Lucene search
+L

15229 matches found

CNVD
CNVD
added 2021/12/01 12:00 a.m.43 views

Acronis Cyber Protect 15 Cross-Site Scripting Vulnerability

Acronis Cyber Protect is an application. providing unified protection for your network by integrating backup, disaster recovery, artificial intelligence-based malware protection, remote assistance and security into a single, reliable tool.Acronis Cyber Protect 15 suffers from a cross-site scripti...

5.4CVSS3.3AI score0.00451EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/12/01 12:00 a.m.47 views

Acronis Cyber Protect 15 Cross-Site Scripting Vulnerability (CNVD-2021-100274)

Acronis Cyber Protect is an application. Provides unified protection for your network by integrating backup, disaster recovery, artificial intelligence-based malware protection, remote assistance and security into a single, reliable tool. Acronis Cyber Protect 15 suffers from a cross-site scripti...

5.4CVSS3.1AI score0.00451EPSS
SaveExploits0References1
CNVD
CNVD
added 2021/12/01 12:00 a.m.54 views

Acronis Cyber Protect 15 Cross-Site Scripting Vulnerability (CNVD-2021-100276)

Acronis Cyber Protect is an application. Provides unified protection for your network by integrating backup, disaster recovery, artificial intelligence-based malware protection, remote assistance and security into a single, reliable tool. Acronis Cyber Protect 15 suffers from a cross-site scripti...

6.1CVSS3.1AI score0.00562EPSS
SaveExploits0References1
OSV
OSV
added 2021/11/29 2:15 p.m.12 views

CVE-2021-43695

issabelPBX version 2.11 is affected by a Cross Site Scripting XSS vulnerability. In file page.backuprestore.php, the exit function will terminate the script and print the message to the user. The message will contain $REQUEST without sanitization, then there is a XSS vulnerability...

6.1CVSS6.4AI score0.00555EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2021/11/29 2:15 p.m.5 views

CVE-2021-43695

issabelPBX version 2.11 is affected by a Cross Site Scripting XSS vulnerability. In file page.backuprestore.php, the exit function will terminate the script and print the message to the user. The message will contain $REQUEST without sanitization, then there is a XSS vulnerability...

6.1CVSS6.4AI score0.00555EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2021/11/29 12:00 a.m.10 views

IssabelPbx 跨站脚本漏洞

IssabelPbx is an open source Gui Graphical User Interface from the Issabel Foundation. It is used to control and manage Asterisk Pbx. Issabel issabelPBX suffers from a cross-site scripting vulnerability that originates in the file page.backuprestore.php, where the exit function will terminate the...

6.1CVSS5.2AI score0.00555EPSS
SaveExploits1References2
Check Point Advisories
Check Point Advisories
added 2021/11/28 12:00 a.m.25 views

Quest NetVault Backup Remote Code Execution (CVE-2017-17419)

A remote code execution vulnerability exists in Quest NetVault Backup. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

7.5CVSS9.5AI score0.0386EPSS
SaveExploits0
Veeam
Veeam
added 2021/11/26 12:00 a.m.69 views

Release Information for Veeam Backup & Replication 11a Cumulative Patches

More Recent Version Available Please find the latest version of Veeam Backup & Replication here: Veeam Downloads - Latest Version Requirements Before installing this Cumulative Patch using the Patch Installer, please confirm that you are running Veeam Backup & Replication 11a build 11.0.1.1261 wi...

9.8CVSS8.3AI score0.78483EPSS
SaveExploits10Affected Software1
OSV
OSV
added 2021/11/23 8:15 p.m.8 views

CVE-2021-24877

The MainWP Child WordPress plugin before 4.1.8 does not validate the orderby and order parameter before using them in a SQL statement, leading to an SQL injection exploitable by high privilege users such as admin when the Backup and Staging by WP Time Capsule plugin is installed...

7.2CVSS5.8AI score0.01238EPSS
SaveExploits2References1
Prion
Prion
added 2021/11/23 8:15 p.m.21 views

Sql injection

The MainWP Child WordPress plugin before 4.1.8 does not validate the orderby and order parameter before using them in a SQL statement, leading to an SQL injection exploitable by high privilege users such as admin when the Backup and Staging by WP Time Capsule plugin is installed...

6CVSS7.1AI score0.01238EPSS
SaveExploits2References1Affected Software1
Cvelist
Cvelist
added 2021/11/23 7:16 p.m.41 views

CVE-2021-24877 MainWP Child < 4.1.8 - Admin+ SQL Injection

The MainWP Child WordPress plugin before 4.1.8 does not validate the orderby and order parameter before using them in a SQL statement, leading to an SQL injection exploitable by high privilege users such as admin when the Backup and Staging by WP Time Capsule plugin is installed...

7.4AI score0.01238EPSS
SaveExploits2References1
Veracode
Veracode
added 2021/11/23 6:10 a.m.24 views

Remote Code Execution (RCE)

moodle/moodle is vulnerable to remote code execution. An attacker can inject and execute malicious code when restoring the backup files...

9.8CVSS3.6AI score0.02383EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2021/11/23 12:00 a.m.22 views

GHSA-8JHP-2GCR-QW96 Moodle vulnerable to RCE via unsafe deserialization

A flaw was found in Moodle in versions 3.11 to 3.11.3, 3.10 to 3.10.7, 3.9 to 3.9.10 and earlier unsupported versions. A remote code execution risk when restoring backup files was identified...

9.8CVSS9.6AI score0.02383EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2021/11/23 12:00 a.m.26 views

Moodle vulnerable to RCE via unsafe deserialization

A flaw was found in Moodle in versions 3.11 to 3.11.3, 3.10 to 3.10.7, 3.9 to 3.9.10 and earlier unsupported versions. A remote code execution risk when restoring backup files was identified...

9.8CVSS7.9AI score0.02383EPSS
SaveExploits0References5Affected Software1
CNVD
CNVD
added 2021/11/23 12:00 a.m.78 views

Commvault CommCell Authentication Bypass Vulnerability

Commvault CommCell enables fast, large-scale backup and recovery of virtual machines, structured and unstructured data.An authentication bypass vulnerability exists in the CVSearchService service in versions of Commvault CommCell prior to 11.25, which could be exploited by an attacker to bypass...

9.8CVSS5AI score0.05424EPSS
SaveExploits0References1
OSV
OSV
added 2021/11/22 4:15 p.m.20 views

CVE-2021-3943

A flaw was found in Moodle in versions 3.11 to 3.11.3, 3.10 to 3.10.7, 3.9 to 3.9.10 and earlier unsupported versions. A remote code execution risk when restoring backup files was identified...

9.8CVSS9.7AI score
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2021/11/22 4:15 p.m.7 views

CVE-2021-3943

A flaw was found in Moodle in versions 3.11 to 3.11.3, 3.10 to 3.10.7, 3.9 to 3.9.10 and earlier unsupported versions. A remote code execution risk when restoring backup files was identified...

9.8CVSS7.8AI score0.02383EPSS
SaveExploits0References3
NVD
NVD
added 2021/11/22 4:15 p.m.26 views

CVE-2021-3943

A flaw was found in Moodle in versions 3.11 to 3.11.3, 3.10 to 3.10.7, 3.9 to 3.9.10 and earlier unsupported versions. A remote code execution risk when restoring backup files was identified...

9.8CVSS0.02383EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2021/11/22 4:15 p.m.34 views

CVE-2021-3943

A flaw was found in Moodle in versions 3.11 to 3.11.3, 3.10 to 3.10.7, 3.9 to 3.9.10 and earlier unsupported versions. A remote code execution risk when restoring backup files was identified...

9.8CVSS7.7AI score0.02383EPSS
SaveExploits0References3
OSV
OSV
added 2021/11/22 4:15 p.m.15 views

UBUNTU-CVE-2021-3943

A flaw was found in Moodle in versions 3.11 to 3.11.3, 3.10 to 3.10.7, 3.9 to 3.9.10 and earlier unsupported versions. A remote code execution risk when restoring backup files was identified...

9.8CVSS6.4AI score0.02383EPSS
SaveExploits0References4
Rows per page
Query Builder