cve.bz

Matching records, newest first, page 96

Filter
  1. 9.8CVE-2021-27132ExploitEPSS 16%

    SerComm AG Combo VD625 AGSOT_2.1.0 devices allow CRLF injection (for HTTP header injection) in the download function via the Content-Disposition header.

  2. 9.1CVE-2021-25282ExploitEPSS 93%

    An issue was discovered in through SaltStack Salt before 3002.5. The salt.wheel.pillar_roots.write method is vulnerable to directory traversal.

  3. 9.8CVE-2021-25281ExploitEPSS 73%

    An issue was discovered in through SaltStack Salt before 3002.5. salt-api does not honor eauth credentials for the wheel_async client. Thus, an attacker can remotely run any wheel modules on the master.

  4. 7.8CVE-2021-1732KEVExploitEPSS 78%

    Windows Win32k Elevation of Privilege Vulnerability

  5. 6.1CVE-2021-27330ExploitEPSS 6.2%

    Triconsole Datepicker Calendar <3.77 is affected by cross-site scripting (XSS) in calendar_form.php. Attackers can read authentication cookies that are still active, which can be used to perform further attacks such as reading browser hist…

  6. 9.8CVE-2021-27670ExploitEPSS 61%

    Appspace 6.2.4 allows SSRF via the api/v1/core/proxy/jsonprequest url parameter.

  7. 5.3CVE-2021-21973KEVExploitEPSS 88%

    The vSphere Client (HTML5) contains an SSRF (Server Side Request Forgery) vulnerability due to improper validation of URLs in a vCenter Server plugin. A malicious actor with network access to port 443 may exploit this issue by sending a PO…

  8. 9.8CVE-2021-21972KEVExploitEPSS 99.8%

    The vSphere Client (HTML5) contains a remote code execution vulnerability in a vCenter Server plugin. A malicious actor with network access to port 443 may exploit this issue to execute commands with unrestricted privileges on the underlyi…

  9. 5.4CVE-2021-3355ExploitEPSS 7.2%

    A stored-self XSS exists in LightCMS v1.3.4, allowing an attacker to execute HTML or JavaScript code in a vulnerable Title field to /admin/SensitiveWords.

  10. 9.8CVE-2020-28429ExploitEPSS 63%

    All versions of package geojson2kml are vulnerable to Command Injection via the index.js file. PoC: var a =require("geojson2kml"); a("./","& touch JHU",function(){})

  11. 5.3CVE-2020-29453ExploitEPSS 20%

    The CachingResourceDownloadRewriteRule class in Jira Server and Jira Data Center before version 8.5.11, from 8.6.0 before 8.13.3, and from 8.14.0 before 8.15.0 allowed unauthenticated remote attackers to read arbitrary files within WEB-INF…

  12. 5.4CVE-2021-27370ExploitEPSS 3.3%

    The Contact page in Monica 2.19.1 allows stored XSS via the Last Name field.

  13. 9.8CVE-2020-21224ExploitEPSS 39%

    A Remote Code Execution vulnerability has been found in Inspur ClusterEngine V4.0. A remote attacker can send a malicious login packet to the control server

  14. 9.8CVE-2019-25024ExploitEPSS 28%

    OpenRepeater (ORP) before 2.2 allows unauthenticated command injection via shell metacharacters in the functions/ajax_system.php post_service parameter.

  15. 6.5CVE-2021-27124ExploitEPSS 5.8%

    SQL injection in the expertise parameter in search_result.php in Doctor Appointment System v1.0 allows an authenticated patient user to dump the database credentials via a SQL injection attack.

  16. 7.8CVE-2021-21315KEVExploitEPSS 91%

    The System Information Library for Node.JS (npm package "systeminformation") is an open source collection of functions to retrieve detailed hardware, system and OS information. In systeminformation before version 5.3.1 there is a command i…

  17. 9.8CVE-2021-3239ExploitEPSS 19%

    E-Learning System 1.0 suffers from an unauthenticated SQL injection vulnerability, which allows remote attackers to execute arbitrary code on the hosting web server and gain a reverse shell.

  18. 7.2CVE-2020-28337ExploitEPSS 17%

    A directory traversal issue in the Utils/Unzip module in Microweber through 1.1.20 allows an authenticated attacker to gain remote code execution via the backup restore feature. To exploit the vulnerability, an attacker must have the crede…

  19. 9.8CVE-2020-35775ExploitEPSS 13%

    CITSmart before 9.1.2.23 allows LDAP Injection.

  20. 6.1CVE-2021-25299ExploitEPSS 98%

    Nagios XI version xi-5.7.5 is affected by cross-site scripting (XSS). The vulnerability exists in the file /usr/local/nagiosxi/html/admin/sshterm.php due to improper sanitization of user-controlled input. A maliciously crafted URL, when cl…

  21. 8.8CVE-2021-25298KEVExploitEPSS 74%

    Nagios XI version xi-5.7.5 is affected by OS command injection. The vulnerability exists in the file /usr/local/nagiosxi/html/includes/configwizards/cloud-vm/cloud-vm.inc.php due to improper sanitization of authenticated user-controlled in…

  22. 8.8CVE-2021-25297KEVExploitEPSS 57%

    Nagios XI version xi-5.7.5 is affected by OS command injection. The vulnerability exists in the file /usr/local/nagiosxi/html/includes/configwizards/switch/switch.inc.php due to improper sanitization of authenticated user-controlled input …

  23. 8.8CVE-2021-25296KEVExploitEPSS 72%

    Nagios XI version xi-5.7.5 is affected by OS command injection. The vulnerability exists in the file /usr/local/nagiosxi/html/includes/configwizards/windowswmi/windowswmi.inc.php due to improper sanitization of authenticated user-controlle…

  24. 7.2CVE-2021-23337ExploitEPSS 20%

    Lodash versions prior to 4.17.21 are vulnerable to Command Injection via the template function.

  25. 6.1CVE-2021-26929ExploitEPSS 5.0%

    An XSS issue was discovered in Horde Groupware Webmail Edition through 5.2.22 (where the Horde_Text_Filter library before 2.3.7 is used). The attacker can send a plain text e-mail message, with JavaScript encoded as a link or email that is…

  26. 8.8CVE-2020-27866ExploitEPSS 8.7%

    This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of NETGEAR R6020, R6080, R6120, R6220, R6260, R6700v2, R6800, R6900v2, R7450, JNR3210, WNR2020, Nighthawk AC2100, and Nighthawk AC2400 …

  27. 7.2CVE-2021-21311KEVExploitEPSS 98%

    Adminer is an open-source database management in a single PHP file. In adminer from version 4.0.0 and before 4.7.9 there is a server-side request forgery vulnerability. Users of Adminer versions bundling all drivers (e.g. `adminer.php`) ar…

  28. 9.8CVE-2021-21307ExploitEPSS 89%

    Lucee Server is a dynamic, Java based (JSR-223), tag and scripting language used for rapid web application development. In Lucee Admin before versions 5.3.7.47, 5.3.6.68 or 5.3.5.96 there is an unauthenticated remote code exploit. This is …

  29. 6.1CVE-2021-22881ExploitEPSS 87%

    The Host Authorization middleware in Action Pack before 6.1.2.1, 6.0.3.5 suffers from an open redirect vulnerability. Specially crafted `Host` headers in combination with certain "allowed host" formats can cause the Host Authorization midd…

  30. 9.8CVE-2021-22652ExploitEPSS 37%

    Access to the Advantech iView versions prior to v5.7.03.6112 configuration are missing authentication, which may allow an unauthorized attacker to change the configuration and obtain code execution.

  31. 9.8CVE-2020-28871ExploitEPSS 86%

    Remote code execution in Monitorr v1.7.6m in upload.php allows an unauthorized person to execute arbitrary code on the server-side via an insecure file upload.

  32. 9.1CVE-2021-21479ExploitEPSS 10%

    In SCIMono before 0.0.19, it is possible for an attacker to inject and execute java expression compromising the availability and integrity of the system.

  33. 9.8CVE-2020-13117ExploitEPSS 69%

    Wavlink WN575A4, WN579X3, and WN530G3A devices through 2020-05-15 allow unauthenticated remote users to inject commands via the key parameter in a login request.

  34. 8.8CVE-2021-3394ExploitEPSS 5.9%

    Millennium Millewin (also known as "Cartella clinica") 13.39.028, 13.39.28.3342, and 13.39.146.1 has insecure folder permissions allowing a malicious user for a local privilege escalation.

  35. 4.8CVE-2020-22841ExploitEPSS 3.7%

    Stored XSS in b2evolution CMS version 6.11.6 and prior allows an attacker to perform malicious JavaScript code execution via the plugin name input field in the plugin module.

  36. 6.1CVE-2020-22840ExploitEPSS 14%

    Open redirect vulnerability in b2evolution CMS version prior to 6.11.6 allows an attacker to perform malicious open redirects to an attacker controlled resource via redirect_to parameter in email_passthrough.php.

  37. 5.4CVE-2021-3294ExploitEPSS 2.9%

    CASAP Automated Enrollment System 1.0 is affected by cross-site scripting (XSS) in users.php. An attacker can steal a cookie to perform user redirection to a malicious website.

  38. 8.1CVE-2021-26914ExploitEPSS 78%

    NetMotion Mobility before 11.73 and 12.x before 12.02 allows unauthenticated remote attackers to execute arbitrary code as SYSTEM because of Java deserialization in MvcUtil valueStringToObject.

  39. 9.8CVE-2021-22502KEVExploitEPSS 97%

    Remote Code execution vulnerability in Micro Focus Operation Bridge Reporter (OBR) product, affecting version 10.40. The vulnerability could be exploited to allow Remote Code Execution on the OBR server.

  40. 6.1CVE-2021-22122ExploitEPSS 11%

    An improper neutralization of input during web page generation in FortiWeb GUI interface 6.3.0 through 6.3.7 and version before 6.2.4 may allow an unauthenticated, remote attacker to perform a reflected cross site scripting attack (XSS) by…

  41. 5.3CVE-2021-3293ExploitEPSS 20%

    emlog v5.3.1 has full path disclosure vulnerability in t/index.php, which allows an attacker to see the path to the webroot/file.

  42. 9.8CVE-2021-3122ExploitEPSS 88%

    CMCAgent in NCR Command Center Agent 16.3 on Aloha POS/BOH servers permits the submission of a runCommand parameter (within an XML document sent to port 8089) that enables the remote, unauthenticated execution of an arbitrary command as SY…

  43. 6.1CVE-2021-26723ExploitEPSS 13%

    Jenzabar 9.2.x through 9.2.2 allows /ics?tool=search&query= XSS.

  44. 6.1CVE-2021-26710ExploitEPSS 7.5%

    A cross-site scripting (XSS) issue in the login panel in Redwood Report2Web 4.3.4.5 and 4.5.3 allows remote attackers to inject JavaScript via the signIn.do urll parameter.

  45. 5.4CVE-2020-18724ExploitEPSS 3.2%

    Authenticated stored cross-site scripting (XSS) in the contact name field in the distribution list of MDaemon webmail 19.5.5 allows an attacker to executes code and perform a XSS attack while opening a contact list.

  46. 5.4CVE-2020-18723ExploitEPSS 4.0%

    Stored cross-site scripting (XSS) in file attachment field in MDaemon webmail 19.5.5 allows an attacker to execute code on the email recipient side while forwarding an email to perform potentially malicious activities.

  47. 9.8CVE-2020-28653ExploitEPSS 78%

    Zoho ManageEngine OpManager Stable build before 125203 (and Released build before 125233) allows Remote Code Execution via the Smart Update Manager (SUM) servlet.

  48. 6.1CVE-2020-29164ExploitEPSS 6.2%

    PacsOne Server (PACS Server In One Box) below 7.1.1 is affected by cross-site scripting (XSS).

  49. 9.8CVE-2020-25506KEVExploitEPSS >99.9%

    D-Link DNS-320 FW v2.06B01 Revision Ax is affected by command injection in the system_mgr.cgi component, which can lead to remote arbitrary code execution.

  50. 9.8CVE-2021-3378ExploitEPSS 98%

    FortiLogger 4.4.2.2 is affected by Arbitrary File Upload by sending a "Content-Type: image/png" header to Config/SaveUploadedHotspotLogoFile and then visiting Assets/temp/hotspot/img/logohotspot.asp.