cve.bz

Matching records, newest first, page 83

Filter
  1. 6.1CVE-2021-25028ExploitEPSS 1.9%

    The Event Tickets WordPress plugin before 5.2.2 does not validate the tribe_tickets_redirect_to parameter before redirecting the user to the given value, leading to an arbitrary redirect issue

  2. 6.1CVE-2021-25008ExploitEPSS 2.3%

    The Code Snippets WordPress plugin before 2.14.3 does not escape the snippets-safe-mode parameter before outputting it back in attributes, leading to a Reflected Cross-Site Scripting issue

  3. 6.1CVE-2021-45380ExploitEPSS 2.5%

    AppCMS 2.0.101 has a XSS injection vulnerability in \templates\m\inc_head.php

  4. 6.1CVE-2022-23808ExploitEPSS 7.9%

    An issue was discovered in phpMyAdmin 5.1 before 5.1.2. An attacker can inject malicious code into aspects of the setup script, which can allow XSS or HTML injection.

  5. 9.8CVE-2022-23366ExploitEPSS 6.8%

    HMS v1.0 was discovered to contain a SQL injection vulnerability via patientlogin.php.

  6. 6.5CVE-2022-22733ExploitEPSS 42%

    Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache ShardingSphere ElasticJob-UI allows an attacker who has guest account to do privilege escalation. This issue affects Apache ShardingSphere ElasticJob-UI Apa…

  7. 7.5CVE-2022-0281ExploitEPSS 11%

    Exposure of Sensitive Information to an Unauthorized Actor in Packagist microweber/microweber prior to 1.2.11.

  8. 7.2CVE-2022-23046ExploitEPSS 25%

    PhpIPAM v1.4.4 allows an authenticated admin user to inject SQL sentences in the "subnet" parameter while searching a subnet via app/admin/routing/edit-bgp-mapping-search.php

  9. 6.1CVE-2021-26247ExploitEPSS 7.5%

    As an unauthenticated remote user, visit "http://<CACTI_SERVER>/auth_changepassword.php?ref=<script>alert(1)</script>" to successfully execute the JavaScript payload present in the "ref" URL parameter.

  10. 7.5CVE-2021-46104ExploitEPSS 4.8%

    An issue was discovered in webp_server_go 0.4.0. There is a directory traversal vulnerability that can read arbitrary file information on the server.

  11. 7.5CVE-2022-21371ExploitEPSS 93%

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Container). Supported versions that are affected are 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows…

  12. 9.8CVE-2021-35587KEVExploitEPSS 96%

    Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: OpenSSO Agent). Supported versions that are affected are 11.1.2.3.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthentica…

  13. 5.4CVE-2021-46005ExploitEPSS 2.9%

    Sourcecodester Car Rental Management System 1.0 is vulnerable to Cross Site Scripting (XSS) via vehicalorcview parameter.

  14. 5.4CVE-2021-25067ExploitEPSS 1.1%

    The Landing Page Builder WordPress plugin before 1.4.9.6 was affected by a reflected XSS in page-builder-add on the ulpb_post admin page.

  15. 5.4CVE-2021-25065ExploitEPSS 1.1%

    The Smash Balloon Social Post Feed WordPress plugin before 4.1.1 was affected by a reflected XSS in custom-facebook-feed in cff-top admin page.

  16. 6.1CVE-2021-24838ExploitEPSS 2.3%

    The AnyComment WordPress plugin before 0.3.5 has an API endpoint which passes user input via the redirect parameter to the wp_redirect() function without being validated first, leading to an Open Redirect issue, which according to the vend…

  17. 9.8CVE-2022-23178ExploitEPSS 75%

    An issue was discovered on Crestron HD-MD4X2-4K-E 1.0.0.2159 devices. When the administrative web interface of the HDMI switcher is accessed unauthenticated, user credentials are disclosed that are valid to authenticate to the web interfac…

  18. 6.1CVE-2021-42551ExploitEPSS 2.7%

    Cross-site Scripting (XSS) vulnerability in the search functionality of AlCoda NetBiblio WebOPAC allows an unauthenticated user to craft a reflected Cross-Site Scripting attack. This issue affects: AlCoda NetBiblio WebOPAC versions prior t…

  19. 6.1CVE-2021-45422ExploitEPSS 3.4%

    Reprise License Manager 14.2 is affected by a reflected cross-site scripting vulnerability in the /goform/activate_process "count" parameter via GET. No authentication is required.

  20. 5.3CVE-2022-23134KEVExploitEPSS 95%

    After the initial setup process, some steps of setup.php file are reachable not only by super-administrators, but by unauthenticated users as well. Malicious actor can pass step checks and potentially change the configuration of Zabbix Fro…

  21. 9.8CVE-2022-23131KEVExploitEPSS 96%

    In the case of instances where the SAML SSO authentication is enabled (non-default), session data can be modified by a malicious actor, because a user login stored in the session was not verified. Malicious unauthenticated actor may exploi…

  22. 5.3CVE-2021-28377ExploitEPSS 8.5%

    ChronoForums 2.0.11 allows av Directory Traversal to read arbitrary files.

  23. 6.1CVE-2022-0087ExploitEPSS 2.8%

    keystone is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

  24. 9.8CVE-2022-21907ExploitEPSS 93%

    HTTP Protocol Stack Remote Code Execution Vulnerability

  25. 7.8CVE-2022-21882KEVExploitEPSS 59%

    Win32k Elevation of Privilege Vulnerability

  26. 8.8CVE-2021-25052ExploitEPSS 3.0%

    The Button Generator WordPress plugin before 2.3.3 within the wow-company admin menu page allows to include() arbitrary file with PHP extension (as well as with data:// or http:// protocols), thus leading to CSRF RCE.

  27. 9.8CVE-2021-25032ExploitEPSS 7.1%

    The PublishPress Capabilities WordPress plugin before 2.3.1, PublishPress Capabilities Pro WordPress plugin before 2.3.1 does not have authorisation and CSRF checks when updating the plugin's settings via the init hook, and does not ensure…

  28. 7.2CVE-2021-24862ExploitEPSS 73%

    The RegistrationMagic WordPress plugin before 5.0.1.6 does not escape user input in its rm_chronos_ajax AJAX action before using it in a SQL statement when duplicating tasks in batches, which could lead to a SQL injection issue

  29. 6.5CVE-2022-22836ExploitEPSS 5.4%

    CoreFTP Server before 727 allows directory traversal (for file creation) by an authenticated attacker via ../ in an HTTP PUT request.

  30. 6.1CVE-2021-44528ExploitEPSS 4.4%

    A open redirect vulnerability exists in Action Pack >= 6.0.0 that could allow an attacker to craft a "X-Forwarded-Host" headers in combination with certain "allowed host" formats can cause the Host Authorization middleware in Action Pack t…

  31. 7.8CVE-2021-43579ExploitEPSS 7.3%

    A stack-based buffer overflow in image_load_bmp() in HTMLDOC <= 1.9.13 results in remote code execution if the victim converts an HTML document linking to a crafted BMP file.

  32. 9.8CVE-2021-42392ExploitEPSS 83%

    The org.h2.util.JdbcUtils.getConnection method of the H2 database takes as parameters the class name of the driver and URL of the database. An attacker may pass a JNDI driver name and a URL leading to a LDAP or RMI servers, causing remote …

  33. 7.5CVE-2022-21661ExploitEPSS 98%

    WordPress is a free and open-source content management system written in PHP and paired with a MariaDB database. Due to improper sanitization in WP_Query, there can be cases where SQL injection is possible through plugins or themes that us…

  34. 4.8CVE-2021-46073ExploitEPSS 2.8%

    A Stored Cross Site Scripting (XSS) vulnerability exists in Sourcecodester Vehicle Service Management System 1.0 via the User List Section in login panel.

  35. 4.8CVE-2021-46072ExploitEPSS 2.8%

    A Stored Cross Site Scripting (XSS) vulnerability exists in Vehicle Service Management System 1.0 via the Service List Section in login panel.

  36. 4.8CVE-2021-46071ExploitEPSS 2.8%

    A Stored Cross Site Scripting (XSS) vulnerability exists in Vehicle Service Management System 1.0 via the Category List Section in login panel.

  37. 4.8CVE-2021-46069ExploitEPSS 2.8%

    A Stored Cross Site Scripting (XSS) vulnerability exists in Vehicle Service Management System 1.0 via the Mechanic List Section in login panel.

  38. 4.8CVE-2021-46068ExploitEPSS 2.8%

    A Stored Cross Site Scripting (XSS) vulnerability exists in Vehicle Service Management System 1.0 via the My Account Section in login panel.

  39. 6.1CVE-2021-31589ExploitEPSS 26%

    A cross-site scripting (XSS) vulnerability has been reported and confirmed for BeyondTrust Secure Remote Access Base Software version 6.0.1 and older, which allows the injection of unauthenticated, specially-crafted web requests without pr…

  40. 9.8CVE-2021-45428ExploitEPSS 57%

    TLR-2005KSH is affected by an incorrect access control vulnerability. THe PUT method is enabled so an attacker can upload arbitrary files including HTML and CGI formats.

  41. 6.1CVE-2021-25016ExploitEPSS 1.8%

    The Chaty WordPress plugin before 2.8.3 and Chaty Pro WordPress plugin before 2.8.2 do not sanitise and escape the search parameter before outputting it back in the admin dashboard, leading to a Reflected Cross-Site Scripting

  42. 4.8CVE-2021-24991ExploitEPSS 1.2%

    The WooCommerce PDF Invoices & Packing Slips WordPress plugin before 2.10.5 does not escape the tab and section parameters before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting in the admin dashboard

  43. 7.2CVE-2021-24786ExploitEPSS 17%

    The Download Monitor WordPress plugin before 4.4.5 does not properly validate and escape the "orderby" GET parameter before using it in a SQL statement when viewing the logs, leading to an SQL Injection issue

  44. 8.0CVE-2021-20167ExploitEPSS 7.0%

    Netgear RAX43 version 1.0.3.96 contains a command injection vulnerability. The readycloud cgi application is vulnerable to command injection in the name parameter.

  45. 9.8CVE-2021-20158ExploitEPSS 9.6%

    Trendnet AC2600 TEW-827DRU version 2.08B01 contains an authentication bypass vulnerability. It is possible for an unauthenticated, malicous actor to force the change of the admin password due to a hidden administrative command.

  46. 5.3CVE-2021-20150ExploitEPSS 40%

    Trendnet AC2600 TEW-827DRU version 2.08B01 improperly discloses information via redirection from the setup wizard. Authentication can be bypassed and a user may view information as Admin by manually browsing to the setup wizard and forcing…

  47. 9.8CVE-2021-45814ExploitEPSS 6.3%

    Nettmp NNT 5.1 is affected by a SQL injection vulnerability. An attacker can bypass authentication and access the panel with an administrative account.

  48. 6.1CVE-2021-45425ExploitEPSS 3.4%

    Reflected Cross Site Scripting (XSS) in SAFARI Montage versions 8.3 and 8.5 allows remote attackers to execute JavaScript codes.

  49. 8.8CVE-2021-43857ExploitEPSS 56%

    Gerapy is a distributed crawler management framework. Gerapy prior to version 0.9.8 is vulnerable to remote code execution, and this issue is patched in version 0.9.8.

  50. 9.8CVE-2021-45232ExploitEPSS 86%

    In Apache APISIX Dashboard before 2.10.1, the Manager API uses two frameworks and introduces framework `droplet` on the basis of framework `gin`, all APIs and authentication middleware are developed based on framework `droplet`, but some A…