. 5.3CVE-2022-34049ExploitEPSS 2.7%

    An access control issue in Wavlink WN530HG4 M30HG4.V5030.191116 allows unauthenticated attackers to download log files and configuration data.

  23. 6.1CVE-2022-34048ExploitEPSS 6.7%

    Wavlink WN533A8 M33A8.V5030.190716 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the login_page parameter.

  24. 7.5CVE-2022-34047ExploitEPSS 22%

    An access control issue in Wavlink WN530HG4 M30HG4.V5030.191116 allows attackers to obtain usernames and passwords via view-source:http://IP_ADDRESS/set_safety.shtml?r=52300 and searching for [var syspasswd].

  25. 7.5CVE-2022-34046ExploitEPSS 21%

    An access control issue in Wavlink WN533A8 M33A8.V5030.190716 allows attackers to obtain usernames and passwords via view-source:http://IP_ADDRESS/sysinit.shtml?r=52300 and searching for [logincheck(user);].

  26. 9.8CVE-2022-34045ExploitEPSS 3.4%

    Wavlink WN530HG4 M30HG4.V5030.191116 was discovered to contain a hardcoded encryption/decryption key for its configuration files at /etc_ro/lighttpd/www/cgi-bin/ExportAllSettings.sh.

  27. 9.8CVE-2022-2488ExploitEPSS 33%

    A vulnerability was found in WAVLINK WN535K2 and WN535K3 and classified as critical. This issue affects some unknown processing of the file /cgi-bin/touchlist_sync.cgi. The manipulation of the argument IP leads to os command injection. The…

  28. 9.8CVE-2022-2487ExploitEPSS 79%

    A vulnerability has been found in WAVLINK WN535K2 and WN535K3 and classified as critical. This vulnerability affects unknown code of the file /cgi-bin/nightled.cgi. The manipulation of the argument start_hour leads to os command injection.…

  29. 9.8CVE-2022-2486ExploitEPSS 30%

    A vulnerability, which was classified as critical, was found in WAVLINK WN535K2 and WN535K3. This affects an unknown part of the file /cgi-bin/mesh.cgi?page=upgrade. The manipulation of the argument key leads to os command injection. The e…

  30. 7.5CVE-2022-34534ExploitEPSS 2.6%

    Digital Watchdog DW Spectrum Server 4.2.0.32842 allows attackers to access sensitive infromation via a crafted API call.

  31. 9.8CVE-2022-35405KEVExploitEPSS 99.8%

    Zoho ManageEngine Password Manager Pro before 12101 and PAM360 before 5510 are vulnerable to unauthenticated remote code execution. (This also affects ManageEngine Access Manager Plus before 4303 with authentication.)

  32. 9.8CVE-2022-24082ExploitEPSS 12%

    If an on-premise installation of the Pega Platform is configured with the port for the JMX interface exposed to the Internet and port filtering is not properly configured, then it may be possible to upload serialized payloads to attack the…

  33. 9.8CVE-2022-2467ExploitEPSS 4.9%

    A vulnerability has been found in SourceCodester Garage Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /login.php. The manipulation of the argument username with the input 1@a.com' AND…

  34. 7.8CVE-2022-30526ExploitEPSS 1.1%

    A privilege escalation vulnerability was identified in the CLI command of Zyxel USG FLEX 100(W) firmware versions 4.50 through 5.30, USG FLEX 200 firmware versions 4.50 through 5.30, USG FLEX 500 firmware versions 4.50 through 5.30, USG FL…

  35. 7.2CVE-2022-1565ExploitEPSS 15%

    The plugin WP All Import is vulnerable to arbitrary file uploads due to missing file type validation via the wp_all_import_get_gz.php file in versions up to, and including, 3.6.7. This makes it possible for authenticated attackers, with ad…

  36. 8.8CVE-2022-33891KEVExploitEPSS 93%

    The Apache Spark UI offers the possibility to enable ACLs via the configuration option spark.acls.enable. With an authentication filter, this checks whether a user has access permissions to view or modify the application. If ACLs are enabl…

  37. 9.8CVE-2021-41419ExploitEPSS 9.2%

    QVIS NVR DVR before 2021-12-13 is vulnerable to Remote Code Execution via Java deserialization.

  38. 7.5CVE-2021-40150ExploitEPSS 4.0%

    The web server of the E1 Zoom camera through 3.0.0.716 discloses its configuration via the /conf/ directory that is mapped to a publicly accessible path. In this way an attacker can download the entire NGINX/FastCGI configurations by query…

  39. 9.8CVE-2022-26352KEVExploitEPSS 91%

    An issue was discovered in the ContentResource API in dotCMS 3.0 through 22.02. Attackers can craft a multipart form request to post a file whose filename is not initially sanitized. This allows directory traversal, in which the file is sa…

  40. 5.9CVE-2021-40149ExploitEPSS 8.3%

    The web server of the E1 Zoom camera through 3.0.0.716 discloses its SSL private key via the root web server directory. In this way an attacker can download the entire key via the /self.key URI.

  41. 6.5CVE-2022-31260ExploitEPSS 2.1%

    In Montala ResourceSpace through 9.8 before r19636, csv_export_results_metadata.php allows attackers to export collection metadata via a non-NULL k value.

  42. 6.1CVE-2022-2187ExploitEPSS 1.5%

    The Contact Form 7 Captcha WordPress plugin before 0.1.2 does not escape the $_SERVER['REQUEST_URI'] parameter before outputting it back in an attribute, which could lead to Reflected Cross-Site Scripting in old web browsers

  43. 6.1CVE-2022-2168ExploitEPSS 1.4%

    The Download Manager WordPress plugin before 3.2.44 does not escape a generated URL before outputting it back in an attribute of the history dashboard, leading to Reflected Cross-Site Scripting

  44. 6.1CVE-2022-1933ExploitEPSS 1.7%

    The CDI WordPress plugin before 5.1.9 does not sanitise and escape a parameter before outputting it back in the response of an AJAX action (available to both unauthenticated and authenticated users), leading to a Reflected Cross-Site Scrip…

  45. 9.8CVE-2021-36711ExploitEPSS 17%

    WebInterface in OctoBot before 0.4.4 allows remote code execution because Tentacles upload is mishandled.

  46. 9.8CVE-2022-31161ExploitEPSS 29%

    Roxy-WI is a Web interface for managing HAProxy, Nginx and Keepalived servers. Prior to version 6.1.1.0, the system command can be run remotely via the subprocess_execute function without processing the inputs received from the user in the…

  47. 6.1CVE-2022-34094ExploitEPSS 2.6%

    Portal do Software Publico Brasileiro i3geo v7.0.5 was discovered to contain a cross-site scripting (XSS) vulnerability via request_token.php.

  48. 6.1CVE-2022-34093ExploitEPSS 2.6%

    Portal do Software Publico Brasileiro i3geo v7.0.5 was discovered to contain a cross-site scripting (XSS) vulnerability via access_token.php.

  49. 9.8CVE-2022-32409ExploitEPSS 14%

    A local file inclusion (LFI) vulnerability in the component codemirror.php of Portal do Software Publico Brasileiro i3geo v7.0.5 allows attackers to execute arbitrary PHP code via a crafted HTTP request.

  50. 5.9CVE-2022-29593ExploitEPSS 13%

    relay_cgi.cgi on Dingtian DT-R002 2CH relay devices with firmware 3.1.276A allows an attacker to replay HTTP post requests without the need for authentication or a valid signed/authorized request.