cve.bz

Matching records, newest first, page 81

Filter
  1. 8.8CVE-2022-24288ExploitEPSS 78%

    In Apache Airflow, prior to version 2.2.4, some example DAGs did not properly sanitize user-provided params, making them susceptible to OS Command Injection from the web UI.

  2. 6.5CVE-2021-44665ExploitEPSS 7.7%

    A Directory Traversal vulnerability exists in the Xerte Project Xerte through 3.10.3 when downloading a project file via download.php.

  3. 8.8CVE-2021-44664ExploitEPSS 13%

    An Authenticated Remote Code Exection (RCE) vulnerability exists in Xerte through 3.9 in website_code/php/import/fileupload.php by uploading a maliciously crafted PHP file though the project interface disguised as a language file to bypass…

  4. 7.5CVE-2022-25149ExploitEPSS 77%

    The WP Statistics WordPress plugin is vulnerable to SQL Injection due to insufficient escaping and parameterization of the IP parameter found in the ~/includes/class-wp-statistics-hits.php file which allows attackers without authentication…

  5. 9.8CVE-2022-25148ExploitEPSS 81%

    The WP Statistics WordPress plugin is vulnerable to SQL Injection due to insufficient escaping and parameterization of the current_page_id parameter found in the ~/includes/class-wp-statistics-hits.php file which allows attackers without a…

  6. 6.1CVE-2022-0653ExploitEPSS 2.3%

    The Profile Builder – User Profile & User Registration Forms WordPress plugin is vulnerable to Cross-Site Scripting due to insufficient escaping and sanitization of the site_url parameter found in the ~/assets/misc/fallback-page.php file w…

  7. 7.5CVE-2022-0651ExploitEPSS 32%

    The WP Statistics WordPress plugin is vulnerable to SQL Injection due to insufficient escaping and parameterization of the current_page_type parameter found in the ~/includes/class-wp-statistics-hits.php file which allows attackers without…

  8. 8.8CVE-2022-24707ExploitEPSS 7.2%

    Anuko Time Tracker is an open source, web-based time tracking application written in PHP. UNION SQL injection and time-based blind injection vulnerabilities existed in Time Tracker Puncher plugin in versions of anuko timetracker prior to 1…

  9. 9.8CVE-2022-25082ExploitEPSS 14%

    TOTOLink A950RG V5.9c.4050_B20190424 and V4.1.2cu.5204_B20210112 were discovered to contain a command injection vulnerability in the "Main" function. This vulnerability allows attackers to execute arbitrary commands via the QUERY_STRING pa…

  10. 9.8CVE-2021-44567ExploitEPSS 23%

    An unauthenticated SQL Injection vulnerability exists in RosarioSIS before 7.6.1 via the votes parameter in ProgramFunctions/PortalPollsNotes.fnc.php.

  11. 7.5CVE-2020-27467ExploitEPSS 15%

    A Directory Traversal vulnerability exits in Processwire CMS before 2.7.1 via the download parameter to index.php.

  12. 7.2CVE-2022-21705ExploitEPSS 8.6%

    Octobercms is a self-hosted CMS platform based on the Laravel PHP Framework. In affected versions user input was not properly sanitized before rendering. An authenticated user with the permissions to create, modify and delete website pages…

  13. 6.1CVE-2022-0692ExploitEPSS 3.4%

    Open Redirect on Rudloff/alltube in Packagist rudloff/alltube prior to 3.0.1.

  14. 6.1CVE-2022-0288ExploitEPSS 2.1%

    The Ad Inserter WordPress plugin before 2.7.10, Ad Inserter Pro WordPress plugin before 2.7.10 do not sanitise and escape the html_element_selection parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripti…

  15. 6.1CVE-2022-0234ExploitEPSS 1.8%

    The WOOCS WordPress plugin before 1.3.7.5 does not sanitise and escape the woocs_in_order_currency parameter of the woocs_get_products_price_html AJAX action (available to both unauthenticated and authenticated users) before outputting it …

  16. 7.2CVE-2022-0228ExploitEPSS 5.3%

    The Popup Builder WordPress plugin before 4.0.7 does not validate and properly escape the orderby and order parameters before using them in a SQL statement in the admin dashboard, which could allow high privilege users to perform SQL injec…

  17. 6.1CVE-2021-25099ExploitEPSS 2.1%

    The GiveWP WordPress plugin before 2.17.3 does not sanitise and escape the form_id parameter before outputting it back in the response of an unauthenticated request via the give_checkout_login AJAX action, leading to a Reflected Cross-Site…

  18. 8.8CVE-2021-25082ExploitEPSS 5.2%

    The Popup Builder WordPress plugin before 4.0.7 does not validate and sanitise the sgpb_type parameter before using it in a require statement, leading to a Local File Inclusion issue. Furthermore, since the beginning of the string can be c…

  19. 3.5CVE-2021-25075ExploitEPSS 1.4%

    The Duplicate Page or Post WordPress plugin before 1.5.1 does not have any authorisation and has a flawed CSRF check in the wpdevart_duplicate_post_parametrs_save_in_db AJAX action, allowing any authenticated users, such as subscriber to c…

  20. 6.1CVE-2021-25055ExploitEPSS 2.0%

    The FeedWordPress plugin before 2022.0123 is affected by a Reflected Cross-Site Scripting (XSS) within the "visibility" parameter.

  21. 6.1CVE-2022-0678ExploitEPSS 2.3%

    Cross-site Scripting (XSS) - Reflected in Packagist microweber/microweber prior to 1.2.11.

  22. 8.8CVE-2022-23642ExploitEPSS 74%

    Sourcegraph is a code search and navigation engine. Sourcegraph prior to version 3.37 is vulnerable to remote code execution in the `gitserver` service. The service acts as a git exec proxy, and fails to properly restrict calling `git conf…

  23. 10.0CVE-2022-0543KEVExploitEPSS 99.3%

    It was discovered, that redis, a persistent key-value database, due to a packaging issue, is prone to a (Debian-specific) Lua sandbox escape, which could result in remote code execution.

  24. 6.1CVE-2022-25323ExploitEPSS 3.2%

    ZEROF Web Server 2.0 allows /admin.back XSS.

  25. 9.8CVE-2022-25322ExploitEPSS 9.6%

    ZEROF Web Server 2.0 allows /HandleEvent SQL Injection.

  26. 7.5CVE-2022-0666ExploitEPSS 44%

    CRLF Injection leads to Stack Trace Exposure due to lack of filtering at https://demo.microweber.org/ in Packagist microweber/microweber prior to 1.2.11.

  27. 7.5CVE-2022-0660ExploitEPSS 6.9%

    Generation of Error Message Containing Sensitive Information in Packagist microweber/microweber prior to 1.2.11.

  28. 9.8CVE-2021-45382KEVExploitEPSS 98%

    A Remote Command Execution (RCE) vulnerability exists in all series H/W revisions D-link DIR-810L, DIR-820L/LW, DIR-826L, DIR-830L, and DIR-836L routers via the DDNS function in ncc2 binary file. Note: DIR-810L, DIR-820L, DIR-830L, DIR-826…

  29. 9.8CVE-2021-44868ExploitEPSS 1.4%

    A problem was found in ming-soft MCMS v5.1. There is a sql injection vulnerability in /ms/cms/content/list.do

  30. 7.8CVE-2021-3560KEVExploitEPSS 22%

    It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privileges of the requestor to the root user. This flaw could be used by an unprivileged local attacker to, for example, creat…

  31. 9.8CVE-2022-24086KEVExploitEPSS 99.1%

    Adobe Commerce versions 2.4.3-p1 (and earlier) and 2.3.7-p2 (and earlier) are affected by an improper input validation vulnerability during the checkout process. Exploitation of this issue does not require user interaction and could result…

  32. 8.8CVE-2022-25241ExploitEPSS 3.3%

    In FileCloud before 21.3, the CSV user import functionality is vulnerable to Cross-Site Request Forgery (CSRF).

  33. 7.5CVE-2021-35380ExploitEPSS 37%

    A Directory Traversal vulnerability exists in Solari di Udine TermTalk Server (TTServer) 3.24.0.2, which lets an unauthenticated malicious user gain access to the files on the remote system by gaining access to the relative path of the fil…

  34. 6.1CVE-2022-0597ExploitEPSS 2.6%

    Open Redirect in Packagist microweber/microweber prior to 1.2.11.

  35. 7.5CVE-2021-43734ExploitEPSS 10%

    kkFileview v4.0.0 has arbitrary file read through a directory traversal vulnerability which may lead to sensitive file leak on related host.

  36. 7.5CVE-2021-46371ExploitEPSS 4.4%

    antd-admin 5.5.0 is affected by an incorrect access control vulnerability. Unauthorized access to some interfaces in the foreground leads to leakage of sensitive information.

  37. 9.8CVE-2021-45420ExploitEPSS 18%

    Emerson Dixell XWEB-500 products are affected by arbitrary file write vulnerability in /cgi-bin/logo_extra_upload.cgi, /cgi-bin/cal_save.cgi, and /cgi-bin/lo_utils.cgi. An attacker will be able to write any file on the target system withou…

  38. 6.1CVE-2022-0212ExploitEPSS 2.3%

    The SpiderCalendar WordPress plugin through 1.5.65 does not sanitise and escape the callback parameter before outputting it back in the page via the window AJAX action (available to both unauthenticated and authenticated users), leading to…

  39. 6.1CVE-2022-0208ExploitEPSS 2.0%

    The MapPress Maps for WordPress plugin before 2.73.4 does not sanitise and escape the mapid parameter before outputting it back in the "Bad mapid" error message, leading to a Reflected Cross-Site Scripting

  40. 6.1CVE-2022-0206ExploitEPSS 1.4%

    The NewStatPress WordPress plugin before 1.3.6 does not properly escape the whatX parameters before outputting them back in attributes, leading to Reflected Cross-Site Scripting issues

  41. 6.1CVE-2022-0201ExploitEPSS 3.4%

    The Permalink Manager Lite WordPress plugin before 2.2.15 and Permalink Manager Pro WordPress plugin before 2.2.15 do not sanitise and escape query parameters before outputting them back in the debug page, leading to a Reflected Cross-Site…

  42. 5.3CVE-2022-0188ExploitEPSS 2.3%

    The CMP WordPress plugin before 4.0.19 allows any user, even not logged in, to arbitrarily change the coming soon page layout.

  43. 6.1CVE-2021-25033ExploitEPSS 2.3%

    The WordPress Newsletter Plugin WordPress plugin before 1.6.5 does not validate the to parameter before redirecting the user to its given value, leading to an open redirect issue

  44. 4.8CVE-2021-24904ExploitEPSS 5.1%

    The Mortgage Calculators WP WordPress plugin before 1.56 does not implement any sanitisation on the color setting of the background of a calculator, which could allow high privilege users to perform Stored Cross-Site Scripting attacks even…

  45. 9.8CVE-2022-24112KEVExploitEPSS 96%

    An attacker can abuse the batch-requests plugin to send requests to bypass the IP restriction of Admin API. A default configuration of Apache APISIX (with default API key) is vulnerable to remote code execution. When the admin key was chan…

  46. 9.1CVE-2021-44521ExploitEPSS 59%

    When running Apache Cassandra with the following configuration: enable_user_defined_functions: true enable_scripted_user_defined_functions: true enable_user_defined_functions_threads: false it is possible for an attacker to execute arbitra…

  47. 7.2CVE-2022-0557ExploitEPSS 51%

    OS Command Injection in Packagist microweber/microweber prior to 1.2.11.

  48. 7.3CVE-2022-20707ExploitEPSS 75%

    Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute arbitrary commands Bypass authentication a…

  49. 9.8CVE-2022-20705ExploitEPSS 80%

    Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute arbitrary commands Bypass authentication a…

  50. 9.8CVE-2022-20699KEVExploitEPSS 72%

    Multiple vulnerabilities in Cisco Small Business RV160, RV260, RV340, and RV345 Series Routers could allow an attacker to do any of the following: Execute arbitrary code Elevate privileges Execute arbitrary commands Bypass authentication a…