cve.bz

Matching records, newest first, page 82

Filter
  1. 5.4CVE-2022-0020ExploitEPSS 1.7%

    A stored cross-site scripting (XSS) vulnerability in Palo Alto Network Cortex XSOAR web interface enables an authenticated network-based attacker to store a persistent javascript payload that will perform arbitrary actions in the Cortex XS…

  2. 5.3CVE-2021-45901ExploitEPSS 14%

    The password-reset form in ServiceNow Orlando provides different responses to invalid authentication attempts depending on whether the username exists.

  3. 10.0CVE-2022-22536KEVExploitEPSS 98%

    SAP NetWeaver Application Server ABAP, SAP NetWeaver Application Server Java, ABAP Platform, SAP Content Server 7.53 and SAP Web Dispatcher are vulnerable for request smuggling and request concatenation. An unauthenticated attacker can pre…

  4. 7.8CVE-2022-21999KEVExploitEPSS 41%

    Windows Print Spooler Elevation of Privilege Vulnerability

  5. 6.1CVE-2022-23102ExploitEPSS 4.7%

    A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V2.0). Affected products contain an open redirect vulnerability. An attacker could trick a valid authenticated user to the device into clicking a malicious…

  6. 8.8CVE-2021-46360ExploitEPSS 9.2%

    Authenticated remote code execution (RCE) in Composr-CMS 10.0.39 and earlier allows remote attackers to execute arbitrary code via uploading a PHP shell through /adminzone/index.php?page=admin-commandr.

  7. 7.5CVE-2021-46354ExploitEPSS 13%

    Thinfinity VirtualUI 2.1.28.0, 2.1.32.1 and 2.5.26.2, fixed in version 3.0 is affected by an information disclosure vulnerability in the parameter "Addr" in cmd site. The ability to send requests to other systems can allow the vulnerable s…

  8. 6.1CVE-2022-24682KEVExploitEPSS 31%

    An issue was discovered in the Calendar feature in Zimbra Collaboration Suite 8.8.x before 8.8.15 patch 30 (update 1), as exploited in the wild starting in December 2021. An attacker could place HTML containing executable JavaScript inside…

  9. 8.8CVE-2022-23626ExploitEPSS 9.9%

    m1k1o/blog is a lightweight self-hosted facebook-styled PHP blog. Errors from functions `imagecreatefrom*` and `image*` have not been checked properly. Although PHP issued warnings and the upload function returned `false`, the original fil…

  10. 6.1CVE-2021-45328ExploitEPSS 1.0%

    Gitea before 1.4.3 is affected by URL Redirection to Untrusted Site ('Open Redirect') via internal URLs.

  11. 6.1CVE-2022-0149ExploitEPSS 2.3%

    The WooCommerce Stored Exporter WordPress plugin before 2.7.1 was affected by a Reflected Cross-Site Scripting (XSS) vulnerability in the woo_ce admin page.

  12. 5.4CVE-2022-0148ExploitEPSS 1.6%

    The All-in-one Floating Contact Form, Call, Chat, and 50+ Social Icon Tabs WordPress plugin before 2.0.4 was vulnerable to reflected XSS on the my-sticky-elements-leads admin page.

  13. 9.8CVE-2021-25114ExploitEPSS 82%

    The Paid Memberships Pro WordPress plugin before 2.6.7 does not escape the discount_code in one of its REST route (available to unauthenticated users) before using it in a SQL statement, leading to a SQL injection

  14. 6.5CVE-2021-24947ExploitEPSS 3.1%

    The RVM WordPress plugin before 6.4.2 does not have proper authorisation, CSRF checks and validation of the rvm_upload_regions_file_path parameter in the rvm_import_regions AJAX action, allowing any authenticated user, such as subscriber, …

  15. 6.1CVE-2021-24878ExploitEPSS 1.3%

    The SupportCandy WordPress plugin before 2.2.7 does not sanitise and escape the query string before outputting it back in pages with the [wpsc_create_ticket] shortcode embed, leading to a Reflected Cross-Site Scripting issue

  16. 7.5CVE-2022-22833ExploitEPSS 12%

    An issue was discovered in Servisnet Tessa 0.0.2. An attacker can obtain sensitive information via a /js/app.js request.

  17. 9.8CVE-2022-22832ExploitEPSS 14%

    An issue was discovered in Servisnet Tessa 0.0.2. Authorization data is available via an unauthenticated /data-service/users/ request.

  18. 9.8CVE-2022-22831ExploitEPSS 11%

    An issue was discovered in Servisnet Tessa 0.0.2. An attacker can add a new sysadmin user via a manipulation of the Authorization HTTP header.

  19. 6.1CVE-2022-0437ExploitEPSS 15%

    Cross-site Scripting (XSS) - DOM in NPM karma prior to 6.3.14.

  20. 6.1CVE-2022-0381ExploitEPSS 4.0%

    The Embed Swagger WordPress plugin is vulnerable to Reflected Cross-Site Scripting due to insufficient escaping/sanitization and validation via the url parameter found in the ~/swagger-iframe.php file which allows attackers to inject arbit…

  21. 6.1CVE-2022-0218ExploitEPSS 66%

    The WP HTML Mail WordPress plugin is vulnerable to unauthorized access which allows unauthenticated attackers to retrieve and modify theme settings due to a missing capability check on the /themesettings REST-API endpoint found in the ~/in…

  22. 8.2CVE-2022-24129ExploitEPSS 6.1%

    The OIDC OP plugin before 3.0.4 for Shibboleth Identity Provider allows server-side request forgery (SSRF) due to insufficient restriction of the request_uri parameter. This allows attackers to interact with arbitrary third-party HTTP serv…

  23. 9.8CVE-2022-24260ExploitEPSS 50%

    A SQL injection vulnerability in Voipmonitor GUI before v24.96 allows attackers to escalate privileges to the Administrator level.

  24. 8.8CVE-2021-46398ExploitEPSS 6.7%

    A Cross-Site Request Forgery vulnerability exists in Filebrowser < 2.18.0 that allows attackers to create a backdoor user with admin privilege and get access to the filesystem via a malicious HTML webpage that is sent to the victim. An adm…

  25. 6.1CVE-2022-0432ExploitEPSS 4.4%

    Prototype Pollution in GitHub repository mastodon/mastodon prior to 3.5.0.

  26. 6.1CVE-2021-43062ExploitEPSS 13%

    A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiMail version 7.0.1 and 7.0.0, version 6.4.5 and below, version 6.3.7 and below, version 6.0.11 and below allows attacker to execute una…

  27. 9.8CVE-2022-24223ExploitEPSS 62%

    AtomCMS v2.0 was discovered to contain a SQL injection vulnerability via /admin/login.php.

  28. 6.5CVE-2021-44451ExploitEPSS 7.9%

    Apache Superset up to and including 1.3.2 allowed for registered database connections password leak for authenticated users. This information could be accessed in a non-trivial way. Users should upgrade to Apache Superset 1.4.0 or higher.

  29. 9.8CVE-2021-43510ExploitEPSS 7.5%

    SQL Injection vulnerability exists in Sourcecodester Simple Client Management System 1.0 via the username field in login.php.

  30. 6.1CVE-2022-0220ExploitEPSS 2.3%

    The check_privacy_settings AJAX action of the WordPress GDPR WordPress plugin before 1.9.27, available to both unauthenticated and authenticated users, responds with JSON data without an "application/json" content-type. Since an HTML paylo…

  31. 6.1CVE-2021-25085ExploitEPSS 1.7%

    The WOOF WordPress plugin before 1.2.6.3 does not sanitise and escape the woof_redraw_elements before outputing back in an admin page, leading to a Reflected Cross-Site Scripting

  32. 6.1CVE-2021-25063ExploitEPSS 2.1%

    The Skins for Contact Form 7 WordPress plugin before 2.5.1 does not sanitise and escape the tab parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting

  33. 6.1CVE-2021-24934ExploitEPSS 1.4%

    The Visual CSS Style Editor WordPress plugin before 7.5.4 does not sanitise and escape the wyp_page_type parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting issue

  34. 6.1CVE-2021-24926ExploitEPSS 13%

    The Domain Check WordPress plugin before 1.0.17 does not sanitise and escape the domain parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting issue

  35. 9.8CVE-2021-24762ExploitEPSS 87%

    The Perfect Survey WordPress plugin before 1.5.2 does not validate and escape the question_id GET parameter before using it in a SQL statement in the get_question AJAX action, allowing unauthenticated users to perform SQL injection.

  36. 7.5CVE-2022-24266ExploitEPSS 5.7%

    Cuppa CMS v1.0 was discovered to contain a SQL injection vulnerability in /administrator/components/table_manager/ via the order_by parameter.

  37. 7.5CVE-2022-24265ExploitEPSS 6.7%

    Cuppa CMS v1.0 was discovered to contain a SQL injection vulnerability in /administrator/components/menu/ via the path=component/menu/&menu_filter=3 parameter.

  38. 7.5CVE-2022-24264ExploitEPSS 6.7%

    Cuppa CMS v1.0 was discovered to contain a SQL injection vulnerability in /administrator/components/table_manager/ via the search_word parameter.

  39. 9.8CVE-2022-24263ExploitEPSS 8.3%

    Hospital Management System v4.0 was discovered to contain a SQL injection vulnerability in /Hospital-Management-System-master/func.php via the email parameter.

  40. 4.9CVE-2022-23409ExploitEPSS 14%

    The Logs plugin before 3.0.4 for Craft CMS allows remote attackers to read arbitrary files via input to actionStream in Controller.php.

  41. 7.5CVE-2021-34805ExploitEPSS 25%

    An issue was discovered in FAUST iServer before 9.0.019.019.7. For each URL request, it accesses the corresponding .fau file on the operating system without preventing %2e%2e%5c directory traversal.

  42. 7.5CVE-2022-24124ExploitEPSS 55%

    The query API in Casdoor before 1.13.1 has a SQL injection vulnerability related to the field and value parameters, as demonstrated by api/get-organizations.

  43. 7.8CVE-2021-4034KEVExploitEPSS 95%

    A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users according predefined policies. The current ve…

  44. 5.4CVE-2022-0378ExploitEPSS 3.9%

    Cross-site Scripting (XSS) - Reflected in Packagist microweber/microweber prior to 1.2.11.

  45. 9.8CVE-2022-0332ExploitEPSS 32%

    A flaw was found in Moodle in versions 3.11 to 3.11.4. An SQL injection risk was identified in the h5p activity web service responsible for fetching user attempt data.

  46. 9.1CVE-2022-23944ExploitEPSS 79%

    User can access /plugin api without authentication. This issue affected Apache ShenYu 2.4.0 and 2.4.1.

  47. 6.1CVE-2021-25079ExploitEPSS 6.8%

    The Contact Form Entries WordPress plugin before 1.2.4 does not sanitise and escape various parameters, such as form_id, status, end_date, order, orderby and search before outputting them back in the admin page

  48. 6.1CVE-2021-25078ExploitEPSS 2.3%

    The Affiliates Manager WordPress plugin before 2.9.0 does not validate, sanitise and escape the IP address of requests logged by the click tracking feature, allowing unauthenticated attackers to perform Cross-Site Scripting attacks against…

  49. 8.8CVE-2021-25076ExploitEPSS 17%

    The WP User Frontend WordPress plugin before 3.5.26 does not validate and escape the status parameter before using it in a SQL statement in the Subscribers dashboard, leading to an SQL injection. Due to the lack of sanitisation and escapin…

  50. 6.1CVE-2021-25074ExploitEPSS 2.2%

    The WebP Converter for Media WordPress plugin before 4.0.3 contains a file (passthru.php) which does not validate the src parameter before redirecting the user to it, leading to an Open Redirect issue