cve.bz

Matching records, newest first, page 18

Filter
  1. 9.8CVE-2022-23227KEVEPSS 48%

    NUUO NVRmini2 through 3.11 allows an unauthenticated attacker to upload an encrypted TAR archive, which can be abused to add arbitrary users because of the lack of handle_import_user.php authentication. When combined with another flaw (CVE…

  2. 5.3CVE-2022-23134KEVExploitEPSS 94%

    After the initial setup process, some steps of setup.php file are reachable not only by super-administrators, but by unauthenticated users as well. Malicious actor can pass step checks and potentially change the configuration of Zabbix Fro…

  3. 9.8CVE-2022-23131KEVExploitEPSS 96%

    In the case of instances where the SAML SSO authentication is enabled (non-default), session data can be modified by a malicious actor, because a user login stored in the session was not verified. Malicious unauthenticated actor may exploi…

  4. 7.0CVE-2022-21919KEVEPSS 2.4%

    Windows User Profile Service Elevation of Privilege Vulnerability

  5. 7.8CVE-2022-21882KEVExploitEPSS 59%

    Win32k Elevation of Privilege Vulnerability

  6. 7.8CVE-2022-22265KEVEPSS 0.4%

    An improper check or handling of exceptional conditions in NPU driver prior to SMR Jan-2022 Release 1 allows arbitrary memory write and code execution.

  7. 5.3CVE-2021-35247KEVEPSS 3.7%

    Serv-U web login screen to LDAP authentication was allowing characters that were not sufficiently sanitized. SolarWinds has updated the input mechanism to perform additional validation and sanitization. Please Note: No downstream affect ha…

  8. 7.8CVE-2021-44168KEVEPSS 0.9%

    A download of code without integrity check vulnerability in the "execute restore src-vis" command of FortiOS before 7.0.3 may allow a local authenticated attacker to download arbitrary files on the device via specially crafted update packa…

  9. 8.1CVE-2021-44207KEVEPSS 18%

    Acclaim USAHERDS through 7.4.0.1 uses hard-coded credentials.

  10. 7.5CVE-2021-22054KEVExploitEPSS 99.6%

    VMware Workspace ONE UEM console 20.0.8 prior to 20.0.8.37, 20.11.0 prior to 20.11.0.40, 21.2.0 prior to 21.2.0.27, and 21.5.0 prior to 21.5.0.37 contain an SSRF vulnerability. This issue may allow a malicious actor with network access to …

  11. 7.8CVE-2021-1048KEVEPSS 1.1%

    In ep_loop_check_proc of eventpoll.c, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for ex…

  12. 6.4CVE-2021-0920KEVEPSS 0.9%

    In unix_scm_to_skb of af_unix.c, there is a possible use after free bug due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Prod…

  13. 7.1CVE-2021-43890KEVEPSS 11%

    We have investigated reports of a spoofing vulnerability in AppX installer that affects Microsoft Windows. Microsoft is aware of attacks that attempt to exploit this vulnerability by using specially crafted packages that include the malwar…

  14. 7.8CVE-2021-43226KEVEPSS 3.3%

    Windows Common Log File System Driver Elevation of Privilege Vulnerability

  15. 9.0CVE-2021-45046KEVExploitEPSS >99.9%

    It was found that the fix to address CVE-2021-44228 in Apache Log4j 2.15.0 was incomplete in certain non-default configurations. This could allows attackers with control over Thread Context Map (MDC) input data when the logging configurati…

  16. 7.5CVE-2021-39935KEVEPSS 36%

    An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.5 before 14.3.6, all versions starting from 14.4 before 14.4.4, all versions starting from 14.5 before 14.5.2. Unauthorized external users could perform S…

  17. 9.8CVE-2021-44515KEVExploitEPSS 99.8%

    Zoho ManageEngine Desktop Central is vulnerable to authentication bypass, leading to remote code execution on the server, as exploited in the wild in December 2021. For Enterprise builds 10.1.2127.17 and earlier, upgrade to 10.1.2127.18. F…

  18. 10.0CVE-2021-44228KEVExploitEPSS >99.9%

    Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoin…

  19. 9.8CVE-2021-44529KEVExploitEPSS 99.1%

    A code injection vulnerability in the Ivanti EPM Cloud Services Appliance (CSA) allows an unauthenticated user to execute arbitrary code with limited permissions (nobody).

  20. 8.8CVE-2021-27860KEVEPSS 40%

    A vulnerability in the web management interface of FatPipe WARP, IPVPN, and MPVPN software prior to versions 10.1.2r60p92 and 10.2.2r44p1 allows a remote, unauthenticated attacker to upload a file to any location on the filesystem. The Fat…

  21. 9.8CVE-2021-20038KEVExploitEPSS >99.9%

    A Stack-based buffer overflow vulnerability in SMA100 Apache httpd server's mod_cgi module environment variables allows a remote unauthenticated attacker to potentially execute code as a 'nobody' user in the appliance. This vulnerability a…

  22. 7.5CVE-2021-43798KEVExploitEPSS 89%

    Grafana is an open-source platform for monitoring and observability. Grafana versions 8.0.0-beta1 through 8.3.0 (except for patched versions) iss vulnerable to directory traversal, allowing access to local files. The vulnerable URL path is…

  23. 9.8CVE-2021-23758KEVExploitEPSS 83%

    All versions of package ajaxpro.2 are vulnerable to Deserialization of Untrusted Data due to the possibility of deserialization of arbitrary .NET classes, which can be abused to gain remote code execution.

  24. 9.8CVE-2021-44077KEVExploitEPSS 93%

    Zoho ManageEngine ServiceDesk Plus before 11306, ServiceDesk Plus MSP before 10530, and SupportCenter Plus before 11014 are vulnerable to unauthenticated remote code execution. This is related to /RestAPI URLs in a servlet, and ImportTechn…

  25. 8.8CVE-2021-38003KEVEPSS 39%

    Inappropriate implementation in V8 in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

  26. 6.1CVE-2021-38000KEVEPSS 4.9%

    Insufficient validation of untrusted input in Intents in Google Chrome on Android prior to 95.0.4638.69 allowed a remote attacker to arbitrarily browser to a malicious URL via a crafted HTML page.

  27. 9.8CVE-2021-44026KEVEPSS 70%

    Roundcube before 1.3.17 and 1.4.x before 1.4.12 is prone to a potential SQL injection via search or search_params.

  28. 7.5CVE-2021-41277KEVExploitEPSS 97%

    Metabase is an open source data analytics platform. In affected versions a security issue has been discovered with the custom GeoJSON map (`admin->settings->maps->custom maps->add a map`) support and potential local file inclusion (includi…

  29. 8.8CVE-2021-42321KEVExploitEPSS 92%

    Microsoft Exchange Server Remote Code Execution Vulnerability

  30. 7.8CVE-2021-42292KEVEPSS 43%

    Microsoft Excel Security Feature Bypass Vulnerability

  31. 7.5CVE-2021-42287KEVEPSS 77%

    Active Directory Domain Services Elevation of Privilege Vulnerability

  32. 7.5CVE-2021-42278KEVEPSS 73%

    Active Directory Domain Services Elevation of Privilege Vulnerability

  33. 5.5CVE-2021-41379KEVEPSS 19%

    Windows Installer Elevation of Privilege Vulnerability

  34. 9.8CVE-2021-42237KEVExploitEPSS 98%

    Sitecore XP 7.5 Initial Release to Sitecore XP 8.2 Update-7 is vulnerable to an insecure deserialization attack where it is possible to achieve remote command execution on the machine. No authentication or special configuration is required…

  35. 9.8CVE-2021-42258KEVExploitEPSS 75%

    BQE BillQuick Web Suite 2018 through 2021 before 22.0.9.1 allows SQL injection for unauthenticated remote code execution, as exploited in the wild in October 2021 for ransomware installation. SQL injection can, for example, use the txtID (…

  36. 7.8CVE-2021-30807KEVEPSS 29%

    A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Big Sur 11.5.1, iOS 14.7.1 and iPadOS 14.7.1, watchOS 7.6.1. An application may be able to execute arbitrary code with kernel privileges. A…

  37. 9.8CVE-2021-27561KEVExploitEPSS 83%

    Yealink Device Management (DM) 3.6.0.20 allows command injection as root via the /sm/api/v1/firewall/zone/services URI, without authentication.

  38. 7.5CVE-2021-20124KEVExploitEPSS 96%

    A local file inclusion vulnerability exists in Draytek VigorConnect 1.6.0-B3 in the file download functionality of the WebServlet endpoint. An unauthenticated attacker could leverage this vulnerability to download arbitrary files from the …

  39. 7.5CVE-2021-20123KEVExploitEPSS 90%

    A local file inclusion vulnerability exists in Draytek VigorConnect 1.6.0-B3 in the file download functionality of the DownloadFileServlet endpoint. An unauthenticated attacker could leverage this vulnerability to download arbitrary files …

  40. 7.8CVE-2021-41357KEVEPSS 1.6%

    Win32k Elevation of Privilege Vulnerability

  41. 7.8CVE-2021-40450KEVEPSS 1.6%

    Win32k Elevation of Privilege Vulnerability

  42. 7.8CVE-2021-40449KEVExploitEPSS 82%

    Win32k Elevation of Privilege Vulnerability

  43. 6.5CVE-2021-37976KEVEPSS 20%

    Inappropriate implementation in Memory in Google Chrome prior to 94.0.4606.71 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.

  44. 8.8CVE-2021-37975KEVEPSS 35%

    Use after free in V8 in Google Chrome prior to 94.0.4606.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

  45. 9.6CVE-2021-37973KEVEPSS 12%

    Use after free in Portals in Google Chrome prior to 94.0.4606.61 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

  46. 9.6CVE-2021-30633KEVEPSS 33%

    Use after free in Indexed DB API in Google Chrome prior to 93.0.4577.82 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

  47. 8.8CVE-2021-30632KEVEPSS 63%

    Out of bounds write in V8 in Google Chrome prior to 93.0.4577.82 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

  48. 9.8CVE-2021-42013KEVExploitEPSS >99.9%

    It was found that the fix for CVE-2021-41773 in Apache HTTP Server 2.4.50 was insufficient. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like directives. If files outside of…

  49. 5.5CVE-2021-25489KEVEPSS 0.5%

    Assuming radio permission is gained, missing input validation in modem interface driver prior to SMR Oct-2021 Release 1 results in format string bug leading to kernel panic.

  50. 7.8CVE-2021-25487KEVEPSS 0.6%

    Lack of boundary checking of a buffer in set_skb_priv() of modem interface driver prior to SMR Oct-2021 Release 1 allows OOB read and it results in arbitrary code execution by dereference of invalid function pointer.