Lucene search
+L
CvelistMost viewed

381346 matches found

Cvelist
Cvelist
•added 2024/08/26 12:0 a.m.•74 views

CVE-2024-41996

Validating the order of the public keys in the Diffie-Hellman Key Agreement Protocol, when an approved safe prime is used, allows remote attackers from the client side to trigger unnecessarily expensive server-side DHE modular-exponentiation calculations. The client may cause asymmetric resource...

0.01083EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2024/08/06 4:54 a.m.•74 views

CVE-2024-39817

Insertion of sensitive information into sent data issue exists in Cybozu Office 10.0.0 to 10.8.6, which may allow a user who can login to the product to view data that the user does not have access by conducting 'search' under certain conditions in Custom App...

0.00417EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2024/07/29 4:20 p.m.•74 views

CVE-2024-6748 SQL Injection

Zohocorp ManageEngine OpManager, OpManager Plus, OpManager MSP and RMM versions 128317 and below are vulnerable to authenticated SQL injection in the URL monitoring...

8.3CVSS0.23784EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/07/29 6:0 a.m.•74 views

CVE-2024-6366 User Profile Builder < 3.11.8 - Unauthenticated Media Upload

The User Profile Builder WordPress plugin before 3.11.8 does not have proper authorisation, allowing unauthenticated users to upload media files via the async upload functionality of WP...

0.28993EPSS
SaveExploits2References1
Cvelist
Cvelist
•added 2024/07/24 12:0 a.m.•74 views

CVE-2024-40767

In OpenStack Nova before 27.4.1, 28 before 28.2.1, and 29 before 29.1.1, by supplying a raw format image that is actually a crafted QCOW2 image with a backing file path or VMDK flat image with a descriptor file path, an authenticated user may convince systems to return a copy of the referenced...

0.00941EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2024/07/17 10:52 a.m.•74 views

CVE-2024-27311 Arbitrary file writing

Zohocorp ManageEngine DDI Central versions 4001 and prior were vulnerable to directory traversal vulnerability which allows the user to upload new files to the server folder...

5.5CVSS0.01459EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/07/17 12:0 a.m.•74 views

CVE-2024-39125

Roundup before 2.4.0 allows XSS via a SCRIPT element in an HTTP Referer header...

0.00289EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2024/06/13 9:4 a.m.•74 views

CVE-2024-34102 XXE can expose crypt key and other secrets granting full admin access

Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by an Improper Restriction of XML External Entity Reference 'XXE' vulnerability that could result in arbitrary code execution. An attacker could exploit this vulnerability by sending a crafted XML document that...

9.8CVSS0.99991EPSS
SaveExploits26References2
Cvelist
Cvelist
•added 2024/06/06 6:19 p.m.•74 views

CVE-2024-0520 Remote Code Execution due to Full Controlled File Write in mlflow/mlflow

A vulnerability in mlflow/mlflow version 8.2.1 allows for remote code execution due to improper neutralization of special elements used in an OS command 'Command Injection' within the mlflow.data.httpdatasetsource.py module. Specifically, when loading a dataset from a source URL with an HTTP...

10CVSS0.02401EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2024/05/16 2:9 p.m.•74 views

CVE-2024-34905

FlyFish v3.0.0 was discovered to contain a buffer overflow via the password parameter on the login page. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...

7.8AI score0.00552EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2024/03/23 12:0 a.m.•74 views

CVE-2024-24725

Gibbon through 26.0.00 allows remote authenticated users to conduct PHP deserialization attacks via columnOrder in a POST request to the modules/System%20Admin/importrun.php&type=externalAssessment&step=4 URI...

6.6AI score0.5132EPSS
SaveExploits7References2
Cvelist
Cvelist
•added 2024/02/28 11:28 p.m.•74 views

CVE-2024-25126 Rack ReDos in content type parsing (2nd degree polynomial)

Rack is a modular Ruby web server interface. Carefully crafted content type headers can cause Rack’s media type parser to take much longer than expected, leading to a possible denial of service vulnerability ReDos 2nd degree polynomial. This vulnerability is patched in 3.0.9.1 and 2.2.8.1...

5.3CVSS5.5AI score0.35376EPSS
SaveExploits1References7
Cvelist
Cvelist
•added 2024/02/27 3:25 p.m.•74 views

CVE-2024-26142 Rails possible ReDoS vulnerability in Accept header parsing in Action Dispatch

Rails is a web-application framework. Starting in version 7.1.0, there is a possible ReDoS vulnerability in the Accept header parsing routines of Action Dispatch. This vulnerability is patched in 7.1.3.1. Ruby 3.2 has mitigations for this problem, so Rails applications using Ruby 3.2 or newer are...

7.5CVSS7.7AI score0.01498EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2024/01/31 10:33 p.m.•74 views

CVE-2024-24572 facileManager Authenticated Variable Manipulation leading to SQL Injection

facileManager is a modular suite of web apps built with the sysadmin in mind. In versions 4.5.0 and earlier, the $REQUEST global array was unsafely called inside an extract function in admin-logs.php. The PHP file fm-init.php prevents arbitrary manipulation of $SESSION via the GET/POST parameters...

6.5CVSS7AI score0.00641EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2024/01/17 11:48 p.m.•74 views

CVE-2024-22416 Cross-Site Request Forgery on any API call in pyLoad may lead to admin privilege escalation

pyLoad is a free and open-source Download Manager written in pure Python. The pyload API allows any API call to be made using GET requests. Since the session cookie is not set to SameSite: strict, this opens the library up to severe attack possibilities via a Cross-Site Request Forgery CSRF attac...

9.6CVSS9.6AI score0.00948EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2024/01/09 5:56 p.m.•74 views

CVE-2024-21305 Hypervisor-Protected Code Integrity (HVCI) Security Feature Bypass Vulnerability

...

4.4CVSS6.6AI score0.01507EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2024/01/08 1:45 p.m.•74 views

CVE-2024-21647 HTTP Request/Response Smuggling in puma

Puma is a web server for Ruby/Rack applications built for parallelism. Prior to version 6.4.2, puma exhibited incorrect behavior when parsing chunked transfer encoding bodies in a way that allowed HTTP request smuggling. Fixed versions limits the size of chunk extensions. Without this limit, an...

5.9CVSS7.7AI score0.00958EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2024/01/03 4:51 p.m.•74 views

CVE-2024-21622 Craft CMS Privilege Escalation

Craft is a content management system. This is a potential moderate impact, low complexity privilege escalation vulnerability in Craft starting in 3.x prior to 3.9.6 and 4.x prior to 4.4.16 with certain user permissions setups. This has been fixed in Craft 4.4.16 and Craft 3.9.6. Users should ensu...

5.4CVSS9AI score0.00588EPSS
SaveExploits0References7
Cvelist
Cvelist
•added 2023/12/18 10:59 p.m.•74 views

CVE-2023-6927 Keycloak: open redirect via "form_post.jwt" jarm response mode

A flaw was found in Keycloak. This issue may allow an attacker to steal authorization codes or tokens from clients using a wildcard in the JARM response mode "formpost.jwt" which could be used to bypass the security patch implemented to address CVE-2023-6134...

4.6CVSS6AI score0.01109EPSS
SaveExploits0References14
Cvelist
Cvelist
•added 2023/09/04 10:39 p.m.•74 views

CVE-2023-41058 Trigger `beforeFind` not invoked in internal query pipeline in parse-server

Parse Server is an open source backend server. In affected versions the Parse Cloud trigger beforeFind is not invoked in certain conditions of Parse.Query. This can pose a vulnerability for deployments where the beforeFind trigger is used as a security layer to modify the incoming query. The...

7.5CVSS7.8AI score0.00623EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2023/08/08 10:29 a.m.•74 views

CVE-2023-4203 Stored Cross-Site Scripting

Advantech EKI-1524, EKI-1522, EKI-1521 devices through 1.21 are affected by a Stored Cross-Site Scripting vulnerability, which can be triggered by authenticated users in the ping tool of the web-interface...

9CVSS8.1AI score0.01079EPSS
SaveExploits2References3
Cvelist
Cvelist
•added 2023/08/01 4:49 p.m.•74 views

CVE-2023-38560 Ghostscript: integer overflow in pcl/pl/plfont.c:418 in pl_glyph_name

An integer overflow flaw was found in pcl/pl/plfont.c:418 in plglyphname in ghostscript. This issue may allow a local attacker to cause a denial of service via transforming a crafted PCL file to PDF format...

5.5CVSS5.5AI score0.00354EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2023/07/24 3:19 p.m.•74 views

CVE-2023-3640 Kernel: x86/mm: a per-cpu entry area leak was identified through the init_cea_offsets function when prefetchnta and prefetcht2 instructions being used for the per-cpu entry area mapping to the user space

A possible unauthorized memory access flaw was found in the Linux kernel's cpuentryarea mapping of X86 CPU data to memory, where a user may guess the location of exception stacks or other important data. Based on the previous CVE-2023-0597, the 'Randomize per-cpu entry area' feature was implement...

7CVSS6.8AI score0.00761EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2023/07/14 12:0 a.m.•74 views

CVE-2023-38336

netkit-rcp in rsh-client 0.17-24 allows command injection via filenames because /bin/sh is used by susystem, a related issue to CVE-2006-0225, CVE-2019-7283, and CVE-2020-15778...

7.2AI score0.02062EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2023/04/25 12:0 a.m.•74 views

CVE-2022-40723 Configuration-based MFA Bypass in PingID RADIUS PCV.

The PingID RADIUS PCV adapter for PingFederate, which supports RADIUS authentication with PingID MFA, is vulnerable to MFA bypass under certain configurations...

6.5CVSS6.9AI score0.00517EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2023/02/18 7:31 a.m.•74 views

CVE-2023-0902 SourceCodester Simple Food Ordering System process_order.php cross site scripting

A vulnerability was found in SourceCodester Simple Food Ordering System 1.0. It has been classified as problematic. This affects an unknown part of the file processorder.php. The manipulation of the argument order leads to cross site scripting. It is possible to initiate the attack remotely. The...

4CVSS5.9AI score0.02693EPSS
SaveExploits9References3
Cvelist
Cvelist
•added 2023/02/13 4:28 p.m.•74 views

CVE-2023-24804 ownCloud Android app vulnerable to Path Traversal

The ownCloud Android app allows ownCloud users to access, share, and edit files and folders. Prior to version 3.0, the app has an incomplete fix for a path traversal issue and is vulnerable to two bypass methods. The bypasses may lead to information disclosure when uploading the app’s internal...

5CVSS5.3AI score0.00524EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2023/02/01 12:0 a.m.•74 views

CVE-2022-46934

kkFileView v4.1.0 was discovered to contain a cross-site scripting XSS vulnerability via the url parameter at /controller/OnlinePreviewController.java...

6.2AI score0.01084EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2023/01/11 4:58 p.m.•74 views

CVE-2022-3782

keycloak: path traversal via double URL encoding. A flaw was found in Keycloak, where it does not properly validate URLs included in a redirect. An attacker can use this flaw to construct a malicious request to bypass validation and access other URLs and potentially sensitive information within t...

9.3AI score0.05796EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2022/12/13 12:0 a.m.•74 views

CVE-2022-44702 Windows Terminal Remote Code Execution Vulnerability

...

7.8CVSS7.8AI score0.01365EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2022/09/21 10:15 a.m.•74 views

CVE-2022-2795 Processing large delegations may severely degrade resolver performance

By flooding the target resolver with queries exploiting this flaw an attacker can significantly impair the resolver's performance, effectively denying legitimate clients access to the DNS resolution service...

5.3CVSS6.7AI score0.01723EPSS
SaveExploits0References8
Cvelist
Cvelist
•added 2022/08/06 5:2 p.m.•74 views

CVE-2022-37451

Exim before 4.96 has an invalid free in pamconverse in auths/callpam.c because storefree is not used after storemalloc...

7.9AI score0.03241EPSS
SaveExploits2References10
Cvelist
Cvelist
•added 2022/04/01 10:17 p.m.•74 views

CVE-2022-1159 Rockwell Automation Studio 5000 Logix Designer Code Injection

Rockwell Automation Studio 5000 Logix Designer all versions are vulnerable when an attacker who achieves administrator access on a workstation running Studio 5000 Logix Designer could inject controller code undetectable to a user...

7.7CVSS7.7AI score0.03397EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2022/02/01 1:46 a.m.•74 views

CVE-2021-46667

MariaDB before 10.6.5 has a sqllex.cc integer overflow, leading to an application crash...

6.6AI score0.00421EPSS
SaveExploits1References6
Cvelist
Cvelist
•added 2021/11/15 9:30 a.m.•74 views

CVE-2021-42838 Grand Vice info Co. webopac7 - Reflected XSS

Grand Vice info Co. webopac7 book search field parameter does not properly restrict the input of special characters, thus unauthenticated attackers can inject JavaScript syntax remotely, and further perform reflective XSS attacks...

6.1CVSS6.3AI score0.0061EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2021/08/12 6:11 p.m.•74 views

CVE-2021-34478 Microsoft Office Remote Code Execution Vulnerability

...

7.8CVSS7.8AI score0.52656EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2021/07/07 8:5 p.m.•74 views

CVE-2021-32715 Lenient Parsing of Content-Length Header When Prefixed with Plus Sign

hyper is an HTTP library for rust. hyper's HTTP/1 server code had a flaw that incorrectly parses and accepts requests with a Content-Length header with a prefixed plus sign, when it should have been rejected as illegal. This combined with an upstream HTTP proxy that doesn't parse such...

3.1CVSS5.6AI score0.00886EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2021/06/14 4:45 p.m.•74 views

CVE-2021-32682 Multiple vulnerabilities leading to RCE

elFinder is an open-source file manager for web, written in JavaScript using jQuery UI. Several vulnerabilities affect elFinder 2.1.58. These vulnerabilities can allow an attacker to execute arbitrary code and commands on the server hosting the elFinder PHP connector, even with minimal...

9.8CVSS9.6AI score0.69934EPSS
SaveExploits5References4
Cvelist
Cvelist
•added 2021/06/01 12:28 p.m.•74 views

CVE-2021-23017

A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact...

7.9AI score0.53461EPSS
SaveExploits10References14
Cvelist
Cvelist
•added 2021/05/18 4:11 p.m.•74 views

CVE-2021-32305

WebSVN before 2.6.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the search parameter...

10AI score0.86716EPSS
SaveExploits9References2
Cvelist
Cvelist
•added 2021/04/23 12:0 a.m.•74 views

CVE-2021-31607

In SaltStack Salt 2016.9 through 3002.6, a command injection vulnerability exists in the snapper module that allows for local privilege escalation on a minion. The attack requires that a file is created with a pathname that is backed up by snapper, and that the master calls the snapper.diff...

8.2AI score0.03808EPSS
SaveExploits1References8
Cvelist
Cvelist
•added 2021/02/09 5:55 p.m.•74 views

CVE-2020-35572

Adminer through 4.7.8 allows XSS via the history parameter to the default URI...

6.2AI score0.02003EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2020/12/24 7:49 p.m.•74 views

CVE-2020-28912

With MariaDB running on Windows, when local clients connect to the server over named pipes, it's possible for an unprivileged user with an ability to run code on the server machine to intercept the named pipe connection and act as a man-in-the-middle, gaining access to all the data passed between...

7.2AI score0.00437EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2020/08/07 3:36 p.m.•74 views

CVE-2020-11985

IP address spoofing when proxying using modremoteip and modrewrite For configurations using proxying with modremoteip and certain modrewrite rules, an attacker could spoof their IP address for logging and PHP scripts. Note this issue was fixed in Apache HTTP Server 2.4.24 but was retrospectively...

6.1AI score0.06808EPSS
SaveExploits0References16
Cvelist
Cvelist
•added 2020/03/19 1:27 p.m.•74 views

CVE-2020-10675

The Library API in buger jsonparser through 2019-12-04 allows attackers to cause a denial of service infinite loop via a Delete call...

7.2AI score0.02584EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2017/10/19 9:0 p.m.•74 views

CVE-2015-4421

The tzdriver module in Huawei Mate 7 Mate7-TL10 smartphones before V100R001CHNC00B126SP03 allows local users to gain privileges or cause a denial of service memory corruption via an unspecified input...

7.6AI score0.0092EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2017/07/13 1:0 p.m.•74 views

CVE-2017-7529

Nginx versions since 0.5.6 up to and including 1.13.2 are vulnerable to integer overflow vulnerability in nginx range filter module resulting into leak of potentially sensitive information triggered by specially crafted request...

7.5AI score0.62597EPSS
SaveExploits6References7
Cvelist
Cvelist
•added 2015/04/01 10:0 a.m.•74 views

CVE-2015-0802

Mozilla Firefox before 37.0 relies on docshell type information instead of page principal information for Window.webidl access control, which might allow remote attackers to execute arbitrary JavaScript code with chrome privileges via certain content navigation that leverages the reachability of ...

9.3AI score0.67268EPSS
SaveExploits3References8
Cvelist
Cvelist
•added 2014/07/20 10:0 a.m.•74 views

CVE-2014-0231

The modcgid module in the Apache HTTP Server before 2.4.10 does not have a timeout mechanism, which allows remote attackers to cause a denial of service process hang via a request to a CGI script that does not read from its stdin file descriptor...

4.2AI score0.43809EPSS
SaveExploits1References47
Cvelist
Cvelist
•added 2014/04/01 12:0 a.m.•74 views

CVE-2013-5640

Multiple SQL injection vulnerabilities in Gnew 2013.1 allow remote attackers to execute arbitrary SQL commands via the 1 answerid or 2 questionid parameter to polls/vote.php, 3 storyid parameter to comments/add.php or 4 comments/edit.php, or 5 threadid parameter to posts/add.php. NOTE: this issue...

8.2AI score0.02387EPSS
SaveExploits7References4
Total number of security vulnerabilities5000