cve.bz

Matching records, newest first, page 93

Filter
  1. 7.5CVE-2021-29442ExploitEPSS 64%

    Nacos is a platform designed for dynamic service discovery and configuration and service management. In Nacos before version 1.4.1, the ConfigOpsController lets the user perform management operations like querying the database or even wipi…

  2. 9.8CVE-2021-29441ExploitEPSS 83%

    Nacos is a platform designed for dynamic service discovery and configuration and service management. In Nacos before version 1.4.1, when configured to use authentication (-Dnacos.core.auth.enabled=true) Nacos uses the AuthFilter servlet fi…

  3. 9.8CVE-2021-30128ExploitEPSS 81%

    Apache OFBiz has unsafe deserialization prior to 17.12.07 version

  4. 5.4CVE-2021-29460ExploitEPSS 3.2%

    Kirby is an open source CMS. An editor with write access to the Kirby Panel can upload an SVG file that contains harmful content like `<script>` tags. The direct link to that file can be sent to other users or visitors of the site. If the …

  5. 9.8CVE-2021-29200ExploitEPSS 55%

    Apache OFBiz has unsafe deserialization prior to 17.12.07 version An unauthenticated user can perform an RCE attack

  6. 6.1CVE-2020-21998ExploitEPSS 1.3%

    In HomeAutomation 3.3.2 input passed via the 'redirect' GET parameter in 'api.php' script is not properly verified before being used to redirect users. This can be exploited to redirect a user to an arbitrary website e.g. when a user click…

  7. 8.8CVE-2021-21220KEVExploitEPSS 70%

    Insufficient validation of untrusted input in V8 in Google Chrome prior to 89.0.4389.128 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

  8. 8.8CVE-2021-31802ExploitEPSS 14%

    NETGEAR R7000 1.0.11.116 devices have a heap-based Buffer Overflow that is exploitable from the local network without authentication. The vulnerability exists within the handling of an HTTP request. An attacker can leverage this to execute…

  9. 8.8CVE-2021-31762ExploitEPSS 8.8%

    Webmin 1.973 is affected by Cross Site Request Forgery (CSRF) to create a privileged user through Webmin's add users feature, and then get a reverse shell through Webmin's running process feature.

  10. 9.6CVE-2021-31761ExploitEPSS 34%

    Webmin 1.973 is affected by reflected Cross Site Scripting (XSS) to achieve Remote Command Execution through Webmin's running process feature.

  11. 7.5CVE-2021-25899ExploitEPSS 12%

    An issue was discovered in svc-login.php in Void Aural Rec Monitor 9.0.0.1. An unauthenticated attacker can send a crafted HTTP request to perform a blind time-based SQL Injection. The vulnerable parameter is param1.

  12. 8.8CVE-2021-20086ExploitEPSS 6.1%

    Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in jquery-bbq 1.2.1 allows a malicious user to inject properties into Object.prototype.

  13. 10.0CVE-2021-22205KEVExploitEPSS 99.7%

    An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.9. GitLab was not properly validating image files that were passed to a file parser which resulted in a remote command execution.

  14. 7.8CVE-2021-22204KEVExploitEPSS >99.9%

    Improper neutralization of user data in the DjVu file format in ExifTool versions 7.44 and up allows arbitrary code execution when parsing the malicious image

  15. 9.8CVE-2021-2135ExploitEPSS 8.4%

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Coherence Container). Supported versions that are affected are 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unaut…

  16. 6.1CVE-2021-24239ExploitEPSS 1.6%

    The Pie Register – User Registration Forms. Invitation based registrations, Custom Login, Payments WordPress plugin before 3.7.0.1 does not sanitise the invitaion_code GET parameter when outputting it in the Activation Code page, leading t…

  17. 6.1CVE-2021-24237ExploitEPSS 6.3%

    The Realteo WordPress plugin before 1.2.4, used by the Findeo Theme, did not properly sanitise the keyword_search, search_radius. _bedrooms and _bathrooms GET parameters before outputting them in its properties page, leading to an unauthen…

  18. 6.1CVE-2021-24235ExploitEPSS 2.9%

    The Goto WordPress theme before 2.0 does not sanitise the keywords and start_date GET parameter on its Tour List page, leading to an unauthenticated reflected Cross-Site Scripting issue.

  19. 9.8CVE-2021-3287ExploitEPSS 51%

    Zoho ManageEngine OpManager before 12.5.329 allows unauthenticated Remote Code Execution due to a general bypass in the deserialization class.

  20. 5.4CVE-2021-31329ExploitEPSS 1.7%

    Cross Site Scripting (XSS) in Remote Clinic v2.0 via the "Chat" and "Personal Address" field on staff/register.php

  21. 5.4CVE-2021-31327ExploitEPSS 1.7%

    Stored XSS in Remote Clinic v2.0 in /medicines due to Medicine Name Field.

  22. 9.8CVE-2020-35314ExploitEPSS 27%

    A remote code execution vulnerability in the installUpdateThemePluginAction function in index.php in WonderCMS 3.1.3, allows remote attackers to upload a custom plugin which can contain arbitrary code and obtain a webshell via the theme/pl…

  23. 9.8CVE-2020-35313ExploitEPSS 45%

    A server-side request forgery (SSRF) vulnerability in the addCustomThemePluginRepository function in index.php in WonderCMS 3.1.3 allows remote attackers to execute arbitrary code via a crafted URL to the theme/plugin installer.

  24. 6.1CVE-2020-25864ExploitEPSS 6.1%

    HashiCorp Consul and Consul Enterprise up to version 1.9.4 key-value (KV) raw mode was vulnerable to cross-site scripting. Fixed in 1.9.5, 1.8.10 and 1.7.14.

  25. 7.5CVE-2021-25681ExploitEPSS 11%

    AdTran Personal Phone Manager 10.8.1 software is vulnerable to an issue that allows for exfiltration of data over DNS. This could allow for exposed AdTran Personal Phone Manager web servers to be used as DNS redirectors to tunnel arbitrary…

  26. 6.1CVE-2021-25680ExploitEPSS 2.5%

    The AdTran Personal Phone Manager software is vulnerable to multiple reflected cross-site scripting (XSS) issues. These issues impact at minimum versions 10.8.1 and below but potentially impact later versions as well since they have not pr…

  27. 5.4CVE-2021-25679ExploitEPSS 2.7%

    The AdTran Personal Phone Manager software is vulnerable to an authenticated stored cross-site scripting (XSS) issues. These issues impact at minimum versions 10.8.1 and below but potentially impact later versions as well since they have n…

  28. 7.8CVE-2021-3493KEVExploitEPSS 49%

    The overlayfs implementation in the linux kernel did not properly validate with respect to user namespaces the setting of file capabilities on files in an underlying file system. Due to the combination of unprivileged user namespaces along…

  29. 9.1CVE-2021-26830ExploitEPSS 4.6%

    SQL Injection in Tribalsystems Zenario CMS 8.8.52729 allows remote attackers to access the database or delete the plugin. This is accomplished via the `ID` input field of ajax.php in the `Pugin library - delete` module.

  30. 6.5CVE-2021-29447ExploitEPSS 86%

    Wordpress is an open source CMS. A user with the ability to upload files (like an Author) can exploit an XML parsing issue in the Media Library leading to XXE attacks. This requires WordPress installation to be using PHP 8. Access to inter…

  31. 8.8CVE-2021-28242ExploitEPSS 5.0%

    SQL Injection in the "evoadm.php" component of b2evolution v7.2.2-stable allows remote attackers to obtain sensitive database information by injecting SQL commands into the "cf_name" parameter when creating a new filter under the "Collecti…

  32. 5.4CVE-2021-21087ExploitEPSS 37%

    Adobe Coldfusion versions 2016 (update 16 and earlier), 2018 (update 10 and earlier) and 2021.0.0.323925 are affected by an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability. An attacker cou…

  33. 9.8CVE-2021-27850ExploitEPSS 94%

    A critical unauthenticated remote code execution vulnerability was found all recent versions of Apache Tapestry. The affected versions include 5.4.5, 5.5.0, 5.6.2 and 5.7.0. The vulnerability I have found is a bypass of the fix for CVE-201…

  34. 7.8CVE-2021-29449ExploitEPSS 1.8%

    Pi-hole is a Linux network-level advertisement and Internet tracker blocking application. Multiple privilege escalation vulnerabilities were discovered in version 5.2.4 of Pi-hole core. See the referenced GitHub security advisory for detai…

  35. 7.5CVE-2021-3017ExploitEPSS 63%

    The web interface on Intelbras WIN 300 and WRN 342 devices through 2021-01-04 allows remote attackers to discover credentials by reading the def_wirelesspassword line in the HTML source code.

  36. 8.8CVE-2021-31152ExploitEPSS 3.8%

    Multilaser Router AC1200 V02.03.01.45_pt contains a cross-site request forgery (CSRF) vulnerability. An attacker can enable remote access, change passwords, and perform other actions through misconfigured requests, entries, and headers.

  37. 6.1CVE-2021-26812ExploitEPSS 97%

    Cross Site Scripting (XSS) in the Jitsi Meet 2.7 through 2.8.3 plugin for Moodle via the "sessionpriv.php" module. This allows attackers to craft a malicious URL, which when clicked on by users, can inject javascript code to be run by the …

  38. 7.2CVE-2021-29440ExploitEPSS 30%

    Grav is a file based Web-platform. Twig processing of static pages can be enabled in the front matter by any administrative user allowed to create or edit pages. As the Twig processor runs unsandboxed, this behavior can be used to gain arb…

  39. 9.8CVE-2021-28481ExploitEPSS 36%

    Microsoft Exchange Server Remote Code Execution Vulnerability

  40. 9.8CVE-2021-28480ExploitEPSS 71%

    Microsoft Exchange Server Remote Code Execution Vulnerability

  41. 9.8CVE-2021-30175ExploitEPSS 8.5%

    ZEROF Web Server 1.0 (April 2021) allows SQL Injection via the /HandleEvent endpoint for the login page.

  42. 9.8CVE-2021-27905ExploitEPSS 93%

    The ReplicationHandler (normally registered at "/replication" under a Solr core) in Apache Solr has a "masterUrl" (also "leaderUrl" alias) parameter that is used to designate another ReplicationHandler on another Solr core to replicate ind…

  43. 9.8CVE-2021-29003ExploitEPSS 45%

    Genexis PLATINUM 4410 2.1 P4410-V2-1.28 devices allow remote attackers to execute arbitrary code via shell metacharacters to sys_config_valid.xgi, as demonstrated by the sys_config_valid.xgi?exeshell=%60telnetd%20%26%60 URI.

  44. 5.4CVE-2021-30637ExploitEPSS 1.9%

    htmly 2.8.0 allows stored XSS via the blog title, Tagline, or Description to config.html.php.

  45. 5.4CVE-2021-30044ExploitEPSS 1.8%

    Cross Site Scripting (XSS) in Remote Clinic v2.0 via the First Name or Last Name field on staff/register.php.

  46. 5.4CVE-2021-30042ExploitEPSS 1.8%

    Cross Site Scripting (XSS) in Remote Clinic v2.0 via the "Clinic Name", "Clinic Address", "Clinic City", or "Clinic Contact" field on clinics/register.php

  47. 5.4CVE-2021-30039ExploitEPSS 1.8%

    Cross Site Scripting (XSS) in Remote Clinic v2.0 via the "Fever" or "Blood Pressure" field on the patients/register-report.php.

  48. 5.4CVE-2021-30034ExploitEPSS 1.8%

    Cross Site Scripting (XSS) in Remote Clinic v2.0 via the Symptons field on patients/register-report.php.

  49. 5.4CVE-2021-30030ExploitEPSS 1.8%

    Cross Site Scripting (XSS) in Remote Clinic v2.0 via the Full Name field on register-patient.php.

  50. 7.5CVE-2021-24227ExploitEPSS 6.8%

    The Jetpack Scan team identified a Local File Disclosure vulnerability in the Patreon WordPress plugin before 1.7.0 that could be abused by anyone visiting the site. Using this attack vector, an attacker could leak important internal files…