Lucene search
+L
AttackerkbMost viewed

96138 matches found

ATTACKERKB
ATTACKERKB
added 2026/03/10 9:25 p.m.40 views

CVE-2026-31821

Sylius is an Open Source eCommerce Framework on Symfony. The POST /api/v2/shop/orders/tokenValue/items endpoint does not verify cart ownership. An unauthenticated attacker can add items to other registered customers' carts by knowing the cart tokenValue. An attacker who obtains a cart tokenValue...

6.9CVSS5.9AI score0.00182EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/03/09 7:35 p.m.40 views

CVE-2025-62166

FreshRSS is a free, self-hostable RSS aggregator. Prior 1.28.0, a bug in the auth logic related to master authentication tokens, this restriction is bypassed. Usually only the default user's feed should be viewable if anonymous viewing is enabled, and feeds of other users should be private. This...

7.5CVSS5.8AI score0.0038EPSS
SaveExploits1References5Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/02/24 9:15 p.m.40 views

CVE-2026-27195

Wasmtime is a runtime for WebAssembly. Starting with Wasmtime 39.0.0, the component-model-async feature became the default, which brought with it a new implementation of TypedFunc::callasync which made it capable of calling async-typed guest export functions. However, that implementation had a bu...

7.5CVSS5.8AI score0.00362EPSS
SaveExploits0References7Affected Software1
ATTACKERKB
ATTACKERKB
added 2025/11/18 11:24 a.m.40 views

CVE-2025-41348

SQL injection vulnerability in WinPlus v24.11.27 by Informática del Este. This vulnerability allows an attacker recover, create, update an delete databases by sendng a POST request using the parameters 'val1' and 'cont in '/WinplusPortal/ws/sWinplus.svc/json/getacumperpost'...

9.8CVSS5.8AI score0.00544EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2025/05/13 12:00 a.m.40 views

CVE-2025-30397

Access of resource using incompatible type ‘type confusion’ in Microsoft Scripting Engine allows an unauthorized attacker to execute code over a network. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...

7.5CVSS7.1AI score0.26835EPSS
SaveExploits7References2
ATTACKERKB
ATTACKERKB
added 2024/08/05 12:00 a.m.40 views

CVE-2024-38856

Incorrect Authorization vulnerability in Apache OFBiz. This issue affects Apache OFBiz: through 18.12.14. Users are recommended to upgrade to version 18.12.15, which fixes the issue. Unauthenticated endpoints could allow execution of screen rendering code of screens if some preconditions are met...

9.8CVSS7.3AI score0.99427EPSS
SaveExploits11References5
ATTACKERKB
ATTACKERKB
added 2024/07/01 12:00 a.m.40 views

CVE-2024-20399

A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated user in possession of Administrator credentials to execute arbitrary commands as root on the underlying operating system of an affected device. This vulnerability is due to insufficient validation of arguments that ar...

6.7CVSS7.2AI score0.04306EPSS
SaveExploits1References3
ATTACKERKB
ATTACKERKB
added 2024/03/05 12:00 a.m.40 views

CVE-2024-23296

A memory corruption issue was addressed with improved validation. This issue is fixed in iOS 17.4 and iPadOS 17.4. An attacker with arbitrary kernel read and write capability may be able to bypass kernel memory protections. Apple is aware of a report that this issue may have been exploited. Recen...

7.8CVSS6.3AI score0.01411EPSS
SaveExploits0References17
ATTACKERKB
ATTACKERKB
added 2023/12/24 10:15 p.m.40 views

CVE-2023-7102

Use of a Third Party library produced a vulnerability in Barracuda Networks Inc. Barracuda ESG Appliance which allowed Parameter Injection.This issue affected Barracuda ESG Appliance, from 5.1.3.001 through 9.2.1.001, until Barracuda removed the vulnerable logic...

9.8CVSS7.5AI score0.44575EPSS
SaveExploits2References8
ATTACKERKB
ATTACKERKB
added 2023/09/21 12:00 a.m.40 views

CVE-2023-41993

The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.7. Recent assessments: Assessed...

8.8CVSS9.1AI score0.29179EPSS
SaveExploits3References23
ATTACKERKB
ATTACKERKB
added 2022/11/08 12:00 a.m.40 views

CVE-2022-31199

Remote code execution vulnerabilities exist in the Netwrix Auditor User Activity Video Recording component affecting both the Netwrix Auditor server and agents installed on monitored systems. The remote code execution vulnerabilities exist within the underlying protocol used by the component, and...

9.8CVSS10AI score0.36009EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2022/10/11 7:15 p.m.40 views

CVE-2022-38027

Windows Storage Elevation of Privilege Vulnerability...

7CVSS7.1AI score0.00392EPSS
SaveExploits0References3Affected Software18
ATTACKERKB
ATTACKERKB
added 2022/09/26 12:00 a.m.40 views

CVE-2022-3038

Use after free in Network Service in Google Chrome prior to 105.0.5195.52 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...

8.8CVSS8.8AI score0.24738EPSS
SaveExploits1References7
ATTACKERKB
ATTACKERKB
added 2022/07/03 1:15 p.m.40 views

CVE-2022-2288

Out-of-bounds Write in GitHub repository vim/vim prior to 9.0...

7.8CVSS6.8AI score0.01387EPSS
SaveExploits1References9
ATTACKERKB
ATTACKERKB
added 2022/05/05 5:15 p.m.40 views

CVE-2022-28079

College Management System v1.0 was discovered to contain a SQL injection vulnerability via the coursecode parameter...

8.8CVSS6AI score0.28512EPSS
SaveExploits5References6
ATTACKERKB
ATTACKERKB
added 2022/03/18 4:21 p.m.40 views

CVE-2022-25607

Authenticated author or higher user role SQL Injection SQLi vulnerability discovered in FV Flowplayer Video Player WordPress plugin versions = 7.5.15.727...

7.2CVSS7.5AI score0.00827EPSS
SaveExploits0References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2021/09/15 12:00 a.m.40 views

CVE-2021-33045

The identity authentication bypass vulnerability found in some Dahua products during the login process. Attackers can bypass device identity authentication by constructing malicious data packets. Recent assessments: cbeek-r7 at September 06, 2024 6:04pm UTC reported: On September 5th 2024, CISA...

10CVSS9.6AI score0.99871EPSS
SaveExploits13References4
ATTACKERKB
ATTACKERKB
added 2020/12/08 12:00 a.m.40 views

CVE-2020-27930

A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.0.1, watchOS 7.1, iOS 12.4.9, watchOS 6.2.9, Security Update 2020-006 High Sierra, Security Update 2020-006 Mojave, iOS 14.2 and iPadOS 14.2, watchOS 5.3.9, macOS Catalina 10.15.7...

7.8CVSS7.6AI score0.22009EPSS
SaveExploits0References11
ATTACKERKB
ATTACKERKB
added 2020/10/16 12:00 a.m.40 views

CVE-2020-16896

An information disclosure vulnerability exists in Remote Desktop Protocol RDP when an attacker connects to the target system using RDP and sends specially crafted requests, aka ‘Windows Remote Desktop Protocol RDP Information Disclosure Vulnerability’. Recent assessments: 0J3lack0 at November 27,...

7.5CVSS7.2AI score0.12604EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2020/05/21 12:00 a.m.40 views

CVE-2020-1143

An elevation of privilege vulnerability exists in Windows when the Windows kernel-mode driver fails to properly handle objects in memory, aka ‘Win32k Elevation of Privilege Vulnerability’. This CVE ID is unique from CVE-2020-1054. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker...

7.8CVSS8.6AI score0.54158EPSS
SaveExploits5References2
ATTACKERKB
ATTACKERKB
added 2020/05/19 8:59 a.m.40 views

CVE-2020-8616: NXNSAttack: Recursive DNS Inefficiencies and Vulnerabilities

A malicious actor who intentionally exploits this lack of effective limitation on the number of fetches performed when processing referrals can, through the use of specially crafted referrals, cause a recursing server to issue a very large number of fetches in an attempt to process the referral...

8.6CVSS6.5AI score0.10593EPSS
SaveExploits1References21
ATTACKERKB
ATTACKERKB
added 2020/04/21 12:00 a.m.40 views

CVE-2020-4428

IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, and 2.0.4 could allow a remote authenticated attacker to execute arbitrary commands on the system. IBM X-Force ID: 180533. Recent assessments: wvu-r7 at May 08, 2020 4:04pm UTC reported: Assessment for the related CVEs here:...

9.1CVSS9.1AI score0.61692EPSS
SaveExploits8References3
ATTACKERKB
ATTACKERKB
added 2020/03/17 12:00 a.m.40 views

CVE-2020-3950

VMware Fusion 11.x before 11.5.2, VMware Remote Console for Mac 11.x and prior before 11.0.1 and Horizon Client for Mac 5.x and prior before 5.4.0 contain a privilege escalation vulnerability due to improper use of setuid binaries. Successful exploitation of this issue may allow attackers with...

7.8CVSS8AI score0.07254EPSS
SaveExploits10References5
ATTACKERKB
ATTACKERKB
added 2020/03/02 12:00 a.m.40 views

CVE-2019-17026

Incorrect alias information in IonMonkey JIT compiler for setting array elements could lead to a type confusion. We are aware of targeted attacks in the wild abusing this flaw. This vulnerability affects Firefox ESR 68.4.1, Thunderbird 68.4.1, and Firefox 72.0.1. Recent assessments: gwillcox-r7 a...

8.8CVSS8.2AI score0.46311EPSS
SaveExploits7References11
ATTACKERKB
ATTACKERKB
added 2020/02/11 12:00 a.m.40 views

CVE-2020-0753

An elevation of privilege vulnerability exists in Windows Error Reporting WER when WER handles and executes files, aka ‘Windows Error Reporting Elevation of Privilege Vulnerability’. This CVE ID is unique from CVE-2020-0754. Recent assessments: tekwizz123 at February 23, 2020 6:25pm UTC reported:...

7.8CVSS8.3AI score0.02313EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2020/02/03 12:00 a.m.40 views

CVE-2020-8597 rhostname buffer overflow in pppd

eap.c in pppd in ppp 2.4.2 through 2.4.8 has an rhostname buffer overflow in the eaprequest and eapresponse functions. Recent assessments: wvu-r7 at March 10, 2020 6:33pm UTC reported: AFAIK, it is common to enable full mitigations on the binary, with ASLR enabled on the system. While this doesn’...

9.8CVSS3.4AI score0.19925EPSS
SaveExploits3References15
ATTACKERKB
ATTACKERKB
added 2020/01/07 7:15 p.m.40 views

CVE-2020-5308

PHPGurukul Dairy Farm Shop Management System 1.0 is vulnerable to XSS, as demonstrated by the category and CategoryCode parameters in add-category.php, the CompanyName parameter in add-company.php, and the ProductName parameter in add-product.php...

9.8CVSS7AI score0.15652EPSS
SaveExploits3References6
ATTACKERKB
ATTACKERKB
added 2019/12/30 12:00 a.m.40 views

CVE-2019-20085

TVT NVMS-1000 devices allow GET /.. Directory Traversal Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...

7.5CVSS7.4AI score0.96071EPSS
SaveExploits6References3
ATTACKERKB
ATTACKERKB
added 2019/10/17 12:00 a.m.40 views

CVE-2019-14287

In Sudo before 1.8.28, an attacker with access to a Runas ALL sudoer account can bypass certain policy blacklists and session PAM modules, and can cause incorrect logging, by invoking sudo with a crafted user ID. For example, this allows bypass of !root configuration, and USER= logging, for a “su...

9CVSS2.6AI score0.63764EPSS
SaveExploits12References37
ATTACKERKB
ATTACKERKB
added 2019/09/11 12:00 a.m.40 views

CVE-2019-1278

An elevation of privilege vulnerability exists in the way that the unistore.dll handles objects in memory, aka ‘Windows Elevation of Privilege Vulnerability’. This CVE ID is unique from CVE-2019-1215, CVE-2019-1253, CVE-2019-1303. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker...

7.8CVSS8.3AI score0.19254EPSS
SaveExploits8References2
ATTACKERKB
ATTACKERKB
added 2019/09/03 12:00 a.m.40 views

CVE-2019-15043

In Grafana 2.x through 6.x before 6.3.4, parts of the HTTP API allow unauthenticated use. This makes it possible to run a denial of service attack against the server running Grafana. Recent assessments: h0ffayyy at September 26, 2020 6:21pm UTC reported: The Dashboard Snapshot API allows an...

7.5CVSS1.7AI score0.63388EPSS
SaveExploits1References15
ATTACKERKB
ATTACKERKB
added 2019/07/19 12:00 a.m.40 views

CVE-2019-1579

Remote Code Execution in PAN-OS 7.1.18 and earlier, PAN-OS 8.0.11-h1 and earlier, and PAN-OS 8.1.2 and earlier with GlobalProtect Portal or GlobalProtect Gateway Interface enabled may allow an unauthenticated remote attacker to execute arbitrary code. Recent assessments: busterb at July 24, 2019...

8.1CVSS3.5AI score0.46239EPSS
SaveExploits2References6
ATTACKERKB
ATTACKERKB
added 2019/06/18 12:00 a.m.40 views

VLC zlib_decompress_extra Double Free Vulnerability

VLC media player is a free and open-source portable cross-platform media player software developed by the VideoLAN project. VLC is available for desktop operating systems and mobile platforms, such as Android, iOS, iPadOS, Wizen, Windows 10 Mobile, and Windows Phone. It is also available on digit...

9.8CVSS0.3AI score0.02392EPSS
SaveExploits0References9
ATTACKERKB
ATTACKERKB
added 2018/03/28 12:00 a.m.40 views

CVE-2018-0158

A vulnerability in the Internet Key Exchange Version 2 IKEv2 module of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a memory leak or a reload of an affected device that leads to a denial of service DoS condition. The vulnerability is due to...

8.6CVSS4.3AI score0.0719EPSS
SaveExploits0References6
ATTACKERKB
ATTACKERKB
added 2017/10/22 12:00 a.m.40 views

CVE-2017-11292

Adobe Flash Player version 27.0.0.159 and earlier has a flawed bytecode verification procedure, which allows for an untrusted value to be used in the calculation of an array index. This can lead to type confusion, and successful exploitation could lead to arbitrary code execution. Recent...

8.8CVSS5AI score0.11885EPSS
SaveExploits0References6
ATTACKERKB
ATTACKERKB
added 2017/08/09 12:00 a.m.40 views

CVE-2015-2291

1 IQVW32.sys before 1.3.1.0 and 2 IQVW64.sys before 1.3.1.0 in the Intel Ethernet diagnostics driver for Windows allows local users to cause a denial of service or possibly execute arbitrary code with kernel privileges via a crafted a 0x80862013, b 0x8086200B, © 0x8086200F, or d 0x80862007 IOCTL...

7.8CVSS7.8AI score0.09011EPSS
SaveExploits7References7
ATTACKERKB
ATTACKERKB
added 2016/08/09 12:00 a.m.40 views

CVE-2016-3310

The kernel-mode drivers in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allow local users to gain privileges via a crafted application, aka “Win32k Elevation of...

7.8CVSS7.6AI score0.20625EPSS
SaveExploits8References5
ATTACKERKB
ATTACKERKB
added 2015/10/22 12:00 a.m.40 views

CVE-2015-4902

Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60 allows remote attackers to affect integrity via unknown vectors related to Deployment. Recent assessments: gwillcox-r7 at November 23, 2020 6:18pm UTC reported: Reported as exploited in the wild as part of Google’s 2020 0day...

5.3CVSS3.4AI score0.13354EPSS
SaveExploits0References23
ATTACKERKB
ATTACKERKB
added 2014/02/14 12:00 a.m.40 views

Microsoft Internet Explorer Use-After-Free Vulnerability

Use-after-free vulnerability in Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code via vectors involving crafted JavaScript code, CMarkup, and the onpropertychange attribute of a script element, as exploited in the wild in January and February 2014. Recent...

9.3CVSS0.6AI score0.85175EPSS
SaveExploits35References12
ATTACKERKB
ATTACKERKB
added 2013/05/15 12:00 a.m.40 views

CVE-2013-1308

Use-after-free vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to a deleted object, aka “Internet Explorer Use After Free Vulnerability,” a different vulnerability than CVE-2013-1309 and...

9.3CVSS8.2AI score0.74096EPSS
SaveExploits12References4
ATTACKERKB
ATTACKERKB
added 2012/10/16 12:00 a.m.40 views

CVE-2012-5076

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 7 and earlier allows remote attackers to affect confidentiality, integrity, and availability, related to JAX-WS. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed...

10CVSS6.5AI score0.91013EPSS
SaveExploits18References11
ATTACKERKB
ATTACKERKB
added 2026/08/18 5:10 p.m.39 views

CVE-2026-48744

Saleor is an e-commerce platform. From 3.14.67 until 3.21.67, 3.22.63, and 3.23.22, a broken authorization check in saleor/permission/utils.py can incorrectly authorize unauthenticated GraphQL requests. The flaw permits anonymous callers to use the channelUpdate mutation to change channel order...

6.5CVSS5.3AI score0.00278EPSS
SaveExploits0References9Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/08/18 4:52 p.m.39 views

CVE-2026-50577

ePA 3.x Integration implements the authorization workflow and writes Medical Information Objects to Germany's electronic patient record. Prior to 1.3.0, ePA 3.x Integration leaves requestcounter unchanged in app/vau/VAUProtokoll.py while constructing VAU messages. The frozen client request counte...

7.4CVSS5.4AI score0.00314EPSS
SaveExploits0References6Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/08/18 4:51 p.m.39 views

CVE-2026-50578

ePA 3.x Integration implements the authorization workflow and writes Medical Information Objects to Germany's electronic patient record. Prior to 1.3.0, ePA 3.x Integration disables TLS certificate verification for both ePA connections in app/vau/VAUProtokoll.py and Konnektor connections in...

7.5CVSS5.5AI score0.00185EPSS
SaveExploits0References4Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/08/18 4:36 p.m.39 views

CVE-2026-50126

Adaguc-server is an open source geographical information system to visualize, combine, compare and share real-time meteorological, climatological and remote sensing data via OGC standards. Versions prior to 7.2.2 crash with a memory-safety fault when it parses a GeoJSON document whose geometry...

4CVSS5.3AI score0.00124EPSS
SaveExploits0References5Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/08/18 4:27 p.m.39 views

CVE-2026-63337

The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes. Prior to 5.33.0, com.rabbitmq.tools.jsonrpc.ProcedureDescription receives a javaReturnType value in an untrusted system.describe response and passes it through JSONUtil.tryFill,...

7.5CVSS5.3AI score0.00317EPSS
SaveExploits0References7Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/08/18 4:02 p.m.39 views

CVE-2026-71574

Joomla! Core - 20260803 - Inconsistent ACL checks for mutating webservice endpoints in Joomla 4.0.0-5.4.7, 6.0.0-6.1.2 - An improper access check allows unauthorized users to perform mutation actions in webservice endpoints, where the same mutation was restricted in the backend UI...

8.5CVSS5.3AI score0.002EPSS
SaveExploits0References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/08/18 2:59 p.m.39 views

CVE-2026-70657

Copyparty is a portable file server. Prior to 1.20.17, copyparty volumes with the dk or dks directory-key flag combined with the fk or fka file-key flag can convert a valid file key into a directory key, granting read access to the containing folder even though both features are disabled by defau...

4.3CVSS5.3AI score0.00317EPSS
SaveExploits0References4Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/08/18 2:34 p.m.39 views

CVE-2026-59940

Seroval facilitates JS value stringification, including complex structures beyond JSON.stringify capabilities. Prior to 1.5.3, seroval.fromJSON allows attacker-controlled JSON Promise control nodes to operate on values from the general deserialization reference table without verifying genuine...

9.8CVSS6.4AI score0.00615EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/08/18 2:23 p.m.39 views

CVE-2026-63639

Valkey is a distributed key-value database. Prior to 7.2.14, 8.0.10, 8.1.9, 9.0.5, and 9.1.1, Valkey's RESTORE command accepts a malformed RDB stream payload that assigns one Pending Entry List NACK to multiple consumers during stream consumer-group deserialization, causing a use-after-free when...

8.8CVSS5.9AI score0.00888EPSS
SaveExploits0References13Affected Software1
Total number of security vulnerabilities5000