cve.bz

Matching records, newest first, page 74

Filter
  1. 9.8CVE-2022-24562ExploitEPSS 54%

    In IOBit IOTransfer 4.3.1.1561, an unauthenticated attacker can send GET and POST requests to Airserv and gain arbitrary read/write access to the entire file-system (with admin privileges) on the victim's endpoint, which can result in data…

  2. 7.5CVE-2022-31847ExploitEPSS 6.6%

    A vulnerability in /cgi-bin/ExportAllSettings.sh of WAVLINK WN579 X3 M79X3.V5030.180719 allows attackers to obtain sensitive router information via a crafted POST request.

  3. 7.5CVE-2022-31846ExploitEPSS 7.4%

    A vulnerability in live_mfg.shtml of WAVLINK WN535 G3 M35G3R.V5030.180927 allows attackers to obtain sensitive router information via execution of the exec cmd function.

  4. 7.5CVE-2022-31845ExploitEPSS 8.7%

    A vulnerability in live_check.shtml of WAVLINK WN535 G3 M35G3R.V5030.180927 allows attackers to obtain sensitive router information via execution of the exec cmd function.

  5. 7.5CVE-2022-33174ExploitEPSS 14%

    Power Distribution Units running on Powertek firmware (multiple brands) before 3.30.30 allows remote authorization bypass in the web interface. To exploit the vulnerability, an attacker must send an HTTP packet to the data retrieval interf…

  6. 6.1CVE-2022-29455ExploitEPSS 24%

    DOM-based Reflected Cross-Site Scripting (XSS) vulnerability in Elementor's Elementor Website Builder plugin <= 3.5.5 versions.

  7. 7.5CVE-2022-1768ExploitEPSS 13%

    The RSVPMaker plugin for WordPress is vulnerable to unauthenticated SQL Injection due to insufficient escaping and parameterization on user supplied data passed to multiple SQL queries in the ~/rsvpmaker-email.php file. This makes it possi…

  8. 6.1CVE-2022-1756ExploitEPSS 1.9%

    The Newsletter WordPress plugin before 7.4.5 does not sanitize and escape the $_SERVER['REQUEST_URI'] before echoing it back in admin pages. Although this uses addslashes, and most modern browsers automatically URLEncode requests, this is …

  9. 6.1CVE-2022-1724ExploitEPSS 1.8%

    The Simple Membership WordPress plugin before 4.1.1 does not properly sanitise and escape parameters before outputting them back in AJAX actions, leading to Reflected Cross-Site Scripting

  10. 5.3CVE-2022-1595ExploitEPSS 2.9%

    The HC Custom WP-Admin URL WordPress plugin through 1.4 leaks the secret login URL when sending a specific crafted request

  11. 9.8CVE-2022-0885ExploitEPSS 9.4%

    The Member Hero WordPress plugin through 1.0.9 lacks authorization checks, and does not validate the a request parameter in an AJAX action, allowing unauthenticated users to call arbitrary PHP functions with no arguments.

  12. 9.8CVE-2022-0827ExploitEPSS 9.1%

    The Bestbooks WordPress plugin through 2.6.3 does not sanitise and escape some parameters before using them in a SQL statement via an AJAX action, leading to an SQL Injection exploitable by unauthenticated users

  13. 9.8CVE-2022-0786ExploitEPSS 13%

    The KiviCare WordPress plugin before 2.3.9 does not sanitise and escape some parameters before using them in SQL statements via the ajax_post AJAX action with the get_doctor_details route, leading to SQL Injections exploitable by unauthent…

  14. 9.8CVE-2021-41749ExploitEPSS 17%

    In the SEOmatic plugin up to 3.4.11 for Craft CMS 3, it is possible for unauthenticated attackers to perform a Server-Side Template Injection, allowing for remote code execution.

  15. 8.8CVE-2019-25066ExploitEPSS 5.5%

    A vulnerability has been found in ajenti 2.1.31 and classified as critical. This vulnerability affects unknown code of the component API. The manipulation leads to privilege escalation. The attack can be initiated remotely. The exploit has…

  16. 9.8CVE-2019-25065ExploitEPSS 6.6%

    A vulnerability was found in OpenNetAdmin 18.1.1. It has been rated as critical. Affected by this issue is some unknown functionality. The manipulation leads to privilege escalation. The attack may be launched remotely. The exploit has bee…

  17. 9.8CVE-2022-32272ExploitEPSS 9.6%

    OPSWAT MetaDefender Core before 5.1.2, MetaDefender ICAP before 4.12.1, and MetaDefender Email Gateway Security before 5.6.1 have incorrect access control, resulting in privilege escalation.

  18. 6.1CVE-2022-32195ExploitEPSS 2.3%

    Open edX platform before 2022-06-06 allows XSS via the "next" parameter in the logout URL.

  19. 8.8CVE-2022-30075ExploitEPSS 35%

    In TP-Link Router AX50 firmware 210730 and older, import of a malicious backup file via web interface can lead to remote code execution due to improper validation.

  20. 7.5CVE-2022-29014ExploitEPSS 12%

    A local file inclusion vulnerability in Razer Sila Gaming Router v2.0.441_api-2.0.418 allows attackers to read arbitrary files.

  21. 9.8CVE-2022-29013ExploitEPSS 77%

    A command injection in the command parameter of Razer Sila Gaming Router v2.0.441_api-2.0.418 allows attackers to execute arbitrary commands via a crafted POST request.

  22. 7.2CVE-2022-31325ExploitEPSS 5.2%

    There is a SQL Injection vulnerability in ChurchCRM 4.4.5 via the 'PersonID' field in /churchcrm/WhyCameEditor.php.

  23. 9.8CVE-2022-1692ExploitEPSS 10%

    The CP Image Store with Slideshow WordPress plugin before 1.0.68 does not sanitise and escape the ordering_by query parameter before using it in a SQL statement in pages where the [codepeople-image-store] is embed, allowing unauthenticated…

  24. 5.3CVE-2022-1598ExploitEPSS 5.4%

    The WPQA Builder WordPress plugin before 5.5 which is a companion to the Discy and Himer , lacks authentication in a REST API endpoint, allowing unauthenticated users to discover private questions sent between users on the site.

  25. 6.1CVE-2022-1597ExploitEPSS 3.0%

    The WPQA Builder WordPress plugin before 5.4, used as a companion for the Discy and Himer , does not sanitise and escape a parameter on its reset password form which makes it possible to perform Reflected Cross-Site Scripting attacks

  26. 9.8CVE-2022-0788ExploitEPSS 7.8%

    The WP Fundraising Donation and Crowdfunding Platform WordPress plugin before 1.5.0 does not sanitise and escape a parameter before using it in a SQL statement via one of it's REST route, leading to an SQL injection exploitable by unauthen…

  27. 6.1CVE-2022-31470ExploitEPSS 53%

    An XSS vulnerability in the index_mobile_changepass.hsp reset-password section of Axigen Mobile WebMail before 10.2.3.12 and 10.3.x before 10.3.3.47 allows attackers to run arbitrary Javascript code that, using an active end-user session (…

  28. 7.5CVE-2021-37589ExploitEPSS 33%

    Virtua Cobranca before 12R allows SQL Injection on the login page.

  29. 6.1CVE-2022-29296ExploitEPSS 2.5%

    A reflected cross-site scripting (XSS) vulnerability in the login portal of Avantune Genialcloud ProJ - 10 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.

  30. 9.8CVE-2022-26134KEVExploitEPSS >99.9%

    In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an unauthenticated attacker to execute arbitrary code on a Confluence Server or Data Center instance. The affected versions …

  31. 9.8CVE-2021-42887ExploitEPSS 44%

    In TOTOLINK EX1200T V4.1.2cu.5215, an attacker can bypass login by sending a specific request through formLoginAuth.htm.

  32. 7.2CVE-2022-32028ExploitEPSS 5.1%

    Car Rental Management System v1.0 is vulnerable to SQL Injection via /car-rental-management-system/admin/manage_user.php?id=.

  33. 7.2CVE-2022-32026ExploitEPSS 5.4%

    Car Rental Management System v1.0 is vulnerable to SQL Injection via /car-rental-management-system/admin/manage_booking.php?id=.

  34. 7.2CVE-2022-32025ExploitEPSS 4.6%

    Car Rental Management System v1.0 is vulnerable to SQL Injection via /car-rental-management-system/admin/view_car.php?id=.

  35. 7.2CVE-2022-32024ExploitEPSS 4.6%

    Car Rental Management System v1.0 is vulnerable to SQL Injection via car-rental-management-system/booking.php?car_id=.

  36. 7.2CVE-2022-32022ExploitEPSS 4.9%

    Car Rental Management System v1.0 is vulnerable to SQL Injection via /ip/car-rental-management-system/admin/ajax.php?action=login.

  37. 7.2CVE-2022-32018ExploitEPSS 4.6%

    Complete Online Job Search System v1.0 is vulnerable to SQL Injection via /eris/index.php?q=hiring&search=.

  38. 7.2CVE-2022-32015ExploitEPSS 4.6%

    Complete Online Job Search System v1.0 is vulnerable to SQL Injection via /eris/index.php?q=category&search=.

  39. 7.2CVE-2022-32007ExploitEPSS 4.6%

    Complete Online Job Search System v1.0 is vulnerable to SQL Injection via /eris/admin/company/index.php?view=edit&id=.

  40. 7.2CVE-2022-31984ExploitEPSS 4.8%

    Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/admin/requests/take_action.php?id=.

  41. 9.8CVE-2022-31978ExploitEPSS 7.0%

    Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/classes/Master.php?f=delete_inquiry.

  42. 9.8CVE-2022-31977ExploitEPSS 7.0%

    Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/classes/Master.php?f=delete_team.

  43. 9.8CVE-2022-31976ExploitEPSS 7.0%

    Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/classes/Master.php?f=delete_request.

  44. 7.2CVE-2022-31975ExploitEPSS 4.8%

    Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/admin/?page=user/manage_user&id=.

  45. 7.2CVE-2022-31974ExploitEPSS 4.9%

    Online Fire Reporting System v1.0 is vulnerable to SQL Injection via /ofrs/admin/?page=reports&date=.

  46. 6.1CVE-2022-30514ExploitEPSS 3.6%

    School Dormitory Management System v1.0 is vulnerable to reflected cross-site scripting (XSS) via admin/inc/navigation.php:126.

  47. 6.1CVE-2022-30513ExploitEPSS 3.6%

    School Dormitory Management System v1.0 is vulnerable to reflected cross-site scripting (XSS) via admin/inc/navigation.php:125

  48. 9.8CVE-2022-30512ExploitEPSS 9.7%

    School Dormitory Management System 1.0 is vulnerable to SQL Injection via accounts/payment_history.php:31.

  49. 9.8CVE-2022-25237ExploitEPSS 57%

    Bonita Web 2021.2 is affected by a authentication/authorization bypass vulnerability due to an overly broad exclude pattern used in the RestAPIAuthorizationFilter. By appending ;i18ntranslation or /../i18ntranslation/ to the end of a URL, …

  50. 7.8CVE-2022-30190KEVExploitEPSS 98%

    A remote code execution vulnerability exists when MSDT is called using the URL protocol from a calling application such as Word. An attacker who successfully exploits this vulnerability can run arbitrary code with the privileges of the cal…