cve.bz

Matching records, newest first, page 73

Filter
  1. 8.8CVE-2022-34753ExploitEPSS 71%

    A CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause remote root exploit when the command is compromised. Affected Products: SpaceLogic C-Bus Home Contro…

  2. 8.8CVE-2022-2297ExploitEPSS 3.4%

    A vulnerability, which was classified as critical, was found in SourceCodester Clinics Patient Management System 2.0. Affected is an unknown function of the file /pms/update_user.php?user_id=1. The manipulation of the argument profile_pict…

  3. 9.8CVE-2022-1952ExploitEPSS 25%

    The Free Booking Plugin for Hotels, Restaurant and Car Rental WordPress plugin before 1.1.16 suffers from insufficient input validation which leads to arbitrary file upload and subsequently to remote code execution. An AJAX action accessib…

  4. 6.1CVE-2022-1937ExploitEPSS 1.8%

    The Awin Data Feed WordPress plugin before 1.8 does not sanitise and escape a parameter before outputting it back via an AJAX action (available to both unauthenticated and authenticated users), leading to a Reflected Cross-Site Scripting

  5. 6.1CVE-2022-1910ExploitEPSS 1.4%

    The Shortcodes and extra features for Phlox WordPress plugin before 2.9.8 does not sanitise and escape a parameter before outputting it back in the response, leading to a Reflected Cross-Site Scripting

  6. 9.8CVE-2022-1057ExploitEPSS 8.0%

    The Pricing Deals for WooCommerce WordPress plugin through 2.0.2.02 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to an unauthenticated S…

  7. 6.1CVE-2022-35416ExploitEPSS 3.0%

    H3C SSL VPN through 2022-07-10 allows wnm/login/login.json svpnlang cookie XSS.

  8. 9.8CVE-2022-31137ExploitEPSS 91%

    Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers. Versions prior to 6.1.1.0 are subject to a remote code execution vulnerability. System commands can be run remotely via the subprocess_execute function …

  9. 9.8CVE-2022-35411ExploitEPSS 47%

    rpc.py through 0.6.0 allows Remote Code Execution because an unpickle occurs when the "serializer: pickle" HTTP header is sent. In other words, although JSON (not Pickle) is the default data format, an unauthenticated client can cause the …

  10. 6.1CVE-2022-33098ExploitEPSS 54%

    Magnolia CMS v6.2.19 was discovered to contain a cross-site scripting (XSS) vulnerability via the Edit Contact function. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted SVG document, with JavaScri…

  11. 7.2CVE-2022-31854ExploitEPSS 32%

    Codoforum v5.1 was discovered to contain an arbitrary file upload vulnerability via the logo change option in the admin panel.

  12. 9.8CVE-2022-31126ExploitEPSS 53%

    Roxy-wi is an open source web interface for managing Haproxy, Nginx, Apache and Keepalived servers. A vulnerability in Roxy-wi allows a remote, unauthenticated attacker to code execution by sending a specially crafted HTTP request to /app/…

  13. 9.8CVE-2022-31125ExploitEPSS 20%

    Roxy-wi is an open source web interface for managing Haproxy, Nginx, Apache and Keepalived servers. A vulnerability in Roxy-wi allows a remote, unauthenticated attacker to bypass authentication and access admin functionality by sending a s…

  14. 8.8CVE-2022-34878ExploitEPSS 3.4%

    SQL Injection vulnerability in User Stats interface (/vicidial/user_stats.php) of VICIdial via the file_download parameter allows attacker to spoof identity, tamper with existing data, allow the complete disclosure of all data on the syste…

  15. 8.8CVE-2022-34877ExploitEPSS 3.4%

    SQL Injection vulnerability in AST Agent Time Sheet interface ((/vicidial/AST_agent_time_sheet.php) of VICIdial via the agent parameter allows attacker to spoof identity, tamper with existing data, allow the complete disclosure of all data…

  16. 8.8CVE-2022-34876ExploitEPSS 3.4%

    SQL Injection vulnerability in admin interface (/vicidial/admin.php) of VICIdial via modify_email_accounts, access_recordings, and agentcall_email parameters allows attacker to spoof identity, tamper with existing data, allow the complete …

  17. 8.8CVE-2021-43116ExploitEPSS 7.5%

    An Access Control vulnerability exists in Nacos 2.0.3 in the access prompt page; enter username and password, click on login to capture packets and then change the returned package, which lets a malicious user login.

  18. 7.8CVE-2022-34918ExploitEPSS 5.5%

    An issue was discovered in the Linux kernel through 5.18.9. A type confusion bug in nft_set_elem_init (leading to a buffer overflow) could be used by a local attacker to escalate privileges, a different vulnerability than CVE-2022-32250. (…

  19. 6.1CVE-2022-1946ExploitEPSS 1.8%

    The Gallery WordPress plugin before 2.0.0 does not sanitise and escape a parameter before outputting it back in the response of an AJAX action (available to both unauthenticated and authenticated users), leading to a Reflected Cross-Site S…

  20. 6.1CVE-2022-0250ExploitEPSS 1.6%

    The Redirection for Contact Form 7 WordPress plugin before 2.5.0 does not escape a link generated before outputting it in an attribute, leading to a Reflected Cross-Site Scripting

  21. 6.1CVE-2022-2290ExploitEPSS 2.9%

    Cross-site Scripting (XSS) - Reflected in GitHub repository zadam/trilium prior to 0.52.4, 0.53.1-beta.

  22. 9.8CVE-2022-32094ExploitEPSS 7.7%

    Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the loginid parameter at doctorlogin.php.

  23. 8.8CVE-2022-2185ExploitEPSS 77%

    A critical issue has been discovered in GitLab affecting all versions starting from 14.0 prior to 14.10.5, 15.0 prior to 15.0.4, and 15.1 prior to 15.1.1 where an authenticated user authorized to import projects could import a maliciously …

  24. 6.1CVE-2022-29272ExploitEPSS 4.2%

    In Nagios XI through 5.8.5, an open redirect vulnerability exists in the login function that could lead to spoofing.

  25. 6.5CVE-2022-31886ExploitEPSS 2.2%

    Marval MSM v14.19.0.12476 is vulnerable to Cross Site Request Forgery (CSRF). An attacker can disable the 2FA by sending the user a malicious form.

  26. 9.8CVE-2022-31885ExploitEPSS 33%

    Marval MSM v14.19.0.12476 is vulnerable to OS Command Injection due to the insecure handling of VBScripts.

  27. 9.8CVE-2022-31056ExploitEPSS 9.9%

    GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. In affected versions all assistance forms (Ticket/Change/Problem) permit sql injection on the acto…

  28. 7.5CVE-2021-41460ExploitEPSS 6.7%

    ECShop 4.1.0 has SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information.

  29. 8.8CVE-2022-31101ExploitEPSS 23%

    prestashop/blockwishlist is a prestashop extension which adds a block containing the customer's wishlists. In affected versions an authenticated customer can perform SQL injection. This issue is fixed in version 2.1.1. Users are advised to…

  30. 9.8CVE-2022-28171ExploitEPSS 52%

    The web module in some Hikvision Hybrid SAN/Cluster Storage products have the following security vulnerability. Due to the insufficient input validation, attacker can exploit the vulnerability to execute restricted commands by sending mess…

  31. 6.1CVE-2022-1916ExploitEPSS 1.9%

    The Active Products Tables for WooCommerce. Professional products tables for WooCommerce store WordPress plugin before 1.0.5 does not sanitise and escape a parameter before outputting it back in the response of an AJAX action (available to…

  32. 6.1CVE-2022-1904ExploitEPSS 1.5%

    The Pricing Tables WordPress Plugin WordPress plugin before 3.2.1 does not sanitise and escape parameter before outputting it back in a page available to any user (both authenticated and unauthenticated) when a specific setting is enabled,…

  33. 8.1CVE-2022-1903ExploitEPSS 8.7%

    The ARMember WordPress plugin before 3.4.8 is vulnerable to account takeover (even the administrator) due to missing nonce and authorization checks in an AJAX action available to unauthenticated users, allowing them to change the password …

  34. 9.8CVE-2022-1574ExploitEPSS 12%

    The HTML2WP WordPress plugin through 1.0.0 does not have authorisation and CSRF checks when importing files, and does not validate them, as a result, unauthenticated attackers can upload arbitrary files (such as PHP) on the remote server

  35. 4.8CVE-2022-1029ExploitEPSS 0.9%

    The Limit Login Attempts WordPress plugin before 4.0.72 does not sanitise and escape some of its settings, leading to malicious users with administrator privileges to store malicious Javascript code leading to Cross-Site Scripting attacks …

  36. 7.2CVE-2022-20828ExploitEPSS 49%

    A vulnerability in the CLI parser of Cisco FirePOWER Software for Adaptive Security Appliance (ASA) FirePOWER module could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affec…

  37. 8.8CVE-2013-1916ExploitEPSS 13%

    In WordPress Plugin User Photo 0.9.4, when a photo is uploaded, it is only partially validated and it is possible to upload a backdoor on the server hosting WordPress. This backdoor can be called (executed) even if the photo has not been y…

  38. 6.5CVE-2013-1891ExploitEPSS 6.6%

    In OpenCart 1.4.7 to 1.5.5.1, implemented anti-traversal code in filemanager.php is ineffective and can be bypassed.

  39. 6.1CVE-2022-34328ExploitEPSS 2.4%

    PMB 7.3.10 allows reflected XSS via the id parameter in an lvl=author_see request to index.php.

  40. 5.4CVE-2021-41432ExploitEPSS 1.8%

    A stored cross-site scripting (XSS) vulnerability exists in FlatPress 1.2.1 that allows for arbitrary execution of JavaScript commands through blog content.

  41. 6.1CVE-2022-34305ExploitEPSS 6.7%

    In Apache Tomcat 10.1.0-M1 to 10.1.0-M16, 10.0.0-M1 to 10.0.22, 9.0.30 to 9.0.64 and 8.5.50 to 8.5.81 the Form authentication example in the examples web application displayed user provided data without filtering, exposing a XSS vulnerabil…

  42. 6.1CVE-2022-2174ExploitEPSS 2.6%

    Cross-site Scripting (XSS) - Reflected in GitHub repository microweber/microweber prior to 1.2.18.

  43. 9.8CVE-2022-29775ExploitEPSS 61%

    iSpyConnect iSpy v7.2.2.0 allows attackers to bypass authentication via a crafted URL.

  44. 6.1CVE-2022-33119ExploitEPSS 1.6%

    NUUO Network Video Recorder NVRsolo v03.06.02 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via login.php.

  45. 6.1CVE-2022-31373ExploitEPSS 5.6%

    SolarView Compact v6.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the component Solar_AiConf.php.

  46. 5.3CVE-2022-31062ExploitEPSS 5.9%

    ### Impact A plugin public script can be used to read content of system files. ### Patches Upgrade to version 1.0.2. ### Workarounds `b/deploy/index.php` file can be deleted if deploy feature is not used.

  47. 6.1CVE-2021-25104ExploitEPSS 1.4%

    The Ocean Extra WordPress plugin before 1.9.5 does not escape generated links which are then used when the OceanWP is active, leading to a Reflected Cross-Site Scripting issue

  48. 6.1CVE-2022-2130ExploitEPSS 3.1%

    Cross-site Scripting (XSS) - Reflected in GitHub repository microweber/microweber prior to 1.2.17.

  49. 6.1CVE-2022-32444ExploitEPSS 2.4%

    An issue was discovered in u5cms verion 8.3.5 There is a URL redirection vulnerability that can cause a user's browser to be redirected to another site via /loginsave.php.

  50. 6.1CVE-2022-31299ExploitEPSS 5.1%

    Haraj v3.7 was discovered to contain a reflected cross-site scripting (XSS) vulnerability in the User Upgrade Form.