Lucene search
+L
NvdMost viewed

381159 matches found

NVD
NVD
•added 2022/03/03 10:15 p.m.•55 views

CVE-2022-24725

Shescape is a shell escape package for JavaScript. An issue in versions 1.4.0 to 1.5.1 allows for exposure of the home directory on Unix systems when using Bash with the escape or escapeAll functions from the shescape API with the interpolation option set to true. Other tested shells, Dash and Zs...

6.2CVSS0.00499EPSS
SaveExploits1References3
NVD
NVD
•added 2022/03/01 2:15 a.m.•55 views

CVE-2021-42767

A directory traversal vulnerability in the apoc plugins in Neo4J Graph database before 4.4.0.1 allows attackers to read local files, and sometimes create local files. This is fixed in 3.5.17, 4.2.10, 4.3.0.4, and 4.4.0.1...

9.1CVSS0.01529EPSS
SaveExploits0References2
NVD
NVD
•added 2022/02/11 6:15 p.m.•55 views

CVE-2021-22785

A CWE-200: Information Exposure vulnerability exists that could cause sensitive information of files located in the web root directory to leak when an attacker sends a HTTP request to the web server of the device. Affected Product: Modicon M340 CPUs: BMXP34 Versions prior to V3.40, Modicon M340 X...

7.5CVSS0.00962EPSS
SaveExploits0References1
NVD
NVD
•added 2022/02/07 11:15 p.m.•55 views

CVE-2022-23624

Frourio-express is a minimal full stack framework, for TypeScript. Frourio-express users who uses frourio-express version prior to v0.26.0 and integration with class-validator through validators/ folder are subject to a input validation vulnerability. Validators do not work properly for request...

8.8CVSS0.01244EPSS
SaveExploits0References2
NVD
NVD
•added 2022/02/04 11:15 p.m.•55 views

CVE-2022-23584

Tensorflow is an Open Source Machine Learning Framework. A malicious user can cause a use after free behavior when decoding PNG images. After png::CommonFreeDecode&decode gets called, the values of decode.width and decode.height are in an unspecified state. The fix will be included in TensorFlow...

7.6CVSS0.00725EPSS
SaveExploits1References3
NVD
NVD
•added 2022/01/28 8:15 p.m.•55 views

CVE-2021-40423

A denial of service vulnerability exists in the cgiserver.cgi API command parser functionality of Reolink RLC-410W v3.0.0.13620121102. A specially-crafted series of HTTP requests can lead to denial of service. An attacker can send an HTTP request to trigger this vulnerability...

7.8CVSS0.01339EPSS
SaveExploits1References2
NVD
NVD
•added 2022/01/25 8:15 p.m.•55 views

CVE-2021-40159

An Information Disclosure vulnerability for JT files in Autodesk Inventor 2022, 2021, 2020, 2019 in conjunction with other vulnerabilities may lead to code execution through maliciously crafted JT files in the context of the current process...

7.8CVSS0.02296EPSS
SaveExploits0References3
NVD
NVD
•added 2021/11/16 7:15 p.m.•55 views

CVE-2020-12961

A potential vulnerability exists in AMD Platform Security Processor PSP that may allow an attacker to zero any privileged register on the System Management Network which may lead to bypassing SPI ROM protections...

7.8CVSS0.0024EPSS
SaveExploits0References1
NVD
NVD
•added 2021/11/14 9:15 p.m.•55 views

CVE-2020-16152

The NetConfig UI administrative interface in Extreme Networks ExtremeWireless Aerohive HiveOS and IQ Engine through 10.0r8a allows attackers to execute PHP code as the root user via remote HTTP requests that insert this code into a log file and then traverse to that file...

10CVSS0.35047EPSS
SaveExploits5References2
NVD
NVD
•added 2021/10/18 9:15 p.m.•55 views

CVE-2021-41153

The evm crate is a pure Rust implementation of Ethereum Virtual Machine. In evm crate 0.31.0, JUMPI opcode's condition is checked after the destination validity check. However, according to Geth and OpenEthereum, the condition check should happen before the destination validity check. This is a...

9.8CVSS0.01028EPSS
SaveExploits0References2
NVD
NVD
•added 2021/10/18 2:15 p.m.•55 views

CVE-2021-24752

Multiple Plugins from the CatchThemes vendor do not perform capability and CSRF checks in the ctpswitch AJAX action, which could allow any authenticated users, such as Subscriber to change the Essential Widgets WordPress plugin before 1.9, To Top WordPress plugin before 2.3, Header Enhancement...

5.7CVSS0.00422EPSS
SaveExploits2References1
NVD
NVD
•added 2021/10/05 9:15 a.m.•55 views

CVE-2021-41773

A flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49. An attacker could use a path traversal attack to map URLs to files outside the directories configured by Alias-like directives. If files outside of these directories are not protected by the usual default...

9.8CVSS0.99992EPSS
SaveExploits163References30
NVD
NVD
•added 2021/09/09 12:15 p.m.•55 views

CVE-2021-39459

Remote code execution in the modules component in Yakamara Media Redaxo CMS version 5.12.1 allows an authenticated CMS user to execute code on the hosting system via a module containing malicious PHP code...

9CVSS0.04894EPSS
SaveExploits2References2
NVD
NVD
•added 2021/08/12 11:15 p.m.•55 views

CVE-2021-37691

TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can craft a TFLite model that would trigger a division by zero error in LSH implementation. We have patched the issue in GitHub commit 0575b640091680cfb70f4dd93e70658de43b94f9. The fix will be...

5.5CVSS0.00152EPSS
SaveExploits0References2
NVD
NVD
•added 2021/08/12 12:15 a.m.•55 views

CVE-2021-37699

Next.js is an open source website development framework to be used with the React library. In affected versions specially encoded paths could be used when pages/error.js was statically generated allowing an open redirect to occur to an external site. In general, this redirect does not directly ha...

6.9CVSS0.01198EPSS
SaveExploits0References2
NVD
NVD
•added 2021/06/01 8:15 p.m.•55 views

CVE-2021-32653

Nextcloud Server is a Nextcloud package that handles data storage. Nextcloud Server versions prior to 19.0.11, 20.0.10, or 21.0.2 send user IDs to the lookup server even if the user has no fields set to published. The vulnerability is patched in versions 19.0.11, 20.0.10, and 21.0.2; no workaroun...

4CVSS0.01205EPSS
SaveExploits0References3
NVD
NVD
•added 2021/05/06 1:15 p.m.•55 views

CVE-2021-32062

MapServer before 7.0.8, 7.1.x and 7.2.x before 7.2.3, 7.3.x and 7.4.x before 7.4.5, and 7.5.x and 7.6.x before 7.6.3 does not properly enforce the MSMAPNOPATH and MSMAPPATTERN restrictions that are intended to control the locations from which a mapfile may be loaded with MapServer CGI...

5.3CVSS0.0152EPSS
SaveExploits0References6
NVD
NVD
•added 2021/04/23 4:15 p.m.•55 views

CVE-2021-31404

Non-constant-time comparison of CSRF tokens in UIDL request handler in com.vaadin:flow-server versions 1.0.0 through 1.0.13 Vaadin 10.0.0 through 10.0.16, 1.1.0 prior to 2.0.0 Vaadin 11 prior to 14, 2.0.0 through 2.4.6 Vaadin 14.0.0 through 14.4.6, 3.0.0 prior to 5.0.0 Vaadin 15 prior to 18, and...

4CVSS0.0021EPSS
SaveExploits0References2
NVD
NVD
•added 2021/04/13 8:15 p.m.•55 views

CVE-2021-28460

Azure Sphere Unsigned Code Execution Vulnerability...

8.1CVSS0.0048EPSS
SaveExploits0References1
NVD
NVD
•added 2021/04/05 7:15 p.m.•55 views

CVE-2021-24174

The Database Backups WordPress plugin through 1.2.2.6 does not have CSRF checks, allowing attackers to make a logged in user unwanted actions, such as generate backups of the database, change the plugin's settings and delete backups...

8.1CVSS0.03218EPSS
SaveExploits5References2
NVD
NVD
•added 2021/03/08 7:15 p.m.•55 views

CVE-2021-21362

MinIO is an open-source high performance object storage service and it is API compatible with Amazon S3 cloud storage service. In MinIO before version RELEASE.2021-03-04T00-53-13Z it is possible to bypass a readOnly policy by creating a temporary 'mc share upload' URL. Everyone is impacted who us...

7.7CVSS0.01321EPSS
SaveExploits1References4
NVD
NVD
•added 2021/02/09 5:15 p.m.•55 views

CVE-2020-10048

A vulnerability has been identified in SIMATIC PCS 7 All versions, SIMATIC WinCC All versions V7.5 SP2. Due to an insecure password verification process, an attacker could bypass the password protection set on protected files, thus being granted access to the protected content, circumventing...

5.5CVSS0.00336EPSS
SaveExploits0References1
NVD
NVD
•added 2021/01/13 10:15 p.m.•55 views

CVE-2021-1144

A vulnerability in Cisco Connected Mobile Experiences CMX could allow a remote, authenticated attacker without administrative privileges to alter the password of any user on an affected system. The vulnerability is due to incorrect handling of authorization checks for changing a password. An...

8.8CVSS8.8AI score0.01409EPSS
SaveExploits0References1
NVD
NVD
•added 2020/12/08 10:15 p.m.•55 views

CVE-2020-27754

In IntensityCompare of /magick/quantize.c, there are calls to PixelPacketIntensity which could return overflowed values to the caller when ImageMagick processes a crafted input file. To mitigate this, the patch introduces and uses the ConstrainPixelIntensity function, which forces the pixel...

4.3CVSS4.2AI score0.01124EPSS
SaveExploits1References3
NVD
NVD
•added 2020/11/23 9:15 p.m.•55 views

CVE-2020-28360

Insufficient RegEx in private-ip npm package v1.0.5 and below insufficiently filters reserved IP ranges resulting in indeterminate SSRF. An attacker can perform a large range of requests to ARIN reserved IP ranges, resulting in an indeterminable number of critical attack vectors, allowing remote...

9.8CVSS9.7AI score0.03077EPSS
SaveExploits0References2
NVD
NVD
•added 2020/10/06 1:15 p.m.•55 views

CVE-2020-24214

An issue was discovered in the box application on HiSilicon based IPTV/H.264/H.265 video encoders. Attackers can send a crafted unauthenticated RTSP request to cause a buffer overflow and application crash. The device will not be able to perform its main purpose of video encoding and streaming fo...

9.8CVSS0.35393EPSS
SaveExploits4References3
NVD
NVD
•added 2020/10/01 8:15 p.m.•55 views

CVE-2020-13940

In Apache NiFi 1.0.0 to 1.11.4, the notification service manager and various policy authorizer and user group provider objects allowed trusted administrators to inadvertently configure a potentially malicious XML file. The XML file has the ability to make external calls to services via XXE...

5.5CVSS0.01911EPSS
SaveExploits0References1
NVD
NVD
•added 2020/09/03 5:15 p.m.•55 views

CVE-2020-23814

Multiple cross-site scripting XSS vulnerabilities in xxl-job v2.2.0 allow remote attackers to inject arbitrary web script or HTML via 1 AppName and 2AddressList parameter in JobGroupController.java file...

6.1CVSS6.1AI score0.01188EPSS
SaveExploits1References2
NVD
NVD
•added 2020/08/25 9:15 p.m.•55 views

CVE-2020-17395

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.4. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the...

8.2CVSS7.8AI score0.00485EPSS
SaveExploits0References2
NVD
NVD
•added 2020/07/28 5:15 p.m.•55 views

CVE-2020-15608

This vulnerability allows remote attackers to execute arbitrary code on affected installations of CentOS Web Panel cwp-e17.0.9.8.923. Authentication is not required to exploit this vulnerability. The specific flaw exists within ajaxdashboard.php. When parsing the aiservice parameter, the process...

10CVSS9.7AI score0.08083EPSS
SaveExploits0References1
NVD
NVD
•added 2020/07/15 9:15 p.m.•55 views

CVE-2020-6164

In SilverStripe through 4.5.0, a specific URL path configured by default through the silverstripe/framework module can be used to disclose the fact that a domain is hosting a Silverstripe application. There is no disclosure of the specific version. The functionality on this URL path is limited to...

7.5CVSS0.018EPSS
SaveExploits0References1
NVD
NVD
•added 2020/06/30 4:15 p.m.•55 views

CVE-2020-15084

In express-jwt NPM package up and including version 5.3.3, the algorithms entry to be specified in the configuration is not being enforced. When algorithms is not specified in the configuration, with the combination of jwks-rsa, it may lead to authorization bypass. You are affected by this...

9.1CVSS0.0105EPSS
SaveExploits0References2
NVD
NVD
•added 2020/06/11 3:15 a.m.•55 views

CVE-2020-13851

Artica Pandora FMS 7.44 allows remote command execution via the events feature...

9CVSS0.91095EPSS
SaveExploits4References3
NVD
NVD
•added 2020/05/27 4:15 p.m.•55 views

CVE-2020-10946

Cross-site scripting XSS vulnerability allows remote attackers to inject arbitrary web script or HTML via the page parameter to service-monitoring/src/index.php. This vulnerability is fixed in versions 1.6.4, 18.10.3, 19.04.3, and 19.0.1 of the Centreon host-monitoring widget; 1.6.4, 18.10.5,...

6.1CVSS6AI score0.02233EPSS
SaveExploits1References1
NVD
NVD
•added 2020/05/25 5:15 p.m.•55 views

CVE-2020-13458

An issue was discovered in the Image Resizer plugin before 2.0.9 for Craft CMS. There are CSRF issues with the log-clear controller action...

8.8CVSS8.8AI score0.00484EPSS
SaveExploits0References1
NVD
NVD
•added 2020/05/04 1:15 p.m.•55 views

CVE-2020-1959

A Server-Side Template Injection was identified in Apache Syncope prior to 2.1.6 enabling attackers to inject arbitrary Java EL expressions, leading to an unauthenticated Remote Code Execution RCE vulnerability. Apache Syncope uses Java Bean Validation JSR 380 custom constraint validators. When...

9.8CVSS9.8AI score0.04821EPSS
SaveExploits0References1
NVD
NVD
•added 2020/04/29 9:15 p.m.•55 views

CVE-2020-11023

In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods i.e. .html, .append, and others may execute untrusted code. This problem is patched in jQuery 3.5.0...

6.9CVSS7.2AI score0.8383EPSS
SaveExploits6References67
NVD
NVD
•added 2020/04/06 2:15 p.m.•55 views

CVE-2020-1728

A vulnerability was found in all versions of Keycloak where, the pages on the Admin Console area of the application are completely missing general HTTP security headers in HTTP-responses. This does not directly lead to a security issue, yet it might aid attackers in their efforts to exploit other...

5.8CVSS6AI score0.00764EPSS
SaveExploits0References1
NVD
NVD
•added 2020/03/18 5:15 p.m.•55 views

CVE-2019-19355

An insecure modification vulnerability in the /etc/passwd file was found in the openshift/ocp-release-operator-sdk. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges. This CVE is specific to the openshift/ansible-operator-container as...

7CVSS6.8AI score0.00245EPSS
SaveExploits0References1
NVD
NVD
•added 2020/02/14 8:15 p.m.•55 views

CVE-2013-4211

A Code Execution Vulnerability exists in OpenX Ad Server 2.8.10 due to a backdoor in flowplayer-3.1.1.min.js library, which could let a remote malicious user execute arbitrary PHP code...

9.8CVSS9.7AI score0.70653EPSS
SaveExploits5References5
NVD
NVD
•added 2020/01/09 11:15 p.m.•55 views

CVE-2020-6757

contentHostProperties.php in Rasilient PixelStor 5000 K:4.0.1580-20150629 KDI Version allows authenticated attackers to remotely execute code via the name parameter...

8.8CVSS7.8AI score0.01401EPSS
SaveExploits1References1
NVD
NVD
•added 2019/10/05 11:15 p.m.•55 views

CVE-2019-17206

Uncontrolled deserialization of a pickled object in models.py in Frost Ming rediswrapper aka Redis Wrapper before 0.3.0 allows attackers to execute arbitrary scripts...

9.8CVSS9.7AI score0.03186EPSS
SaveExploits0References3
NVD
NVD
•added 2019/09/13 1:15 p.m.•55 views

CVE-2019-12517

An XSS issue was discovered in the slickquiz plugin through 1.3.7.1 for WordPress. The savequizscore functionality available via the /wp-admin/admin-ajax.php endpoint allows unauthenticated users to submit quiz solutions/answers, which are stored in the database and later shown in the WordPress...

6.1CVSS6.1AI score0.01248EPSS
SaveExploits4References2
NVD
NVD
•added 2019/09/05 7:16 p.m.•55 views

CVE-2019-15954

An issue was discovered in Total.js CMS 12.0.0. An authenticated user with the widgets privilege can gain achieve Remote Command Execution RCE on the remote server by creating a malicious widget with a special tag containing JavaScript code that will be evaluated server side. In the process of...

9.9CVSS7.9AI score0.78691EPSS
SaveExploits5References3
NVD
NVD
•added 2019/08/20 7:15 p.m.•55 views

CVE-2019-10745

assign-deep is vulnerable to Prototype Pollution in versions before 0.4.8 and version 1.0.0. The function assign-deep could be tricked into adding or modifying properties of Object.prototype using either a constructor or a proto payload...

7.5CVSS7.4AI score0.01142EPSS
SaveExploits1References1
NVD
NVD
•added 2019/07/25 9:15 p.m.•55 views

CVE-2019-10184

undertow before version 2.0.23.Final is vulnerable to an information leak issue. Web apps may have their directory structures predicted through requests without trailing slashes via the api...

7.5CVSS6.2AI score0.03478EPSS
SaveExploits0References13
NVD
NVD
•added 2019/03/21 4:1 p.m.•55 views

CVE-2019-6973

Sricam IP CCTV cameras are vulnerable to denial of service via multiple incomplete HTTP requests because the web server based on gSOAP 2.8.x is configured for an iterative queueing approach aka non-threaded operation with a timeout of several seconds...

7.5CVSS7.5AI score0.13776EPSS
SaveExploits5References3
NVD
NVD
•added 2018/10/09 5:29 p.m.•55 views

CVE-2018-14649

It was found that ceph-isci-cli package as shipped by Red Hat Ceph Storage 2 and 3 is using python-werkzeug in debug shell mode. This is done by setting debug=True in file /usr/bin/rbd-target-api provided by ceph-isci-cli package. This allows unauthenticated attackers to access this debug shell a...

10CVSS10AI score0.11741EPSS
SaveExploits1References7
NVD
NVD
•added 2018/04/24 3:29 p.m.•55 views

CVE-2017-17257

Huawei AR120-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR1200 V200R006C10, V200R006C13, V200R007C00, V200R007C01, V200R007C02, V200R008C20, V200R008C30, AR1200-S V200R006C10, V200R007C00, V200R008C20, V200R008C30, AR150 V200R006C10, V200R007C00, V200R007C01, V200R007C02, V200R008C20,...

7.5CVSS7.4AI score0.01279EPSS
SaveExploits0References1
NVD
NVD
•added 2017/12/20 7:29 p.m.•55 views

CVE-2017-16725

A Stack-based Buffer Overflow issue was discovered in Xiongmai Technology IP Cameras and DVRs using the NetSurveillance Web interface. The stack-based buffer overflow vulnerability has been identified, which may allow an attacker to execute code remotely or crash the device. After rebooting, the...

10CVSS9.7AI score0.09216EPSS
SaveExploits3References2
Total number of security vulnerabilities5000