cve.bz

Matching records, newest first, page 92

Filter
  1. 6.1CVE-2021-32618ExploitEPSS 2.8%

    The Python "Flask-Security-Too" package is used for adding security features to your Flask application. It is an is an independently maintained version of Flask-Security based on the 3.0.0 version of Flask-Security. All versions of Flask-S…

  2. 6.1CVE-2021-24299ExploitEPSS 5.5%

    The ReDi Restaurant Reservation WordPress plugin before 21.0426 provides the functionality to let users make restaurant reservations. These reservations are stored and can be listed on an 'Upcoming' page provided by the plugin. An unauthen…

  3. 7.5CVE-2021-24295ExploitEPSS 5.6%

    It was possible to exploit an Unauthenticated Time-Based Blind SQL Injection vulnerability in the Spam protection, AntiSpam, FireWall by CleanTalk WordPress Plugin before 5.153.4. The update_log function in lib/Cleantalk/ApbctWP/Firewall/S…

  4. 6.1CVE-2021-24288ExploitEPSS 1.9%

    When subscribing using AcyMailing, the 'redirect' parameter isn't properly sanitized. Turning the request from POST to GET, an attacker can craft a link containing a potentially malicious landing page and send it to the victim.

  5. 8.8CVE-2021-32403ExploitEPSS 2.5%

    Intelbras Router RF 301K Firmware 1.1.2 is vulnerable to Cross Site Request Forgery (CSRF) due to lack of security mechanisms for token protection and unsafe inputs and modules.

  6. 8.6CVE-2021-32820ExploitEPSS 16%

    Express-handlebars is a Handlebars view engine for Express. Express-handlebars mixes pure template data with engine configuration options through the Express render API. More specifically, the layout parameter may trigger file disclosure v…

  7. 8.8CVE-2021-32819ExploitEPSS 58%

    Squirrelly is a template engine implemented in JavaScript that works out of the box with ExpressJS. Squirrelly mixes pure template data with engine configuration options through the Express render API. By overwriting internal configuration…

  8. 6.1CVE-2021-24291ExploitEPSS 15%

    The Photo Gallery by 10Web – Mobile-Friendly Image Gallery WordPress plugin before 1.5.69 was vulnerable to Reflected Cross-Site Scripting (XSS) issues via the gallery_id, tag, album_id and _id GET parameters passed to the bwg_frontend_dat…

  9. 6.1CVE-2021-24287ExploitEPSS 10%

    The settings page of the Select All Categories and Taxonomies, Change Checkbox to Radio Buttons WordPress plugin before 1.3.2 did not properly sanitise the tab parameter before outputting it back, leading to a reflected Cross-Site Scriptin…

  10. 6.1CVE-2021-24286ExploitEPSS 13%

    The settings page of the Redirect 404 to parent WordPress plugin before 1.3.1 did not properly sanitise the tab parameter before outputting it back, leading to a reflected Cross-Site Scripting issue

  11. 9.8CVE-2021-24285ExploitEPSS 15%

    The request_list_request AJAX call of the Car Seller - Auto Classifieds Script WordPress plugin through 2.1.0, available to both authenticated and unauthenticated users, does not sanitise, validate or escape the order_id POST parameter bef…

  12. 9.8CVE-2021-24284ExploitEPSS 42%

    The Kaswara Modern VC Addons WordPress plugin through 3.0.1 allows unauthenticated arbitrary file upload via the 'uploadFontIcon' AJAX action. The supplied zipfile being unzipped in the wp-content/uploads/kaswara/fonts_icon directory with …

  13. 7.5CVE-2021-24278ExploitEPSS 7.4%

    In the Redirection for Contact Form 7 WordPress plugin before 2.3.4, unauthenticated users can use the wpcf7r_get_nonce AJAX action to retrieve a valid nonce for any WordPress action/function.

  14. 9.8CVE-2021-28799KEVExploitEPSS 78%

    An improper authorization vulnerability has been reported to affect QNAP NAS running HBS 3 (Hybrid Backup Sync. ) If exploited, the vulnerability allows remote attackers to log in to a device. This issue affects: QNAP Systems Inc. HBS 3 ve…

  15. 6.1CVE-2021-30213ExploitEPSS 2.7%

    Knowage Suite 7.3 is vulnerable to unauthenticated reflected cross-site scripting (XSS). An attacker can inject arbitrary web script in '/servlet/AdapterHTTP' via the 'targetService' parameter.

  16. 5.3CVE-2020-36289ExploitEPSS 99.3%

    Affected versions of Atlassian Jira Server and Data Center allow an unauthenticated user to enumerate users via an Information Disclosure vulnerability in the QueryComponentRendererValue!Default.jspa endpoint. The affected versions are bef…

  17. 6.6CVE-2021-31207KEVExploitEPSS 99.7%

    Microsoft Exchange Server Security Feature Bypass Vulnerability

  18. 6.5CVE-2021-31195ExploitEPSS 74%

    Microsoft Exchange Server Remote Code Execution Vulnerability

  19. 8.8CVE-2021-31181ExploitEPSS 29%

    Microsoft SharePoint Remote Code Execution Vulnerability

  20. 9.8CVE-2021-31166KEVExploitEPSS 99.8%

    HTTP Protocol Stack Remote Code Execution Vulnerability

  21. 6.1CVE-2021-31537ExploitEPSS 7.4%

    SIS SIS-REWE Go before 7.7 SP17 allows XSS: rewe/prod/web/index.php (affected parameters are config, version, win, db, pwd, and user) and /rewe/prod/web/rewe_go_check.php (version and all other parameters).

  22. 7.5CVE-2020-23575ExploitEPSS 35%

    A directory traversal vulnerability exists in Kyocera Printer d-COPIA253MF plus. Successful exploitation of this vulnerability could allow an attacker to retrieve or view arbitrary files from the affected server.

  23. 9.8CVE-2021-31755KEVExploitEPSS 87%

    An issue was discovered on Tenda AC11 devices with firmware through 02.03.01.104_CN. A stack buffer overflow vulnerability in /goform/setmac allows attackers to execute arbitrary code on the system via a crafted post request.

  24. 9.8CVE-2021-29203ExploitEPSS 68%

    A security vulnerability has been identified in the HPE Edgeline Infrastructure Manager, also known as HPE Edgeline Infrastructure Management Software, prior to version 1.22. The vulnerability could be remotely exploited to bypass remote a…

  25. 8.8CVE-2021-28151ExploitEPSS 28%

    Hongdian H8922 3.0.5 devices allow OS command injection via shell metacharacters into the ip-address (aka Destination) field to the tools.cgi ping command, which is accessible with the username guest and password guest.

  26. 5.5CVE-2021-28150ExploitEPSS 2.7%

    Hongdian H8922 3.0.5 devices allow the unprivileged guest user to read cli.conf (with the administrator password and other sensitive data) via /backup2.cgi.

  27. 6.5CVE-2021-28149ExploitEPSS 15%

    Hongdian H8922 3.0.5 devices allow Directory Traversal. The /log_download.cgi log export handler does not validate user input and allows a remote attacker with minimal privileges to download any file from the device by substituting ../ (e.…

  28. 9.8CVE-2021-32030KEVExploitEPSS 99.3%

    The administrator application on ASUS GT-AC2900 devices before 3.0.0.4.386.42643 and Lyra Mini before 3.0.0.4_384_46630 allows authentication bypass when processing remote input from an unauthenticated user, leading to unauthorized access …

  29. 5.8CVE-2021-29490ExploitEPSS 70%

    Jellyfin is a free software media system that provides media from a dedicated server to end-user devices via multiple apps. Verions prior to 10.7.3 vulnerable to unauthenticated Server-Side Request Forgery (SSRF) attacks via the imageUrl p…

  30. 5.4CVE-2021-24247ExploitEPSS 4.7%

    The Contact Form Check Tester WordPress plugin through 1.0.2 settings are visible to all registered users in the dashboard and are lacking any sanitisation. As a result, any registered user, such as subscriber, can leave an XSS payload in …

  31. 6.1CVE-2021-24245ExploitEPSS 5.7%

    The Stop Spammers WordPress plugin before 2021.9 did not escape user input when blocking requests (such as matching a spam word), outputting it in an attribute after sanitising it to remove HTML tags, which is not sufficient and lead to a …

  32. 9.8CVE-2021-24236ExploitEPSS 7.3%

    The Imagements WordPress plugin through 1.2.5 allows images to be uploaded in comments, however only checks for the Content-Type in the request to forbid dangerous files. This allows unauthenticated attackers to upload arbitrary files by u…

  33. 6.1CVE-2021-24214ExploitEPSS 1.6%

    The OpenID Connect Generic Client WordPress plugin 3.8.0 and 3.8.1 did not sanitise the login error when output back in the login form, leading to a reflected Cross-Site Scripting issue. This issue does not require authentication and can b…

  34. 5.3CVE-2021-1499ExploitEPSS 80%

    A vulnerability in the web-based management interface of Cisco HyperFlex HX Data Platform could allow an unauthenticated, remote attacker to upload files to an affected device. This vulnerability is due to missing authentication for the up…

  35. 9.8CVE-2021-1498KEVExploitEPSS >99.9%

    Multiple vulnerabilities in the web-based management interface of Cisco HyperFlex HX could allow an unauthenticated, remote attacker to perform command injection attacks against an affected device. For more information about these vulnerab…

  36. 9.8CVE-2021-1497KEVExploitEPSS >99.9%

    Multiple vulnerabilities in the web-based management interface of Cisco HyperFlex HX could allow an unauthenticated, remote attacker to perform command injection attacks against an affected device. For more information about these vulnerab…

  37. 6.1CVE-2021-24276ExploitEPSS 16%

    The Contact Form by Supsystic WordPress plugin before 1.7.15 did not sanitise the tab parameter of its options page before outputting it in an attribute, leading to a reflected Cross-Site Scripting issue

  38. 6.1CVE-2021-24275ExploitEPSS 18%

    The Popup by Supsystic WordPress plugin before 1.10.5 did not sanitise the tab parameter of its options page before outputting it in an attribute, leading to a reflected Cross-Site Scripting issue

  39. 6.1CVE-2021-24274ExploitEPSS 18%

    The Ultimate Maps by Supsystic WordPress plugin before 1.2.5 did not sanitise the tab parameter of its options page before outputting it in an attribute, leading to a reflected Cross-Site Scripting issue

  40. 4.3CVE-2021-24272ExploitEPSS 1.8%

    The fitness calculators WordPress plugin before 1.9.6 add calculators for Water intake, BMI calculator, protein Intake, and Body Fat and was lacking CSRF check, allowing attackers to make logged in users perform unwanted actions, such as c…

  41. 9.1CVE-2020-36333ExploitEPSS 4.0%

    themegrill-demo-importer before 1.6.2 does not require authentication for wiping the database, because of a reset_wizard_actions hook.

  42. 7.8CVE-2021-21551KEVExploitEPSS 80%

    Dell dbutil_2_3.sys driver contains an insufficient access control vulnerability which may lead to escalation of privileges, denial of service, or information disclosure. Local authenticated user access is required.

  43. 6.1CVE-2020-23015ExploitEPSS 2.7%

    An open redirect issue was discovered in OPNsense through 20.1.5. The redirect parameter "url" in login page was not filtered and can redirect user to any website.

  44. 7.2CVE-2021-31933ExploitEPSS 14%

    A remote code execution vulnerability exists in Chamilo through 1.11.14 due to improper input sanitization of a parameter used for file uploads, and improper file-extension filtering for certain filenames (e.g., .phar or .pht). A remote au…

  45. 6.8CVE-2021-29484ExploitEPSS 7.9%

    Ghost is a Node.js CMS. An unused endpoint added during the development of 4.0.0 has left sites vulnerable to untrusted users gaining access to Ghost Admin. Attackers can gain access by getting logged in users to click a link containing ma…

  46. 9.8CVE-2021-27651ExploitEPSS 54%

    In versions 8.2.1 through 8.5.2 of Pega Infinity, the password reset functionality for local accounts can be used to bypass local authentication checks.

  47. 7.5CVE-2021-20092ExploitEPSS 8.2%

    The web interfaces of Buffalo WSR-2533DHPL2 firmware version <= 1.02 and WSR-2533DHP3 firmware version <= 1.24 do not properly restrict access to sensitive information from an unauthorized actor.

  48. 8.8CVE-2021-20091ExploitEPSS 8.5%

    The web interfaces of Buffalo WSR-2533DHPL2 firmware version <= 1.02 and WSR-2533DHP3 firmware version <= 1.24 do not properly sanitize user input. An authenticated remote attacker could leverage this vulnerability to alter device configur…

  49. 9.8CVE-2021-20090KEVExploitEPSS >99.9%

    A path traversal vulnerability in the web interfaces of Buffalo WSR-2533DHPL2 firmware version <= 1.02 and WSR-2533DHP3 firmware version <= 1.24 could allow unauthenticated remote attackers to bypass authentication.

  50. 9.8CVE-2021-31856ExploitEPSS 75%

    A SQL Injection vulnerability in the REST API in Layer5 Meshery 0.5.2 allows an attacker to execute arbitrary SQL commands via the /experimental/patternfiles endpoint (order parameter in GetMesheryPatterns in models/meshery_pattern_persist…