Lucene search
+L

110999 matches found

OSV
OSV
added 9 hours ago4 views

ROOT-OS-UBUNTU-2204-CVE-2021-47432 CVE-2021-47432 in rootio-linux - Patched by Root

Root has patched CVE-2021-47432 in the rootio-linux package for Root:Ubuntu:22.04. Multiple fixed versions available...

5.5CVSS8.2AI score0.00238EPSS
SaveExploits0
OSV
OSV
added 9 hours ago4 views

ROOT-OS-UBUNTU-2204-CVE-2021-4095 CVE-2021-4095 in rootio-linux - Patched by Root

Root has patched CVE-2021-4095 in the rootio-linux package for Root:Ubuntu:22.04. Multiple fixed versions available...

5.5CVSS8.3AI score0.00387EPSS
SaveExploits1
OSV
OSV
added 9 hours ago4 views

ROOT-OS-UBUNTU-2204-CVE-2021-3773 CVE-2021-3773 in rootio-linux - Patched by Root

Root has patched CVE-2021-3773 in the rootio-linux package for Root:Ubuntu:22.04. Multiple fixed versions available...

9.8CVSS6.6AI score0.05279EPSS
SaveExploits1
OSV
OSV
added 9 hours ago5 views

ROOT-OS-UBUNTU-2204-CVE-2021-3714 CVE-2021-3714 in rootio-linux - Patched by Root

Root has patched CVE-2021-3714 in the rootio-linux package for Root:Ubuntu:22.04. Multiple fixed versions available...

5.9CVSS8.3AI score0.01158EPSS
SaveExploits0
OSV
OSV
added 9 hours ago6 views

ROOT-OS-UBUNTU-2204-CVE-2021-26934 CVE-2021-26934 in rootio-linux - Patched by Root

Root has patched CVE-2021-26934 in the rootio-linux package for Root:Ubuntu:22.04. Multiple fixed versions available...

7.8CVSS8.3AI score0.00346EPSS
SaveExploits0
Nuclei
Nuclei
added 11 hours ago14 views

WordPress Qubely < 1.8.6 - Unauthenticated Email Sending

Qubely WordPress plugin 1.8.6 contains an insecure deserialization caused by unauthenticated users being able to send arbitrary emails via the qubelysendformdata AJAX action, letting attackers send spam or malicious emails, exploit requires no authentication. id: CVE-2021-24916 info: name:...

7.5CVSS7.4AI score0.01714EPSS
SaveExploits2References2
Nuclei
Nuclei
added 11 hours ago86 views

AntD Admin - Sensitive Information Disclosure

AntD Admin has a security vulnerability that stems from Antd-admin 5.5.0 being affected by an incorrect access control vulnerability. Attackers can exploit this vulnerability to gain unauthorized access to some front-end interfaces, resulting in the leakage of sensitive information such as user...

7.5CVSS7.2AI score0.04305EPSS
SaveExploits1References3
Nuclei
Nuclei
added 11 hours ago58 views

Limit Login Attempts WordPress - Stored Cross-site Scripting

Limit Login Attempts WordPress plugin 4.0.50 contains a stored cross-site scripting caused by not escaping IP addresses controlled via headers like X-Forwarded-For before outputting them in reports, letting unauthenticated attackers execute scripts in admin context. id: CVE-2021-24657 info: name:...

6.1CVSS6.1AI score0.01582EPSS
SaveExploits2References2
Nuclei
Nuclei
added 11 hours ago75 views

osTicket 1.15.x - SQL Injection

A SQL injection vulnerability in the "Search" functionality of "tickets.php" page in osTicket 1.15.x allows authenticated attackers to execute arbitrary SQL commands via the "keywords" and "topicid" URL parameters combination. id: CVE-2021-45811 info: name: osTicket 1.15.x - SQL Injection author:...

6.5CVSS7.1AI score0.02454EPSS
SaveExploits1References2
Nuclei
Nuclei
added 11 hours ago13 views

Gnuboard 5 - Cross-Site Scripting

Gnuboard 5 contains a cross-site scripting vulnerability via the $GET'LGDOID' parameter. id: CVE-2021-3831 info: name: Gnuboard 5 - Cross-Site Scripting author: arafatansari severity: medium description: | Gnuboard 5 contains a cross-site scripting vulnerability via the $GET'LGDOID' parameter...

7.1CVSS6.5AI score0.01812EPSS
SaveExploits1References3
Nuclei
Nuclei
added 11 hours ago103 views

IPeakCMS 3.5 - SQL Injection

ipeak Infosystems ibexwebCMS 3.5 contains an unauthenticated Boolean-based SQL injection caused by unsanitized 'id' parameter in /cms/print.php, letting attackers execute arbitrary SQL commands, exploit requires no authentication. id: CVE-2021-3018 info: name: IPeakCMS 3.5 - SQL Injection author:...

9.8CVSS8.2AI score0.19506EPSS
SaveExploits3References3
Nuclei
Nuclei
added 11 hours ago266 views

SAP Knowledge Warehouse <=7.5.0 - Cross-Site Scripting

SAP Knowledge Warehouse 7.30, 7.31, 7.40, and 7.50 contain a reflected cross-site scripting vulnerability via the usage of one SAP KW component within a web browser. id: CVE-2021-42063 info: name: SAP Knowledge Warehouse =7.5.1 to mitigate the XSS vulnerability. reference: -...

6.1CVSS6.8AI score0.22224EPSS
SaveExploits3References5
Nuclei
Nuclei
added 11 hours ago83 views

SysAid 20.4.74 - Cross-Site Scripting

SysAid 20.4.74 contains a reflected cross-site scripting vulnerability via the KeepAlive.jsp stamp parameter. id: CVE-2021-31862 info: name: SysAid 20.4.74 - Cross-Site Scripting author: jas37 severity: medium description: SysAid 20.4.74 contains a reflected cross-site scripting vulnerability via...

6.1CVSS6AI score0.03922EPSS
SaveExploits2References5
Nuclei
Nuclei
added 11 hours ago17 views

Oliver 5 Library Server <8.00.008.053 - Local File Inclusion

Oliver 5 Library Server versions prior to 8.00.008.053 are vulnerable to local file inclusion via the FileServlet function. id: CVE-2021-45027 info: name: Oliver 5 Library Server 8.00.008.053 - Local File Inclusion author: gy741 severity: high description: Oliver 5 Library Server versions prior t...

7.5CVSS7.2AI score0.01642EPSS
SaveExploits1References3
Nuclei
Nuclei
added 11 hours ago76 views

myfactory FMS - Cross-Site Scripting

myfactory.FMS before 7.1-912 allows cross-site scripting via the UID parameter. id: CVE-2021-42565 info: name: myfactory FMS - Cross-Site Scripting author: madrobot,daffainfo severity: medium description: | myfactory.FMS before 7.1-912 allows cross-site scripting via the UID parameter. impact: |...

6.1CVSS6AI score0.05832EPSS
SaveExploits3References3
Nuclei
Nuclei
added 11 hours ago170 views

KONGA 0.14.9 - Privilege Escalation

KONGA 0.14.9 allows attackers to set higher privilege users to full administration access. The attack vector is a crafted condition, as demonstrated by the /api/user/ID at ADMIN parameter. id: CVE-2021-42192 info: name: KONGA 0.14.9 - Privilege Escalation author: rschio severity: high description...

9CVSS7.5AI score0.10066EPSS
SaveExploits2References5
Nuclei
Nuclei
added 11 hours ago60 views

ZoomSounds Plugin - Unauthenticated Arbitrary File Upload

ZoomSounds plugin for WordPress contains a file upload vulnerability in savepng.php id: CVE-2021-4449 info: name: ZoomSounds Plugin - Unauthenticated Arbitrary File Upload author: 0xnemian severity: critical description: | ZoomSounds plugin for WordPress contains a file upload vulnerability in...

9.8CVSS7.7AI score0.05439EPSS
SaveExploits2References5
Nuclei
Nuclei
added 11 hours ago45 views

WordPress JH 404 Logger <=1.1 - Cross-Site Scripting

WordPress JH 404 Logger plugin through 1.1 contains a cross-site scripting vulnerability. Referer and path of 404 pages are not properly sanitized when they are output in the WordPress dashboard, which can lead to executing arbitrary JavaScript code. id: CVE-2021-24176 info: name: WordPress JH 40...

5.4CVSS5.8AI score0.02044EPSS
SaveExploits2References5
Nuclei
Nuclei
added 11 hours ago54 views

Auerswald COMpact 5500R 7.8A and 8.0B Devices Backdoor

Auerswald COMpact 5500R 7.8A and 8.0B devices contain an unauthenticated endpoint "https://192.168.1.2/aboutstate", enabling the bad actor to gain backdoor access to a web interface that allows for resetting the administrator password. id: CVE-2021-40859 info: name: Auerswald COMpact 5500R 7.8A a...

10CVSS8AI score0.71979EPSS
SaveExploits6References4
Nuclei
Nuclei
added 11 hours ago100 views

Clansphere CMS 2011.4 - Cross-Site Scripting

Clansphere CMS 2011.4 contains an unauthenticated reflected cross-site scripting vulnerability via the "module" parameter. id: CVE-2021-27309 info: name: Clansphere CMS 2011.4 - Cross-Site Scripting author: edoardottt severity: medium description: | Clansphere CMS 2011.4 contains an unauthenticat...

6.1CVSS6AI score0.01977EPSS
SaveExploits1References4
Rows per page
Query Builder