CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

5665 matches found

Rapid7 Vulnerability Database (full)•added 2023/05/15 12:00 a.m.•4 views

CVE-2023-31409: Uncontrolled Resource Consumption

Uncontrolled Resource Consumption in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 allows an remote attacker to influence the availability of the webserver by invocing a Slowloris style attack via HTTP requests...

7.5CVSS5.9AI score0.01127EPSS

SaveExploits0References8

zdt•added 2023/05/05 12:00 a.m.•232 views

EasyPHP Webserver 14.1 - Multiple Vulnerabilities (RCE and Path Traversal) Exploit

Exploit Title: EasyPHP Webserver 14.1 - Multiple Vulnerabilities RCE and Path Traversal Discovery by: Rafael Pedrero Discovery Date: 2022-02-06 Vendor Homepage: https://www.easyphp.org/ Software Link : https://www.easyphp.org/ Tested Version: 14.1 Tested on: Windows 7 and 10 Vulnerability Type:...

7.1AI score

SaveExploits0

Packet Storm•added 2023/05/05 12:00 a.m.•297 views

EasyPHP Webserver 14.1 Path Traversal / Remote Code Execution

7.1AI score

SaveExploits0

Exploit DB•added 2023/05/05 12:00 a.m.•375 views

EasyPHP Webserver 14.1 - Multiple Vulnerabilities (RCE and Path Traversal)

5.3AI score

SaveExploits0

zdt•added 2023/05/05 12:00 a.m.•253 views

Jedox 2022.4.2 - Disclosure of Database Credentials via Connection Checks Vulnerability

Exploit Title: Jedox 2022.4.2 - Disclosure of Database Credentials via Connection Checks Exploit Author: Team Syslifters / Christoph MAHRL, Aron MOLNAR, Patrick PIRKER and Michael WEDL Vendor Homepage: https://jedox.com Version: Jedox 2022.4 22.4.2 and older CVE : CVE-2022-47880 Introduction...

6.8CVSS5.4AI score0.02926EPSS

SaveExploits4

Github Security Blog•added 2023/05/02 4:43 p.m.•43 views

Pimcore Path Traversal Vulnerability in AdminBundle/Controller/Reports/CustomReportController.php

Impact The impact of this path traversal and arbitrary extension is limited creation of arbitrary files and appending data to existing files but when combined with the SQL Injection, the exported data RESTRICTED DIFFUSION 9 / 9 can be controlled and a webshell can be uploaded. Attackers can use...

7.5CVSS8.3AI score0.00795EPSS

SaveExploits0References6Affected Software1

Tenable Nessus•added 2023/05/02 12:00 a.m.•36 views

Siemens Industrial Products Allocation of Resources Without Limits or Throttling (CVE-2022-43768)

A vulnerability has been identified in SIMATIC CP 1242-7 V2 All versions, SIMATIC CP 1243-1 All versions, SIMATIC CP 1243-1 DNP3 incl. SIPLUS variants All versions, SIMATIC CP 1243-1 IEC incl. SIPLUS variants All versions, SIMATIC CP 1243-7 LTE EU All versions, SIMATIC CP 1243-7 LTE US All...

7.5CVSS7.1AI score0.00954EPSS

SaveExploits0References3

Exploit DB•added 2023/05/02 12:00 a.m.•306 views

Serendipity 2.4.0 - File Inclusion RCE

Exploit Title: Serendipity 2.4.0 - File Inclusion RCE Author: nu11secur1ty Date: 04.26.2023 Vendor: https://docs.s9y.org/index.html Software: https://github.com/s9y/Serendipity/releases/tag/2.4.0 Reference: https://portswigger.net/web-security/file-upload Reference:...

5.3AI score

SaveExploits0

Tenable Nessus•added 2023/05/02 12:00 a.m.•23 views

Siemens Industrial Products Use After Free (CVE-2022-43716)

7.5CVSS7AI score0.00954EPSS

SaveExploits0References3

Tenable Nessus•added 2023/05/02 12:00 a.m.•45 views

Siemens Industrial Products Deadlock (CVE-2022-43767)

7.5CVSS7.1AI score0.00723EPSS

SaveExploits0References3

attackerkb•added 2023/04/27 9:15 p.m.•245 views

CVE-2023-29489

An issue was discovered in cPanel before 11.109.9999.116. XSS can occur on the cpsrvd error page via an invalid webcall ID, aka SEC-669. The fixed versions are 11.109.9999.116, 11.108.0.13, 11.106.0.18, and 11.102.0.31...

6.1CVSS6.6AI score0.65533EPSS

SaveIn wildExploits7References4

OSV•added 2023/04/24 9:15 a.m.•12 views

CVE-2023-22581

White Rabbit Switch contains a vulnerability which makes it possible for an attacker to perform system commands under the context of the web application the default installation makes the webserver run as the root user...

9.8CVSS5.8AI score0.00712EPSS

SaveExploits0References3

Prion•added 2023/04/18 9:15 p.m.•27 views

Cross site scripting

A CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability exists on a DCE endpoint through the logging capabilities of the webserver. Affected products: StruxureWare Data Center Expert V7.9.2 and prior...

5.8CVSS6.3AI score0.00392EPSS

SaveExploits0References1Affected Software1

Cvelist•added 2023/04/18 8:38 p.m.•52 views

CVE-2023-25553

6.1CVSS6.5AI score0.00392EPSS

SaveExploits0References1

Rapid7 Vulnerability Database (full)•added 2023/04/18 12:00 a.m.•3 views

CVE-2023-25553: Improper Neutralization of Input During Web Page Generation

6.1CVSS5.8AI score0.00392EPSS

SaveExploits0References2

GithubExploit•added 2023/04/17 1:54 p.m.•351 views

Exploit for Code Injection in Vmware Spring_Cloud_Function

Spring Cloud Function Vulnerability CVE-2022-22963 RCE This...

9.8CVSS7.7AI score0.99938EPSS

SaveExploits37

OSV•added 2023/04/11 10:15 a.m.•19 views

CVE-2022-43716

A vulnerability has been identified in SIMATIC CP 1242-7 V2 6GK7242-7KX31-0XE0 All versions V3.4.29, SIMATIC CP 1243-1 6GK7243-1BX30-0XE0 All versions V3.4.29, SIMATIC CP 1243-1 DNP3 incl. SIPLUS variants All versions V3.4.29, SIMATIC CP 1243-1 IEC incl. SIPLUS variants All versions V3.4.29,...

7.5CVSS5.7AI score0.00954EPSS

SaveExploits0References3

OSV•added 2023/04/11 10:15 a.m.•20 views

CVE-2022-43767

7.5CVSS5.7AI score0.00723EPSS

SaveExploits0References3

NVD•added 2023/04/11 10:15 a.m.•45 views

CVE-2022-43716

7.5CVSS7.3AI score0.00954EPSS

SaveExploits0References3

OSV•added 2023/04/11 10:15 a.m.•16 views

CVE-2022-43768

7.5CVSS5.7AI score0.00954EPSS

SaveExploits0References3

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by