cve.bz

Matching records, newest first, page 79

Filter
  1. 6.1CVE-2022-1058ExploitEPSS 53%

    Open Redirect on login in GitHub repository go-gitea/gitea prior to 1.16.5.

  2. 9.8CVE-2022-23881ExploitEPSS 57%

    ZZZCMS zzzphp v2.1.0 was discovered to contain a remote command execution (RCE) vulnerability via danger_key() at zzz_template.php.

  3. 7.5CVE-2021-44139ExploitEPSS 5.6%

    Sentinel 1.8.2 is vulnerable to Server-side request forgery (SSRF).

  4. 9.8CVE-2022-27228ExploitEPSS 21%

    In the vote (aka "Polls, Votes") module before 21.0.100 of Bitrix Site Manager, a remote unauthenticated attacker can execute arbitrary code.

  5. 9.8CVE-2021-43650ExploitEPSS 6.2%

    WebRun 3.6.0.42 is vulnerable to SQL Injection via the P_0 parameter used to set the username during the login process.

  6. 9.8CVE-2022-26148ExploitEPSS 53%

    An issue was discovered in Grafana through 7.3.4, when integrated with Zabbix. The Zabbix password can be found in the api_jsonrpc.php HTML source code. When the user logs in and allows the user to register, one can right click to view the…

  7. 5.3CVE-2022-23348ExploitEPSS 3.3%

    BigAnt Software BigAnt Server v5.6.06 was discovered to utilize weak password hashes.

  8. 7.5CVE-2022-23347ExploitEPSS 13%

    BigAnt Software BigAnt Server v5.6.06 was discovered to be vulnerable to directory traversal attacks.

  9. 9.8CVE-2022-0760ExploitEPSS 11%

    The Simple Link Directory WordPress plugin before 7.7.2 does not validate and escape the post_id parameter before using it in a SQL statement via the qcopd_upvote_action AJAX action (available to unauthenticated and authenticated users), l…

  10. 9.8CVE-2022-0747ExploitEPSS 15%

    The Infographic Maker WordPress plugin before 4.3.8 does not validate and escape the post_id parameter before using it in a SQL statement via the qcld_upvote_action AJAX action (available to unauthenticated and authenticated users), leadin…

  11. 9.8CVE-2022-0739ExploitEPSS 37%

    The BookingPress WordPress plugin before 1.0.11 fails to properly sanitize user supplied POST data before it is used in a dynamically constructed SQL query via the bookingpress_front_get_category_services AJAX action (available to unauthen…

  12. 9.1CVE-2022-0591ExploitEPSS 20%

    The FormCraft WordPress plugin before 3.8.28 does not validate the URL parameter in the formcraft3_get AJAX action, leading to SSRF issues exploitable by unauthenticated users

  13. 9.1CVE-2022-26960ExploitEPSS 51%

    connector.minimal.php in std42 elFinder through 2.1.60 is affected by path traversal. This allows unauthenticated remote attackers to read, write, and browse files outside the configured document root. This is due to improper handling of a…

  14. 8.8CVE-2022-0415ExploitEPSS 66%

    Remote Command Execution in uploading repository file in GitHub repository gogs/gogs prior to 0.12.6.

  15. 7.5CVE-2022-25481ExploitEPSS 4.7%

    ThinkPHP Framework v5.0.24 was discovered to be configured without the PATHINFO parameter. This allows attackers to access all system environment parameters from index.php. NOTE: this is disputed by a third party because system environment…

  16. 8.8CVE-2022-27226ExploitEPSS 34%

    A CSRF issue in /api/crontab on iRZ Mobile Routers through 2022-03-16 allows a threat actor to create a crontab entry in the router administration panel. The cronjob will consequently execute the entry on the threat actor's defined interva…

  17. 9.8CVE-2022-24637ExploitEPSS 99.0%

    Open Web Analytics (OWA) before 1.7.4 allows an unauthenticated remote attacker to obtain sensitive user information, which can be used to gain admin privileges by leveraging cache hashes. This occurs because files generated with '<?php (i…

  18. 7.2CVE-2022-26965ExploitEPSS 36%

    In Pluck 4.7.16, an admin user can use the theme upload functionality at /admin.php?action=themeinstall to perform remote code execution.

  19. 7.5CVE-2021-45968ExploitEPSS 10%

    An issue was discovered in xmppserver jar in the XMPP Server component of the JIve platform, as used in Pascom Cloud Phone System before 7.20.x (and in other products). An endpoint in the backend Tomcat server of the Pascom allows SSRF, a …

  20. 9.8CVE-2021-45967ExploitEPSS 21%

    An issue was discovered in Pascom Cloud Phone System before 7.20.x. A configuration error between NGINX and a backend Tomcat server leads to a path traversal in the Tomcat server, exposing unintended endpoints.

  21. 7.5CVE-2021-46107ExploitEPSS 6.6%

    Ligeo Archives Ligeo Basics as of 02_01-2022 is vulnerable to Server Side Request Forgery (SSRF) which allows an attacker to read any documents via the download features.

  22. 7.5CVE-2021-44260ExploitEPSS 6.4%

    A vulnerability is in the 'live_mfg.html' page of the WAVLINK AC1200, version WAVLINK-A42W-1.27.6-20180418, which can allow a remote attacker to access this page without any authentication. When processed, it exposes some key information o…

  23. 7.5CVE-2021-45793ExploitEPSS 4.5%

    Slims9 Bulian 9.4.2 is affected by SQL injection in lib/comment.inc.php. User data can be obtained.

  24. 5.3CVE-2022-25497ExploitEPSS 3.7%

    CuppaCMS v1.0 was discovered to contain an arbitrary file read via the copy function.

  25. 5.4CVE-2022-25489ExploitEPSS 1.5%

    Atom CMS v2.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the "A" parameter in /widgets/debug.php.

  26. 9.8CVE-2022-25488ExploitEPSS 7.1%

    Atom CMS v2.0 was discovered to contain a SQL injection vulnerability via the id parameter in /admin/ajax/avatar.php.

  27. 9.8CVE-2022-25487ExploitEPSS 54%

    Atom CMS v2.0 was discovered to contain a remote code execution (RCE) vulnerability via /admin/uploads.php.

  28. 7.8CVE-2022-25486ExploitEPSS 10%

    CuppaCMS v1.0 was discovered to contain a local file inclusion via the url parameter in /alerts/alertConfigField.php.

  29. 7.8CVE-2022-25485ExploitEPSS 8.0%

    CuppaCMS v1.0 was discovered to contain a local file inclusion via the url parameter in /alerts/alertLightbox.php.

  30. 5.5CVE-2022-0968ExploitEPSS 3.7%

    The microweber application allows large characters to insert in the input field "fist & last name" which can allow attackers to cause a Denial of Service (DoS) via a crafted HTTP request. in microweber/microweber in GitHub repository micro…

  31. 5.4CVE-2022-0967ExploitEPSS 3.3%

    Stored XSS via File Upload in star7th/showdoc in star7th/showdoc in GitHub repository star7th/showdoc prior to 2.10.4.

  32. 5.4CVE-2022-0963ExploitEPSS 1.9%

    Unrestricted XML Files Leads to Stored XSS in GitHub repository microweber/microweber prior to 1.2.12.

  33. 5.4CVE-2022-0954ExploitEPSS 3.2%

    Multiple Stored Cross-site Scripting (XSS) Vulnerabilities in Shop's Other Settings, Shop's Autorespond E-mail Settings and Shops' Payments Methods in GitHub repository microweber/microweber prior to 1.2.11.

  34. 8.8CVE-2021-45010ExploitEPSS 70%

    A path traversal vulnerability in the file upload functionality in tinyfilemanager.php in Tiny File Manager before 2.4.7 allows remote attackers (with valid user accounts) to upload malicious PHP files to the webroot, leading to code execu…

  35. 9.8CVE-2022-0658ExploitEPSS 7.5%

    The CommonsBooking WordPress plugin before 2.6.8 does not sanitise and escape the location parameter of the calendar_data AJAX action (available to unauthenticated users) before it is used in dynamically constructed SQL queries, leading to…

  36. 9.8CVE-2022-0169ExploitEPSS 75%

    The Photo Gallery by 10Web WordPress plugin before 1.6.0 does not validate and escape the bwg_tag_id_bwg_thumbnails_0 parameter before using it in a SQL statement via the bwg_frontend_data AJAX action (available to unauthenticated and auth…

  37. 6.1CVE-2022-0165ExploitEPSS 4.3%

    The Page Builder KingComposer WordPress plugin through 2.9.6 does not validate the id parameter before redirecting the user to it via the kc_get_thumbn AJAX action available to both unauthenticated and authenticated users

  38. 6.1CVE-2022-0147ExploitEPSS 1.6%

    The Cookie Information | Free GDPR Consent Solution WordPress plugin before 2.0.8 does not escape user data before outputting it back in attributes in the admin dashboard, leading to a Reflected Cross-Site Scripting issue

  39. 9.8CVE-2021-25003ExploitEPSS 56%

    The WPCargo Track & Trace WordPress plugin before 6.9.0 contains a file which could allow unauthenticated attackers to write a PHP file anywhere on the web server, leading to RCE

  40. 4.9CVE-2021-24966ExploitEPSS 5.2%

    The Error Log Viewer WordPress plugin through 1.1.1 does not validate the path of the log file to clear, allowing high privilege users to clear arbitrary files on the web server, including those outside of the blog folder

  41. 6.1CVE-2021-24940ExploitEPSS 1.4%

    The Persian Woocommerce WordPress plugin through 5.8.0 does not escape the s parameter before outputting it back in an attribute in the admin dashboard, which could lead to a Reflected Cross-Site Scripting issue

  42. 6.1CVE-2022-24384ExploitEPSS 4.1%

    Cross-site Scripting (XSS) vulnerability in SmarterTools SmarterTrack This issue affects: SmarterTools SmarterTrack 100.0.8019.14010.

  43. 7.5CVE-2022-25216ExploitEPSS 13%

    An absolute path traversal vulnerability allows a remote attacker to download any file on the Windows file system for which the user account running DVDFab 12 Player (recently renamed PlayerFab) has read-access, by means of an HTTP GET req…

  44. 6.1CVE-2021-32478ExploitEPSS 1.1%

    The redirect URI in the LTI authorization endpoint required extra sanitizing to prevent reflected XSS and open redirect risks. Moodle versions 3.10 to 3.10.3, 3.9 to 3.9.6, 3.8 to 3.8.8 and earlier unsupported versions are affected.

  45. 5.4CVE-2022-0928ExploitEPSS 2.4%

    Cross-site Scripting (XSS) - Stored in GitHub repository microweber/microweber prior to 1.2.12.

  46. 5.3CVE-2022-0870ExploitEPSS 3.4%

    Server-Side Request Forgery (SSRF) in GitHub repository gogs/gogs prior to 0.12.5.

  47. 8.8CVE-2021-44673ExploitEPSS 9.0%

    A Remote Code Execution (RCE) vulnerability exists in Croogo 3.0.2via admin/file-manager/attachments, which lets a malicoius user upload a web shell script.

  48. 7.2CVE-2022-26521ExploitEPSS 9.8%

    Abantecart through 1.3.2 allows remote authenticated administrators to execute arbitrary code by uploading an executable file, because the Catalog>Media Manager>Images settings can be changed by an administrator (e.g., by configuring .php …

  49. 9.8CVE-2022-26143KEVExploitEPSS 87%

    The TP-240 (aka tp240dvr) component in Mitel MiCollab before 9.4 SP1 FP1 and MiVoice Business Express through 8.1 allows remote attackers to obtain sensitive information and cause a denial of service (performance degradation and excessive …

  50. 8.1CVE-2022-25090ExploitEPSS 11%

    Printix Secure Cloud Print Management through 1.3.1106.0 creates a temporary temp.ini file in a directory with insecure permissions, leading to privilege escalation because of a race condition.