Lucene search
+L

110999 matches found

OSV
OSV
added 8 hours ago4 views

ROOT-OS-UBUNTU-2204-CVE-2021-47432 CVE-2021-47432 in rootio-linux - Patched by Root

Root has patched CVE-2021-47432 in the rootio-linux package for Root:Ubuntu:22.04. Multiple fixed versions available...

5.5CVSS8.2AI score0.00238EPSS
SaveExploits0
OSV
OSV
added 8 hours ago4 views

ROOT-OS-UBUNTU-2204-CVE-2021-3773 CVE-2021-3773 in rootio-linux - Patched by Root

Root has patched CVE-2021-3773 in the rootio-linux package for Root:Ubuntu:22.04. Multiple fixed versions available...

9.8CVSS6.6AI score0.05279EPSS
SaveExploits1
OSV
OSV
added 8 hours ago5 views

ROOT-OS-UBUNTU-2204-CVE-2021-3714 CVE-2021-3714 in rootio-linux - Patched by Root

Root has patched CVE-2021-3714 in the rootio-linux package for Root:Ubuntu:22.04. Multiple fixed versions available...

5.9CVSS8.3AI score0.01158EPSS
SaveExploits0
OSV
OSV
added 8 hours ago4 views

ROOT-OS-UBUNTU-2204-CVE-2021-4095 CVE-2021-4095 in rootio-linux - Patched by Root

Root has patched CVE-2021-4095 in the rootio-linux package for Root:Ubuntu:22.04. Multiple fixed versions available...

5.5CVSS8.3AI score0.00387EPSS
SaveExploits1
OSV
OSV
added 8 hours ago6 views

ROOT-OS-UBUNTU-2204-CVE-2021-26934 CVE-2021-26934 in rootio-linux - Patched by Root

Root has patched CVE-2021-26934 in the rootio-linux package for Root:Ubuntu:22.04. Multiple fixed versions available...

7.8CVSS8.3AI score0.00346EPSS
SaveExploits0
Nuclei
Nuclei
added 10 hours ago14 views

WordPress Qubely < 1.8.6 - Unauthenticated Email Sending

Qubely WordPress plugin 1.8.6 contains an insecure deserialization caused by unauthenticated users being able to send arbitrary emails via the qubelysendformdata AJAX action, letting attackers send spam or malicious emails, exploit requires no authentication. id: CVE-2021-24916 info: name:...

7.5CVSS7.4AI score0.01714EPSS
SaveExploits2References2
Nuclei
Nuclei
added 10 hours ago86 views

AntD Admin - Sensitive Information Disclosure

AntD Admin has a security vulnerability that stems from Antd-admin 5.5.0 being affected by an incorrect access control vulnerability. Attackers can exploit this vulnerability to gain unauthorized access to some front-end interfaces, resulting in the leakage of sensitive information such as user...

7.5CVSS7.2AI score0.04305EPSS
SaveExploits1References3
Nuclei
Nuclei
added 10 hours ago58 views

Limit Login Attempts WordPress - Stored Cross-site Scripting

Limit Login Attempts WordPress plugin 4.0.50 contains a stored cross-site scripting caused by not escaping IP addresses controlled via headers like X-Forwarded-For before outputting them in reports, letting unauthenticated attackers execute scripts in admin context. id: CVE-2021-24657 info: name:...

6.1CVSS6.1AI score0.01582EPSS
SaveExploits2References2
Nuclei
Nuclei
added 10 hours ago75 views

osTicket 1.15.x - SQL Injection

A SQL injection vulnerability in the "Search" functionality of "tickets.php" page in osTicket 1.15.x allows authenticated attackers to execute arbitrary SQL commands via the "keywords" and "topicid" URL parameters combination. id: CVE-2021-45811 info: name: osTicket 1.15.x - SQL Injection author:...

6.5CVSS7.1AI score0.02454EPSS
SaveExploits1References2
Nuclei
Nuclei
added 10 hours ago13 views

Gnuboard 5 - Cross-Site Scripting

Gnuboard 5 contains a cross-site scripting vulnerability via the $GET'LGDOID' parameter. id: CVE-2021-3831 info: name: Gnuboard 5 - Cross-Site Scripting author: arafatansari severity: medium description: | Gnuboard 5 contains a cross-site scripting vulnerability via the $GET'LGDOID' parameter...

7.1CVSS6.5AI score0.01812EPSS
SaveExploits1References3
Nuclei
Nuclei
added 10 hours ago103 views

IPeakCMS 3.5 - SQL Injection

ipeak Infosystems ibexwebCMS 3.5 contains an unauthenticated Boolean-based SQL injection caused by unsanitized 'id' parameter in /cms/print.php, letting attackers execute arbitrary SQL commands, exploit requires no authentication. id: CVE-2021-3018 info: name: IPeakCMS 3.5 - SQL Injection author:...

9.8CVSS8.2AI score0.19506EPSS
SaveExploits3References3
Nuclei
Nuclei
added 10 hours ago266 views

SAP Knowledge Warehouse <=7.5.0 - Cross-Site Scripting

SAP Knowledge Warehouse 7.30, 7.31, 7.40, and 7.50 contain a reflected cross-site scripting vulnerability via the usage of one SAP KW component within a web browser. id: CVE-2021-42063 info: name: SAP Knowledge Warehouse =7.5.1 to mitigate the XSS vulnerability. reference: -...

6.1CVSS6.8AI score0.22224EPSS
SaveExploits3References5
Nuclei
Nuclei
added 10 hours ago83 views

SysAid 20.4.74 - Cross-Site Scripting

SysAid 20.4.74 contains a reflected cross-site scripting vulnerability via the KeepAlive.jsp stamp parameter. id: CVE-2021-31862 info: name: SysAid 20.4.74 - Cross-Site Scripting author: jas37 severity: medium description: SysAid 20.4.74 contains a reflected cross-site scripting vulnerability via...

6.1CVSS6AI score0.03922EPSS
SaveExploits2References5
Nuclei
Nuclei
added 10 hours ago17 views

Oliver 5 Library Server <8.00.008.053 - Local File Inclusion

Oliver 5 Library Server versions prior to 8.00.008.053 are vulnerable to local file inclusion via the FileServlet function. id: CVE-2021-45027 info: name: Oliver 5 Library Server 8.00.008.053 - Local File Inclusion author: gy741 severity: high description: Oliver 5 Library Server versions prior t...

7.5CVSS7.2AI score0.01642EPSS
SaveExploits1References3
Nuclei
Nuclei
added 10 hours ago59 views

WordPress Goto Tour & Travel Theme <2.0 - Cross-Site Scripting

WordPress Goto Tour & Travel theme before 2.0 contains an unauthenticated reflected cross-site scripting vulnerability. It does not sanitize the keywords and startdate GET parameters on its Tour List page. id: CVE-2021-24235 info: name: WordPress Goto Tour & Travel Theme =2.0 to mitigate the XSS...

6.1CVSS6.1AI score0.02927EPSS
SaveExploits2References5
Nuclei
Nuclei
added 10 hours ago111 views

WordPress Modern Events Calendar Lite <5.16.5 - Sensitive Information Disclosure

WordPress Modern Events Calendar Lite before 5.16.5 does not properly restrict access to the export files, allowing unauthenticated users to exports all events data in CSV or XML format. id: CVE-2021-24146 info: name: WordPress Modern Events Calendar Lite 5.16.5 - Sensitive Information Disclosure...

7.5CVSS7.2AI score0.31043EPSS
SaveExploits5References5
Nuclei
Nuclei
added 10 hours ago93 views

WordPress MF Gig Calendar <=1.1 - Cross-Site Scripting

WordPress MF Gig Calendar plugin 1.1 and prior contains a reflected cross-site scripting vulnerability. It does not sanitize or escape the id GET parameter before outputting back in the admin dashboard when editing an event. id: CVE-2021-24510 info: name: WordPress MF Gig Calendar =1.2 which...

6.1CVSS6AI score0.02721EPSS
SaveExploits1References4
Nuclei
Nuclei
added 10 hours ago58 views

WordPress Super Socializer <7.13.30 - Cross-Site Scripting

WordPress Super Socializer plugin before 7.13.30 contains a reflected cross-site scripting vulnerability. It does not sanitize and escape the urls parameter in its thechampsharingcount AJAX action available to both unauthenticated and authenticated users before outputting it back in the response...

6.1CVSS6AI score0.01938EPSS
SaveExploits1References3
Nuclei
Nuclei
added 10 hours ago45 views

WordPress JH 404 Logger <=1.1 - Cross-Site Scripting

WordPress JH 404 Logger plugin through 1.1 contains a cross-site scripting vulnerability. Referer and path of 404 pages are not properly sanitized when they are output in the WordPress dashboard, which can lead to executing arbitrary JavaScript code. id: CVE-2021-24176 info: name: WordPress JH 40...

5.4CVSS5.8AI score0.02044EPSS
SaveExploits2References5
Nuclei
Nuclei
added 10 hours ago54 views

Auerswald COMpact 5500R 7.8A and 8.0B Devices Backdoor

Auerswald COMpact 5500R 7.8A and 8.0B devices contain an unauthenticated endpoint "https://192.168.1.2/aboutstate", enabling the bad actor to gain backdoor access to a web interface that allows for resetting the administrator password. id: CVE-2021-40859 info: name: Auerswald COMpact 5500R 7.8A a...

10CVSS8AI score0.71979EPSS
SaveExploits6References4
Rows per page
Query Builder