cve.bz

Matching records, newest first, page 75

Filter
  1. 5.5CVE-2022-22616ExploitEPSS 8.1%

    This issue was addressed with improved checks. This issue is fixed in Security Update 2022-003 Catalina, macOS Monterey 12.3, macOS Big Sur 11.6.5. A maliciously crafted ZIP archive may bypass Gatekeeper checks.

  2. 9.4CVE-2022-26833ExploitEPSS 38%

    An improper authentication vulnerability exists in the REST API functionality of Open Automation Software OAS Platform V16.00.0121. A specially-crafted series of HTTP requests can lead to unauthenticated use of the REST API. An attacker ca…

  3. 8.8CVE-2022-1883ExploitEPSS 6.8%

    SQL Injection in GitHub repository camptocamp/terraboard prior to 2.2.0.

  4. 7.5CVE-2022-1815ExploitEPSS 5.4%

    Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository jgraph/drawio prior to 18.1.2.

  5. 6.1CVE-2022-29349ExploitEPSS 1.8%

    kkFileView v4.0.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the url parameter at /controller/OnlinePreviewController.java.

  6. 6.1CVE-2022-29005ExploitEPSS 2.2%

    Multiple cross-site scripting (XSS) vulnerabilities in the component /obcs/user/profile.php of Online Birth Certificate System v1.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the fname or …

  7. 6.1CVE-2022-29004ExploitEPSS 2.9%

    Diary Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the Name parameter in search-result.php.

  8. 6.1CVE-2022-1221ExploitEPSS 1.9%

    The Gwyn's Imagemap Selector WordPress plugin through 0.3.3 does not sanitise and escape some parameters before outputting them back in attributes, leading to a Reflected Cross-Site Scripting.

  9. 9.8CVE-2022-0781ExploitEPSS 13%

    The Nirweb support WordPress plugin before 2.8.2 does not sanitise and escape a parameter before using it in a SQL statement via an AJAX action (available to unauthenticated users), leading to an SQL injection

  10. 6.1CVE-2022-0346ExploitEPSS 2.1%

    The XML Sitemap Generator for Google WordPress plugin before 2.0.4 does not validate a parameter which can be set to an arbitrary value, thus causing XSS via error message or RCE if allow_url_include is turned on.

  11. 7.5CVE-2022-31268ExploitEPSS 11%

    A Path Traversal vulnerability in Gitblit 1.9.3 can lead to reading website files via /resources//../ (e.g., followed by a WEB-INF or META-INF pathname).

  12. 9.8CVE-2022-22972ExploitEPSS 56%

    VMware Workspace ONE Access, Identity Manager and vRealize Automation contain an authentication bypass vulnerability affecting local domain users. A malicious actor with network access to the UI may be able to obtain administrative access …

  13. 5.3CVE-2022-28987ExploitEPSS 10%

    Zoho ManageEngine ADSelfService Plus before 6202 allows attackers to perform username enumeration via a crafted POST request to /ServletAPI/accounts/login.

  14. 7.5CVE-2022-21500ExploitEPSS 72%

    Vulnerability in Oracle E-Business Suite (component: Manage Proxies). The supported version that is affected is 12.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle E-Busi…

  15. 7.5CVE-2022-28955ExploitEPSS 40%

    An access control issue in D-Link DIR816L_FW206b01 allows unauthenticated attackers to access folders folder_view.php and category_view.php.

  16. 5.4CVE-2022-30073ExploitEPSS 1.6%

    WBCE CMS 1.5.2 is vulnerable to Cross Site Scripting (XSS) via /admin/users/save.php.

  17. 7.5CVE-2022-24856ExploitEPSS 10%

    FlyteConsole is the web user interface for the Flyte platform. FlyteConsole prior to version 0.52.0 is vulnerable to server-side request forgery (SSRF) when FlyteConsole is open to the general internet. An attacker can exploit any user of …

  18. 7.5CVE-2022-1711ExploitEPSS 5.8%

    Server-Side Request Forgery (SSRF) in GitHub repository jgraph/drawio prior to 18.0.5.

  19. 7.5CVE-2022-1713ExploitEPSS 9.6%

    SSRF on /proxy in GitHub repository jgraph/drawio prior to 18.0.4. An attacker can make a request as the server and read its contents. This can lead to a leak of sensitive information.

  20. 6.5CVE-2022-1398ExploitEPSS 3.0%

    The External Media without Import WordPress plugin through 1.1.2 does not have any authorisation and does to ensure that medias added via URLs are external medias, which could allow any authenticated users, such as subscriber to perform bl…

  21. 9.8CVE-2022-1386ExploitEPSS 71%

    The Fusion Builder WordPress plugin before 3.6.2, used in the Avada theme, does not validate a parameter in its forms which could be used to initiate arbitrary HTTP requests. The data returned is then reflected back in the application's re…

  22. 8.8CVE-2022-1103ExploitEPSS 16%

    The Advanced Uploader WordPress plugin through 4.2 allows any authenticated users like subscriber to upload arbitrary files, such as PHP, which could lead to RCE

  23. 4.8CVE-2022-0873ExploitEPSS 0.9%

    The Gmedia Photo Gallery WordPress plugin before 1.20.0 does not sanitise and escape the Album's name before outputting it in pages/posts with a media embed, which could allow high privilege users such as admin to perform Cross-Site Script…

  24. 9.8CVE-2022-0867ExploitEPSS 13%

    The Pricing Table WordPress plugin before 3.6.1 fails to properly sanitize and escape user supplied POST data before it is being interpolated in an SQL statement and then executed via an AJAX action available to unauthenticated users

  25. 6.1CVE-2022-30777ExploitEPSS 2.3%

    Parallels H-Sphere 3.6.1713 allows XSS via the index_en.php from parameter.

  26. 6.1CVE-2022-30776ExploitEPSS 4.3%

    atmail 6.5.0 allows XSS via the index.php/admin/index/ error parameter.

  27. 7.5CVE-2022-30781ExploitEPSS 88%

    Gitea before 1.16.7 does not escape git fetch remote.

  28. 6.1CVE-2022-30489ExploitEPSS 4.2%

    WAVLINK WN535 G3 was discovered to contain a cross-site scripting (XSS) vulnerability via the hostname parameter at /cgi-bin/login.cgi.

  29. 9.8CVE-2022-29383ExploitEPSS 49%

    NETGEAR ProSafe SSL VPN firmware FVS336Gv2 and FVS336Gv3 was discovered to contain a SQL injection vulnerability via USERDBDomains.Domainname at cgi-bin/platform.cgi.

  30. 9.8CVE-2022-29303KEVExploitEPSS 98%

    SolarView Compact ver.6.00 was discovered to contain a command injection vulnerability via conf_mail.php.

  31. 7.5CVE-2022-29298ExploitEPSS 47%

    SolarView Compact ver.6.00 allows attackers to access sensitive files via directory traversal.

  32. 9.8CVE-2022-30525KEVExploitEPSS >99.9%

    A OS command injection vulnerability in the CGI program of Zyxel USG FLEX 100(W) firmware versions 5.00 through 5.21 Patch 1, USG FLEX 200 firmware versions 5.00 through 5.21 Patch 1, USG FLEX 500 firmware versions 5.00 through 5.21 Patch …

  33. 7.5CVE-2022-29885ExploitEPSS 73%

    The documentation of Apache Tomcat 10.1.0-M1 to 10.1.0-M14, 10.0.0-M1 to 10.0.20, 9.0.13 to 9.0.62 and 8.5.38 to 8.5.78 for the EncryptInterceptor incorrectly stated it enabled Tomcat clustering to run over an untrusted network. This was n…

  34. 9.8CVE-2022-30047ExploitEPSS 4.9%

    Mingsoft MCMS v5.2.7 was discovered to contain a SQL injection vulnerability in /mdiy/dict/listExcludeApp URI via orderBy parameter.

  35. 6.5CVE-2022-29848ExploitEPSS 3.8%

    In Progress Ipswitch WhatsUp Gold 17.0.0 through 21.1.1, and 22.0.0, it is possible for an authenticated user to invoke an API transaction that would allow them to read sensitive operating-system attributes from a host that is accessible b…

  36. 7.5CVE-2022-29847ExploitEPSS 58%

    In Progress Ipswitch WhatsUp Gold 21.0.0 through 21.1.1, and 22.0.0, it is possible for an unauthenticated attacker to invoke an API transaction that would allow them to relay encrypted WhatsUp Gold user credentials to an arbitrary host.

  37. 5.3CVE-2022-29846ExploitEPSS 5.5%

    In Progress Ipswitch WhatsUp Gold 16.1 through 21.1.1, and 22.0.0, it is possible for an unauthenticated attacker to obtain the WhatsUp Gold installation serial number.

  38. 6.5CVE-2022-29845ExploitEPSS 4.2%

    In Progress Ipswitch WhatsUp Gold 21.1.0 through 21.1.1, and 22.0.0, it is possible for an authenticated user to invoke an API transaction that would allow them to read the contents of a local file.

  39. 9.8CVE-2022-29009ExploitEPSS 23%

    Multiple SQL injection vulnerabilities via the username and password parameters in the Admin panel of Cyber Cafe Management System Project v1.0 allows attackers to bypass authentication.

  40. 9.8CVE-2022-29007ExploitEPSS 19%

    Multiple SQL injection vulnerabilities via the username and password parameters in the Admin panel of Dairy Farm Shop Management System v1.0 allows attackers to bypass authentication.

  41. 9.8CVE-2022-29006ExploitEPSS 19%

    Multiple SQL injection vulnerabilities via the username and password parameters in the Admin panel of Directory Management System v1.0 allows attackers to bypass authentication.

  42. 5.4CVE-2022-29727ExploitEPSS 2.4%

    Survey Sparrow Enterprise Survey Software 2022 has a Stored cross-site scripting (XSS) vulnerability in the Signup parameter.

  43. 9.8CVE-2022-29316ExploitEPSS 3.3%

    Complete Online Job Search System v1.0 was discovered to contain a SQL injection vulnerability via /eris/index.php?q=result&searchfor=advancesearch.

  44. 8.8CVE-2022-26923KEVExploitEPSS 84%

    Active Directory Domain Services Elevation of Privilege Vulnerability

  45. 7.5CVE-2022-1453ExploitEPSS 6.9%

    The RSVPMaker plugin for WordPress is vulnerable to unauthenticated SQL Injection due to missing SQL escaping and parameterization on user supplied data passed to a SQL query in the rsvpmaker-util.php file. This makes it possible for unaut…

  46. 7.5CVE-2022-1442ExploitEPSS 8.8%

    The Metform WordPress plugin is vulnerable to sensitive information disclosure due to improper access control in the ~/core/forms/action.php file which can be exploited by an unauthenticated attacker to view all API keys and secrets of int…

  47. 9.8CVE-2022-27412ExploitEPSS 4.1%

    Explore CMS v1.0 was discovered to contain a SQL injection vulnerability via a /page.php?id= request.

  48. 5.4CVE-2022-27308ExploitEPSS 2.6%

    A stored cross-site scripting (XSS) vulnerability in PHProjekt PhpSimplyGest v1.3.0 allows attackers to execute arbitrary web scripts or HTML via a project title.

  49. 4.8CVE-2022-1104ExploitEPSS 56%

    The Popup Maker WordPress plugin before 1.16.5 does not sanitise and escape some of its Popup settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capab…

  50. 9.8CVE-2022-1013ExploitEPSS 7.5%

    The Personal Dictionary WordPress plugin before 1.3.4 fails to properly sanitize user supplied POST data before it is being interpolated in an SQL statement and then executed, leading to a blind SQL injection vulnerability.