cve.bz

Matching records, newest first, page 86

Filter
  1. 8.2CVE-2021-39341ExploitEPSS 22%

    The OptinMonster WordPress plugin is vulnerable to sensitive information disclosure and unauthorized setting updates due to insufficient authorization validation via the logged_in_or_has_api_key function in the ~/OMAPI/RestApi.php file tha…

  2. 7.5CVE-2015-20067ExploitEPSS 7.7%

    The WP Attachment Export WordPress plugin before 0.2.4 does not have proper access controls, allowing unauthenticated users to download the XML data that holds all the details of attachments/posts on a Wordpress

  3. 4.8CVE-2021-3441ExploitEPSS 1.7%

    A potential security vulnerability has been identified for the HP OfficeJet 7110 Wide Format ePrinter that enables Cross-Site Scripting (XSS).

  4. 6.1CVE-2021-31862ExploitEPSS 4.0%

    SysAid 20.4.74 allows XSS via the KeepAlive.jsp stamp parameter without any authentication.

  5. 9.8CVE-2021-20837ExploitEPSS 88%

    Movable Type 7 r.5002 and earlier (Movable Type 7 Series), Movable Type 6.8.2 and earlier (Movable Type 6 Series), Movable Type Advanced 7 r.5002 and earlier (Movable Type Advanced 7 Series), Movable Type Advanced 6.8.2 and earlier (Movabl…

  6. 9.8CVE-2021-38294ExploitEPSS 84%

    A Command Injection vulnerability exists in the getTopologyHistory service of the Apache Storm 2.x prior to 2.2.1 and Apache Storm 1.x prior to 1.2.4. A specially crafted thrift request to the Nimbus server allows Remote Code Execution (RC…

  7. 9.8CVE-2021-42258KEVExploitEPSS 75%

    BQE BillQuick Web Suite 2018 through 2021 before 22.0.9.1 allows SQL injection for unauthenticated remote code execution, as exploited in the wild in October 2021 for ransomware installation. SQL injection can, for example, use the txtID (…

  8. 8.8CVE-2021-42840ExploitEPSS 59%

    SuiteCRM before 7.11.19 allows remote code execution via the system settings Log File Name setting. In certain circumstances involving admin account takeover, logger_file_name can refer to an attacker-controlled PHP file under the web root…

  9. 6.1CVE-2021-31682ExploitEPSS 11%

    The login portal for the Automated Logic WebCTRL/WebCTRL OEM web application contains a vulnerability that allows for reflected XSS attacks due to the operatorlocale GET parameter not being sanitized. This issue impacts versions 6.5 and be…

  10. 7.2CVE-2021-39352ExploitEPSS 56%

    The Catch Themes Demo Import WordPress plugin is vulnerable to arbitrary file uploads via the import functionality found in the ~/inc/CatchThemesDemoImport.php file, in versions up to and including 1.7, due to insufficient file type valida…

  11. 4.3CVE-2021-21745ExploitEPSS 56%

    ZTE MF971R product has a Referer authentication bypass vulnerability. Without CSRF verification, an attackercould use this vulnerability to perform illegal authorization operations by sending a request to the user to click.

  12. 6.1CVE-2021-35323ExploitEPSS 5.1%

    Cross Site Scripting (XSS) vulnerability exists in bludit 3-13-1 via the username in admin/login.

  13. 6.1CVE-2021-42566ExploitEPSS 5.8%

    myfactory.FMS before 7.1-912 allows XSS via the Error parameter.

  14. 6.1CVE-2021-42565ExploitEPSS 5.8%

    myfactory.FMS before 7.1-912 allows XSS via the UID parameter.

  15. 6.1CVE-2018-16061ExploitEPSS 4.0%

    Mitsubishi Electric Europe B.V. SmartRTU devices allow XSS via the username parameter or PATH_INFO to login.php.

  16. 7.5CVE-2018-16060ExploitEPSS 20%

    Mitsubishi Electric Europe B.V. SmartRTU devices allow remote attackers to obtain sensitive information (directory listing and source code) via a direct request to the /web URI.

  17. 9.8CVE-2021-27561KEVExploitEPSS 84%

    Yealink Device Management (DM) 3.6.0.20 allows command injection as root via the /sm/api/v1/firewall/zone/services URI, without authentication.

  18. 7.5CVE-2021-20124KEVExploitEPSS 96%

    A local file inclusion vulnerability exists in Draytek VigorConnect 1.6.0-B3 in the file download functionality of the WebServlet endpoint. An unauthenticated attacker could leverage this vulnerability to download arbitrary files from the …

  19. 7.5CVE-2021-20123KEVExploitEPSS 90%

    A local file inclusion vulnerability exists in Draytek VigorConnect 1.6.0-B3 in the file download functionality of the DownloadFileServlet endpoint. An unauthenticated attacker could leverage this vulnerability to download arbitrary files …

  20. 7.8CVE-2021-40449KEVExploitEPSS 82%

    Win32k Elevation of Privilege Vulnerability

  21. 6.1CVE-2021-20031ExploitEPSS 13%

    A Host Header Redirection vulnerability in SonicOS potentially allows a remote attacker to redirect firewall management users to arbitrary web domains.

  22. 9.8CVE-2021-42325ExploitEPSS 12%

    Froxlor through 0.10.29.1 allows SQL injection in Database/Manager/DbManagerMySQL.php via a custom DB name.

  23. 9.8CVE-2021-40617ExploitEPSS 5.2%

    An SQL Injection vulnerability exists in openSIS Community Edition version 8.0 via ForgotPassUserName.php.

  24. 6.1CVE-2021-40542ExploitEPSS 3.2%

    Opensis-Classic Version 8.0 is affected by cross-site scripting (XSS). An unauthenticated user can inject and execute JavaScript code through the link_url parameter in Ajax_url_encode.php.

  25. 6.5CVE-2021-29006ExploitEPSS 4.9%

    rConfig 3.9.6 is affected by a Local File Disclosure vulnerability. An authenticated user may successfully download any file on the server.

  26. 6.1CVE-2021-24719ExploitEPSS 3.0%

    The Enfold Enfold WordPress theme before 4.8.4 was vulnerable to Reflected Cross-Site Scripting (XSS). The vulnerability is present on Enfold versions previous than 4.8.4 which use Avia Page Builder.

  27. 4.8CVE-2021-24681ExploitEPSS 0.9%

    The Duplicate Page WordPress plugin through 4.4.2 does not sanitise or escape the Duplicate Post Suffix settings before outputting it, which could allow high privilege users to perform Stored Cross-Site Scripting attacks even when the unfi…

  28. 6.1CVE-2021-24563ExploitEPSS 26%

    The Frontend Uploader WordPress plugin through 1.3.2 does not prevent HTML files from being uploaded via its form, allowing unauthenticated user to upload a malicious HTML file containing JavaScript for example, which will be triggered whe…

  29. 9.8CVE-2021-42071ExploitEPSS 70%

    In Visual Tools DVR VX16 4.2.28.0, an unauthenticated attacker can achieve remote command execution via shell metacharacters in the cgi-bin/slogin/login.py User-Agent HTTP header.

  30. 9.8CVE-2021-42013KEVExploitEPSS >99.9%

    It was found that the fix for CVE-2021-41773 in Apache HTTP Server 2.4.50 was insufficient. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like directives. If files outside of…

  31. 7.5CVE-2021-40978ExploitEPSS 15%

    The mkdocs 1.2.2 built-in dev-server allows directory traversal using the port 8000, enabling remote exploitation to obtain :sensitive information. NOTE: the vendor has disputed this as described in https://github.com/mkdocs/mkdocs/issues/…

  32. 9.8CVE-2021-32172ExploitEPSS 66%

    Maian Cart v3.8 contains a preauthorization remote code execution (RCE) exploit via a broken access control issue in the Elfinder plugin.

  33. 5.4CVE-2021-42053ExploitEPSS 2.5%

    The Unicorn framework through 0.35.3 for Django allows XSS via component.name.

  34. 6.1CVE-2021-39350ExploitEPSS 2.2%

    The FV Flowplayer Video Player WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the player_id parameter found in the ~/view/stats.php file which allows attackers to inject arbitrary web scripts, in versions 7.5.0.727 - …

  35. 7.3CVE-2021-39226KEVExploitEPSS >99.9%

    Grafana is an open source data visualization platform. In affected versions unauthenticated and authenticated users are able to view the snapshot with the lowest database key by accessing the literal paths: /dashboard/snapshot/:key, or /ap…

  36. 9.8CVE-2021-41773KEVExploitEPSS >99.9%

    A flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like directives. If files outside of these…

  37. 7.5CVE-2021-39433ExploitEPSS 8.7%

    A local file inclusion (LFI) vulnerability exists in version BIQS IT Biqs-drive v1.83 and below when sending a specific payload as the file parameter to download/index.php. This allows the attacker to read arbitrary files from the server w…

  38. 6.1CVE-2021-41878ExploitEPSS 9.9%

    A reflected cross-site scripting (XSS) vulnerability exists in the i-Panel Administration System Version 2.0 that enables a remote attacker to execute arbitrary JavaScript code in the browser-based web console and it is possible to insert …

  39. 7.8CVE-2021-22557ExploitEPSS 1.6%

    SLO generator allows for loading of YAML files that if crafted in a specific format can allow for code execution within the context of the SLO Generator. We recommend upgrading SLO Generator past https://github.com/google/slo-generator/pul…

  40. 9.8CVE-2021-40323ExploitEPSS 87%

    Cobbler before 3.3.0 allows log poisoning, and resultant Remote Code Execution, via an XMLRPC method that logs to the logfile for template injection.

  41. 6.1CVE-2021-41467ExploitEPSS 3.6%

    Cross-site scripting (XSS) vulnerability in application/controllers/dropbox.php in JustWriting 1.0.0 and below allow remote attackers to inject arbitrary web script or HTML via the challenge parameter.

  42. 6.1CVE-2021-40973ExploitEPSS 2.2%

    Cross-site scripting (XSS) vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below allow remote attackers to inject arbitrary web script or HTML via the lastname parameter.

  43. 6.1CVE-2021-40972ExploitEPSS 2.2%

    Cross-site scripting (XSS) vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below allow remote attackers to inject arbitrary web script or HTML via the mail parameter.

  44. 6.1CVE-2021-40971ExploitEPSS 2.2%

    Cross-site scripting (XSS) vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below allow remote attackers to inject arbitrary web script or HTML via the newpassword1 parameter.

  45. 6.1CVE-2021-40970ExploitEPSS 2.2%

    Cross-site scripting (XSS) vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below allow remote attackers to inject arbitrary web script or HTML via the username parameter.

  46. 6.1CVE-2021-40969ExploitEPSS 2.2%

    Cross-site scripting (XSS) vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below allow remote attackers to inject arbitrary web script or HTML via the firstname parameter.

  47. 6.1CVE-2021-40968ExploitEPSS 2.2%

    Cross-site scripting (XSS) vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below allow remote attackers to inject arbitrary web script or HTML via the newpassword2 parameter.

  48. 9.8CVE-2021-41649ExploitEPSS 52%

    An un-authenticated SQL Injection exists in PuneethReddyHC online-shopping-system-advanced through the /homeaction.php cat_id parameter. Using a post request does not sanitize the user input.

  49. 7.5CVE-2021-41648ExploitEPSS 10%

    An un-authenticated SQL Injection exists in PuneethReddyHC online-shopping-system-advanced through the /action.php prId parameter. Using a post request does not sanitize the user input.

  50. 9.8CVE-2021-40960ExploitEPSS 9.9%

    Galera WebTemplate 1.0 is affected by a directory traversal vulnerability that could reveal information from /etc/passwd and /etc/shadow.