cve.bz

Matching records, newest first, page 84

Filter
  1. 6.5CVE-2021-24997ExploitEPSS 2.8%

    The WP Guppy WordPress plugin before 1.3 does not have any authorisation in some of the REST API endpoints, allowing any user to call them and could lead to sensitive information disclosure, such as usernames and chats between users, as we…

  2. 6.1CVE-2021-24979ExploitEPSS 1.7%

    The Paid Memberships Pro WordPress plugin before 2.6.6 does not escape the s parameter before outputting it back in an attribute in an admin page, leading to a Reflected Cross-Site Scripting

  3. 9.8CVE-2021-45511ExploitEPSS 19%

    Certain NETGEAR devices are affected by authentication bypass. This affects AC2100 before 2021-08-27, AC2400 before 2021-08-27, AC2600 before 2021-08-27, D7000 before 2021-08-27, R6220 before 2021-08-27, R6230 before 2021-08-27, R6260 befo…

  4. 9.8CVE-2020-20601ExploitEPSS 7.4%

    An issue in ThinkCMF X2.2.2 and below allows attackers to execute arbitrary code via a crafted packet.

  5. 9.9CVE-2021-21881ExploitEPSS 37%

    An OS command injection vulnerability exists in the Web Manager Wireless Network Scanner functionality of Lantronix PremierWave 2050 8.9.0.0R4. A specially-crafted HTTP request can lead to command execution. An attacker can make an authent…

  6. 7.5CVE-2021-24981ExploitEPSS 2.3%

    The Directorist WordPress plugin before 7.0.6.2 was vulnerable to Cross-Site Request Forgery to Remote File Upload leading to arbitrary PHP shell uploads in the wp-content/plugins directory.

  7. 6.1CVE-2021-24956ExploitEPSS 1.5%

    The Blog2Social: Social Media Auto Post & Scheduler WordPress plugin before 6.8.7 does not sanitise and escape the b2sShowByDate parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting issue

  8. 9.8CVE-2021-24849ExploitEPSS 8.4%

    The wcfm_ajax_controller AJAX action of the WCFM Marketplace WordPress plugin before 3.4.12, available to unauthenticated and authenticated user, does not properly sanitise multiple parameters before using them in SQL statements, leading t…

  9. 8.8CVE-2021-24750ExploitEPSS 38%

    The WP Visitor Statistics (Real Time Traffic) WordPress plugin before 4.8 does not properly sanitise and escape the refUrl in the refDetails AJAX action, available to any authenticated user, which could allow users with a role as low as su…

  10. 6.1CVE-2021-44916ExploitEPSS 3.7%

    Opmantek Open-AudIT Community 4.2.0 (Fixed in 4.3.0) is affected by a Cross Site Scripting (XSS) vulnerability. If a bad value is passed to the routine via a URL, malicious JavaScript code can be executed in the victim's browser.

  11. 9.8CVE-2021-44790ExploitEPSS 97%

    A carefully crafted request body can cause a buffer overflow in the mod_lua multipart parser (r:parsebody() called from Lua scripts). The Apache httpd team is not aware of an exploit for the vulnerabilty though it might be possible to craf…

  12. 7.5CVE-2021-22054KEVExploitEPSS 99.6%

    VMware Workspace ONE UEM console 20.0.8 prior to 20.0.8.37, 20.11.0 prior to 20.11.0.40, 21.2.0 prior to 21.2.0.27, and 21.5.0 prior to 21.5.0.37 contain an SSRF vulnerability. This issue may allow a malicious actor with network access to …

  13. 9.8CVE-2021-45092ExploitEPSS 41%

    Thinfinity VirtualUI before 3.0 has functionality in /lab.html reachable by default that could allow IFRAME injection via the vpath parameter.

  14. 7.7CVE-2021-43831ExploitEPSS 3.8%

    Gradio is an open source framework for building interactive machine learning models and demos. In versions prior to 2.5.0 there is a vulnerability that affects anyone who creates and publicly shares Gradio interfaces. File paths are not re…

  15. 5.3CVE-2021-27858ExploitEPSS 2.8%

    A missing authorization vulnerability in the web management interface of FatPipe WARP, IPVPN, and MPVPN software prior to versions 10.1.2r60p91 and 10.2.2r42 allows a remote attacker to access at least the URL "/fpui/jsp/index.jsp" leading…

  16. 9.8CVE-2021-27856ExploitEPSS 5.5%

    FatPipe WARP, IPVPN, and MPVPN software prior to versions 10.1.2r60p91 and 10.2.2r42 includes an account named "cmuser" that has administrative privileges and no password. Older versions of FatPipe software may also be vulnerable. The FatP…

  17. 9.8CVE-2021-36888ExploitEPSS 6.5%

    Unauthenticated Arbitrary Options Update vulnerability leading to full website compromise discovered in Image Hover Effects Ultimate (versions <= 9.6.1) WordPress plugin.

  18. 9.8CVE-2021-44655ExploitEPSS 6.0%

    Online Pre-owned/Used Car Showroom Management System 1.0 contains a SQL injection authentication bypass vulnerability. Admin panel authentication can be bypassed due to SQL injection vulnerability in the login form allowing attacker to get…

  19. 9.8CVE-2021-44653ExploitEPSS 6.0%

    Online Magazine Management System 1.0 contains a SQL injection authentication bypass vulnerability. The Admin panel authentication can be bypassed due to SQL injection vulnerability in the login form allowing attacker to gain access as adm…

  20. 7.5CVE-2021-45043ExploitEPSS 33%

    HD-Network Real-time Monitoring System 2.0 allows ../ directory traversal to read /etc/shadow via the /language/lang s_Language parameter.

  21. 7.8CVE-2021-43326ExploitEPSS 1.2%

    Automox Agent before 32 on Windows incorrectly sets permissions on a temporary directory.

  22. 6.1CVE-2021-36450ExploitEPSS 64%

    Verint Workforce Optimization (WFO) 15.2.8.10048 allows XSS via the control/my_notifications NEWUINAV parameter.

  23. 9.0CVE-2021-45046KEVExploitEPSS >99.9%

    It was found that the fix to address CVE-2021-44228 in Apache Log4j 2.15.0 was incomplete in certain non-default configurations. This could allows attackers with control over Thread Context Map (MDC) input data when the logging configurati…

  24. 8.1CVE-2021-4073ExploitEPSS 6.8%

    The RegistrationMagic WordPress plugin made it possible for unauthenticated users to log in as any site user, including administrators, if they knew a valid username on the site due to missing identity validation in the social login functi…

  25. 6.1CVE-2021-42063ExploitEPSS 23%

    A security vulnerability has been discovered in the SAP Knowledge Warehouse - versions 7.30, 7.31, 7.40, 7.50. The usage of one SAP KW component within a Web browser enables unauthorized attackers to conduct XSS attacks, which might lead t…

  26. 7.5CVE-2021-39312ExploitEPSS 78%

    The True Ranker plugin <= 2.2.2 for WordPress allows arbitrary files, including sensitive configuration files such as wp-config.php, to be accessed via the src parameter found in the ~/admin/vendor/datatables/examples/resources/examples.ph…

  27. 6.1CVE-2021-3831ExploitEPSS 1.8%

    gnuboard5 is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

  28. 7.2CVE-2021-24970ExploitEPSS 5.0%

    The All-in-One Video Gallery WordPress plugin before 2.5.0 does not sanitise and validate the tab parameter before using it in a require statement in the admin dashboard, leading to a Local File Inclusion issue

  29. 9.8CVE-2021-24946ExploitEPSS 73%

    The Modern Events Calendar Lite WordPress plugin before 6.1.5 does not sanitise and escape the time parameter before using it in a SQL statement in the mec_load_single_page AJAX action, available to unauthenticated users, leading to an una…

  30. 9.8CVE-2021-44152ExploitEPSS 59%

    An issue was discovered in Reprise RLM 14.2. Because /goform/change_password_process does not verify authentication or authorization, an unauthenticated user can change the password of any existing user. This allows an attacker to change t…

  31. 7.5CVE-2021-40856ExploitEPSS 50%

    Auerswald COMfortel 1400 IP and 2600 IP before 2.8G devices allow Authentication Bypass via the /about/../ substring.

  32. 5.3CVE-2021-44848ExploitEPSS 23%

    In Cibele Thinfinity VirtualUI before 3.0, /changePassword returns different responses for invalid authentication requests depending on whether the username exists.

  33. 9.8CVE-2021-44515KEVExploitEPSS 99.8%

    Zoho ManageEngine Desktop Central is vulnerable to authentication bypass, leading to remote code execution on the server, as exploited in the wild in December 2021. For Enterprise builds 10.1.2127.17 and earlier, upgrade to 10.1.2127.18. F…

  34. 10.0CVE-2021-44228KEVExploitEPSS >99.9%

    Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoin…

  35. 6.1CVE-2021-20137ExploitEPSS 2.3%

    A reflected cross-site scripting vulnerability exists in the url parameter of the /cgi-bin/luci/site_access/ page on the Gryphon Tower router's web interface. An attacker could exploit this issue by tricking a user into following a special…

  36. 9.8CVE-2021-3817ExploitEPSS 38%

    wbce_cms is vulnerable to Improper Neutralization of Special Elements used in an SQL Command

  37. 9.8CVE-2021-44529KEVExploitEPSS 99.1%

    A code injection vulnerability in the Ivanti EPM Cloud Services Appliance (CSA) allows an unauthenticated user to execute arbitrary code with limited permissions (nobody).

  38. 8.8CVE-2021-20039ExploitEPSS 79%

    Improper neutralization of special elements in the SMA100 management interface '/cgi-bin/viewcert' POST http method allows a remote authenticated attacker to inject arbitrary commands as a 'nobody' user. This vulnerability affected SMA 200…

  39. 9.8CVE-2021-20038KEVExploitEPSS >99.9%

    A Stack-based buffer overflow vulnerability in SMA100 Apache httpd server's mod_cgi module environment variables allows a remote unauthenticated attacker to potentially execute code as a 'nobody' user in the appliance. This vulnerability a…

  40. 6.1CVE-2021-43810ExploitEPSS 5.1%

    Admidio is a free open source user management system for websites of organizations and groups. A cross-site scripting vulnerability is present in Admidio prior to version 4.0.12. The Reflected XSS vulnerability occurs because redirect.php …

  41. 6.1CVE-2021-42567ExploitEPSS 8.2%

    Apereo CAS through 6.4.1 allows XSS via POST requests sent to the REST API endpoints.

  42. 9.8CVE-2021-38759ExploitEPSS 16%

    Raspberry Pi OS through 5.10 has the raspberry default password for the pi account. If not changed, attackers can gain administrator privileges.

  43. 7.5CVE-2021-43798KEVExploitEPSS 89%

    Grafana is an open-source platform for monitoring and observability. Grafana versions 8.0.0-beta1 through 8.3.0 (except for patched versions) iss vulnerable to directory traversal, allowing access to local files. The vulnerable URL path is…

  44. 9.8CVE-2021-40859ExploitEPSS 72%

    Backdoors were discovered in Auerswald COMpact 5500R 7.8A and 8.0B devices, that allow attackers with access to the web based management application full administrative access to the device.

  45. 9.8CVE-2021-43936ExploitEPSS 36%

    The software allows the attacker to upload or transfer files of dangerous types to the WebHMI portal, that may be automatically processed within the product's environment or lead to arbitrary code execution.

  46. 9.8CVE-2021-24943ExploitEPSS 7.3%

    The Registrations for the Events Calendar WordPress plugin before 2.7.6 does not sanitise and escape the event_id in the rtec_send_unregister_link AJAX action (available to both unauthenticated and authenticated users) before using it in a…

  47. 9.8CVE-2021-24931ExploitEPSS 79%

    The Secure Copy Content Protection and Content Locking WordPress plugin before 2.8.2 does not escape the sccp_id parameter of the ays_sccp_results_export_file AJAX action (available to both unauthenticated and authenticated users) before u…

  48. 7.5CVE-2021-24917ExploitEPSS 72%

    The WPS Hide Login WordPress plugin before 1.9.1 has a bug which allows to get the secret login page by setting a random referer string and making a request to /wp-admin/options.php as an unauthenticated user.

  49. 9.8CVE-2021-23758KEVExploitEPSS 83%

    All versions of package ajaxpro.2 are vulnerable to Deserialization of Untrusted Data due to the possibility of deserialization of arbitrary .NET classes, which can be abused to gain remote code execution.

  50. 9.8CVE-2021-44427ExploitEPSS 51%

    An unauthenticated SQL Injection vulnerability in Rosario Student Information System (aka rosariosis) before 8.1.1 allows remote attackers to execute PostgreSQL statements (e.g., SELECT, INSERT, UPDATE, and DELETE) through /Side.php via th…