Lucene search
+L
NvdMost viewed

380275 matches found

NVD
NVD
added 2020/11/12 6:15 p.m.50 views

CVE-2020-0588

Improper conditions check in BIOS firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

6.7CVSS6.7AI score0.00351EPSS
SaveExploits0References2
NVD
NVD
added 2020/10/21 9:15 p.m.50 views

CVE-2020-27615

The Loginizer plugin before 1.6.4 for WordPress allows SQL injection with resultant XSS, related to loginizerloginfailed and lzvalidip...

9.8CVSS0.52261EPSS
SaveExploits4References4
NVD
NVD
added 2020/09/30 6:15 p.m.50 views

CVE-2020-25761

Projectworlds Visitor Management System in PHP 1.0 allows XSS. The file myform.php does not perform input validation on the request parameters. An attacker can inject javascript payloads in the parameters to perform various attacks such as stealing of cookies,sensitive information etc...

6.1CVSS0.01825EPSS
SaveExploits2References4
NVD
NVD
added 2020/09/25 6:15 p.m.50 views

CVE-2020-16242

The affected Reason S20 Ethernet Switch is vulnerable to cross-site scripting XSS, which may allow an attacker to trick application users into performing critical application actions that include, but are not limited to, adding and updating accounts...

6.1CVSS0.00706EPSS
SaveExploits0References1
NVD
NVD
added 2020/09/23 1:15 p.m.50 views

CVE-2020-10687

A flaw was discovered in all versions of Undertow before Undertow 2.2.0.Final, where HTTP request smuggling related to CVE-2017-2666 is possible against HTTP/1.x and HTTP/2 due to permitting invalid characters in an HTTP request. This flaw allows an attacker to poison a web-cache, perform an XSS...

5.8CVSS0.01147EPSS
SaveExploits0References3
NVD
NVD
added 2020/09/02 5:15 p.m.50 views

CVE-2020-14209

Dolibarr before 11.0.5 allows low-privilege users to upload files of dangerous types, leading to arbitrary code execution. This occurs because .pht and .phar files can be uploaded. Also, a .htaccess file can be uploaded to reconfigure access control e.g., to let .noexe files be executed as PHP co...

8.8CVSS9AI score0.27482EPSS
SaveExploits4References3
NVD
NVD
added 2020/08/21 10:15 a.m.50 views

CVE-2020-7710

This affects all versions of package safe-eval. It is possible for an attacker to run an arbitrary command on the host machine...

9.8CVSS8.7AI score0.0143EPSS
SaveExploits1References2
NVD
NVD
added 2020/07/20 4:15 p.m.50 views

CVE-2020-12027

All versions of FactoryTalk View SE disclose the hostnames and file paths for certain files within the system. A remote, authenticated attacker may be able to leverage this information for reconnaissance efforts. Rockwell Automation recommends enabling built in security features found within...

4.3CVSS4.7AI score0.53024EPSS
SaveExploits3References3
NVD
NVD
added 2020/07/01 4:15 p.m.50 views

CVE-2020-12497

PLCopen XML file parsing in Phoenix Contact PC Worx and PC Worx Express version 1.87 and earlier can lead to a stack-based overflow. Manipulated PC Worx projects could lead to a remote code execution due to insufficient input data validation...

7.8CVSS0.14668EPSS
SaveExploits0References3
NVD
NVD
added 2020/06/24 7:15 p.m.50 views

CVE-2020-15026

Bludit 3.12.0 allows admins to use a /plugin-backup-download?file=../ directory traversal approach for arbitrary file download via backup/plugin.php...

4.9CVSS0.01299EPSS
SaveExploits1References1
NVD
NVD
added 2020/06/04 8:15 p.m.50 views

CVE-2020-12847

Pydio Cells 2.0.4 web application offers an administrative console named “Cells Console” that is available to users with an administrator role. This console provides an administrator user with the possibility of changing several settings, including the application’s mailer configuration. It is...

7.2CVSS6.9AI score0.01684EPSS
SaveExploits1References3
NVD
NVD
added 2020/05/22 5:15 p.m.50 views

CVE-2020-13388

An exploitable vulnerability exists in the configuration-loading functionality of the jw.util package before 2.3 for Python. When loading a configuration with FromString or FromStream with YAML, one can execute arbitrary Python code, resulting in OS command execution, because safeload is not used...

9.8CVSS9.8AI score0.04422EPSS
SaveExploits1References3
NVD
NVD
added 2020/05/01 4:15 p.m.50 views

CVE-2020-7351

An OS Command Injection vulnerability in the endpointdevicemap.php component of Fonality Trixbox Community Edition allows an attacker to execute commands on the underlying operating system as the "asterisk" user. Note that Trixbox Community Edition has been unsupported by the vendor since 2012...

9CVSS8AI score0.65208EPSS
SaveExploits4References2
NVD
NVD
added 2020/04/21 5:15 p.m.50 views

CVE-2020-5268

In Saml2 Authentication Services for ASP.NET versions before 1.0.2, and between 2.0.0 and 2.6.0, there is a vulnerability in how tokens are validated in some cases. Saml2 tokens are usually used as bearer tokens - a caller that presents a token is assumed to be the subject of the token. There is...

7.3CVSS6.5AI score0.01086EPSS
SaveExploits0References4
NVD
NVD
added 2020/03/19 11:15 p.m.50 views

CVE-2019-16068

A CSRF vulnerability exists in NETSAS ENIGMA NMS version 65.0.0 and prior that could allow an attacker to be able to trick a victim into submitting a malicious managefiles.cgi request. This can be triggered via XSS or an IFRAME tag included within the site...

8.8CVSS8.3AI score0.00947EPSS
SaveExploits5References1
NVD
NVD
added 2020/03/09 4:15 p.m.50 views

CVE-2020-2134

Sandbox protection in Jenkins Script Security Plugin 1.70 and earlier could be circumvented through crafted constructor calls and crafted constructor bodies...

8.8CVSS8.6AI score0.01006EPSS
SaveExploits0References2
NVD
NVD
added 2020/03/06 5:15 p.m.50 views

CVE-2020-9531

An issue was discovered on Xiaomi MIUI V11.0.5.0.QFAEUXM devices. In the Web resources of GetAppscom.xiaomi.mipicks, the parameters passed in are read and executed. After reading the resource files, relevant components open the link of the incoming URL. Although the URL is safe and can pass...

7.3CVSS6.9AI score0.013EPSS
SaveExploits0References3
NVD
NVD
added 2020/02/17 4:15 a.m.50 views

CVE-2020-9026

ELTEX NTP-RG-1402G 1v10 3.25.3.32 devices allow OS command injection via the PING field of the resource ping.cmd. The NTP-2 device is also affected...

10CVSS9.9AI score0.03059EPSS
SaveExploits1References1
NVD
NVD
added 2020/01/31 4:15 a.m.50 views

CVE-2019-18913

A potential security vulnerability with pre-boot DMA may allow unauthorized UEFI code execution using open-case attacks. This industry-wide issue requires physically accessing internal expansion slots with specialized hardware and software tools to modify UEFI code in memory. This affects HP...

7.2CVSS6.8AI score0.00605EPSS
SaveExploits0References1
NVD
NVD
added 2020/01/29 4:15 p.m.50 views

CVE-2020-2100

Jenkins 2.218 and earlier, LTS 2.204.1 and earlier was vulnerable to a UDP amplification reflection denial of service attack on port 33848...

5.8CVSS5.5AI score0.03443EPSS
SaveExploits0References6
NVD
NVD
added 2020/01/27 9:15 p.m.50 views

CVE-2020-5220

Sylius ResourceBundle accepts and uses any serialisation groups to be passed via a HTTP header. This might lead to data exposure by using an unintended serialisation group - for example it could make Shop API use a more permissive group from Admin API. Anyone exposing an API with ResourceBundle's...

5.3CVSS4.7AI score0.00737EPSS
SaveExploits0References2
NVD
NVD
added 2020/01/18 12:15 a.m.50 views

CVE-2019-20357

A Persistent Arbitrary Code Execution vulnerability exists in the Trend Micro Security 2020 v160 and 2019 v15 consumer familiy of products which could potentially allow an attacker the ability to create a malicious program to escalate privileges and attain persistence on a vulnerable system...

7.8CVSS7.8AI score0.00732EPSS
SaveExploits5References3
NVD
NVD
added 2020/01/07 5:15 p.m.50 views

CVE-2019-14854

OpenShift Container Platform 4 does not sanitize secret data written to static pod logs when the log level in a given operator is set to Debug or higher. A low privileged user could read pod logs to discover secret material if the log level has already been modified in an operator by a privileged...

6.5CVSS5.3AI score0.00799EPSS
SaveExploits1References1
NVD
NVD
added 2019/12/17 5:15 p.m.50 views

CVE-2019-19850

An issue was discovered in TYPO3 before 8.7.30, 9.x before 9.5.12, and 10.x before 10.2.2. Because escaping of user-submitted content is mishandled, the class QueryGenerator is vulnerable to SQL injection. Exploitation requires having the system extension ext:lowlevel installed, and a valid backe...

7.2CVSS6.6AI score0.00868EPSS
SaveExploits0References2
NVD
NVD
added 2019/10/23 1:15 p.m.50 views

CVE-2019-10462

A cross-site request forgery vulnerability in Jenkins Dynatrace Application Monitoring Plugin 2.1.3 and earlier allowed attackers to connect to an attacker-specified URL using attacker-specified credentials...

8.1CVSS8AI score0.007EPSS
SaveExploits0References2
NVD
NVD
added 2019/08/27 6:15 p.m.50 views

CVE-2019-13267

TP-Link Archer C3200 V1 and Archer C2 V1 devices have Insufficient Compartmentalization between a host network and a guest network that are established by the same device. In order to transfer data from the host network to the guest network, the sender joins and then leaves an IGMP group. After i...

8.8CVSS8.7AI score0.00973EPSS
SaveExploits1References2
NVD
NVD
added 2019/08/23 1:15 p.m.50 views

CVE-2019-15485

Bolt before 3.6.10 has XSS via createFolder or createFile in Controller/Async/FilesystemManager.php...

6.1CVSS6.3AI score0.00861EPSS
SaveExploits0References2
NVD
NVD
added 2019/06/05 6:29 p.m.50 views

CVE-2019-9189

Prima Systems FlexAir, Versions 2.4.9api3 and prior. The application allows the upload of arbitrary Python scripts when configuring the main central controller. These scripts can be immediately executed because of root code execution, not as a web server user, allowing an authenticated attacker t...

9CVSS9.1AI score0.1163EPSS
SaveExploits7References5
NVD
NVD
added 2019/05/30 10:29 p.m.50 views

CVE-2019-12480

BACnet Protocol Stack through 0.8.6 has a segmentation fault leading to denial of service in BACnet APDU Layer because a malformed DCC in AtomicWriteFile, AtomicReadFile and DeviceCommunicationControl services. An unauthenticated remote attacker could cause a denial of service bacserv daemon cras...

7.5CVSS7.4AI score0.33653EPSS
SaveExploits5References7
NVD
NVD
added 2019/04/18 5:29 p.m.50 views

CVE-2019-10300

A cross-site request forgery vulnerability in Jenkins GitLab Plugin 1.5.11 and earlier in the GitLabConnectionConfigdoTestConnection form validation method allowed attackers to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing...

8CVSS7.6AI score0.0133EPSS
SaveExploits0References3
NVD
NVD
added 2019/04/04 4:29 p.m.50 views

CVE-2019-1003081

A missing permission check in Jenkins OpenShift Deployer Plugin in the DeployApplication.DeployApplicationDescriptordoCheckLogin form validation method allows attackers with Overall/Read permission to initiate a connection to an attacker-specified server...

6.5CVSS6.3AI score0.01508EPSS
SaveExploits0References3
NVD
NVD
added 2019/03/06 10:29 p.m.50 views

CVE-2019-9615

An issue was discovered in OFCMS before 1.1.3. It allows admin/system/generate/create?sql= SQL injection, related to SystemGenerateController.java...

7.2CVSS7.2AI score0.01298EPSS
SaveExploits1References1
NVD
NVD
added 2019/01/13 2:29 a.m.50 views

CVE-2018-16887

A cross-site scripting XSS flaw was found in the katello component of Satellite. An attacker with privilege to create/edit organizations and locations is able to execute a XSS attacks against other users through the Subscriptions or the Red Hat Repositories wizards. This can possibly lead to...

5.4CVSS5.5AI score0.00999EPSS
SaveExploits1References2
NVD
NVD
added 2018/09/18 2:29 p.m.50 views

CVE-2018-11787

In Apache Karaf version prior to 3.0.9, 4.0.9, 4.1.1, when the webconsole feature is installed in Karaf, it is available at .../system/console and requires authentication to access it. One part of the console is a Gogo shell/console that gives access to the command line console of Karaf via a Web...

8.1CVSS8.1AI score0.02573EPSS
SaveExploits0References3
NVD
NVD
added 2018/09/10 7:29 p.m.50 views

CVE-2018-14635

When using the Linux bridge ml2 driver, non-privileged tenants are able to create and attach ports without specifying an IP address, bypassing IP address validation. A potential denial of service could occur if an IP address, conflicting with existing guests or routers, is then assigned from...

6.5CVSS6.3AI score0.02527EPSS
SaveExploits0References7
NVD
NVD
added 2018/08/21 1:29 a.m.50 views

CVE-2018-15599

The recvmsguserauthrequest function in svr-auth.c in Dropbear through 2018.76 is prone to a user enumeration vulnerability because username validity affects how fields in SSHMSGUSERAUTH messages are handled, a similar issue to CVE-2018-15473 in an unrelated codebase...

5.3CVSS5.7AI score0.02686EPSS
SaveExploits0References5
NVD
NVD
added 2018/08/20 8:29 p.m.50 views

CVE-2018-1000225

Cobbler version Verified as present in Cobbler versions 2.6.11+, but code inspection suggests at least 2.0.0+ or possibly even older versions may be vulnerable contains a Cross Site Scripting XSS vulnerability in cobbler-web that can result in Privilege escalation to admin.. This attack appear to...

6.1CVSS6.9AI score0.01262EPSS
SaveExploits0References2
NVD
NVD
added 2018/08/02 7:29 a.m.50 views

CVE-2018-14847

MikroTik RouterOS through 6.42 allows unauthenticated remote attackers to read arbitrary files and remote authenticated attackers to write arbitrary files due to a directory traversal vulnerability in the WinBox interface...

9.1CVSS9.2AI score0.96087EPSS
SaveExploits24References9
NVD
NVD
added 2018/07/27 2:29 p.m.50 views

CVE-2017-2666

It was discovered in Undertow that the code that parsed the HTTP request line permitted invalid characters. This could be exploited, in conjunction with a proxy that also permitted the invalid characters but with a different interpretation, to inject data into the HTTP response. By manipulating t...

6.5CVSS5.7AI score0.02712EPSS
SaveExploits0References11
NVD
NVD
added 2018/07/24 1:29 p.m.50 views

CVE-2018-10905

CloudForms Management Engine cfme is vulnerable to an improper security setting in the dRuby component of CloudForms. An attacker with access to an unprivileged local shell could use this flaw to execute commands as a high privileged user...

7.8CVSS7.4AI score0.00474EPSS
SaveExploits0References3
NVD
NVD
added 2017/04/17 4:59 p.m.50 views

CVE-2017-5647

A bug in the handling of the pipelined requests in Apache Tomcat 9.0.0.M1 to 9.0.0.M18, 8.5.0 to 8.5.12, 8.0.0.RC1 to 8.0.42, 7.0.0 to 7.0.76, and 6.0.0 to 6.0.52, when send file was used, results in the pipelined request being lost when send file processing of the previous request completed. Thi...

7.5CVSS7.6AI score0.1684EPSS
SaveExploits0References34
NVD
NVD
added 2016/04/11 9:59 p.m.50 views

CVE-2015-7502

Red Hat CloudForms 3.2 Management Engine CFME 5.4.4 and CloudForms 4.0 Management Engine CFME 5.5.0 do not properly encrypt data in the backend PostgreSQL database, which might allow local users to obtain sensitive data and consequently gain privileges by leveraging access to 1 database exports o...

5.1CVSS5.2AI score0.00341EPSS
SaveExploits0References3
NVD
NVD
added 2014/10/22 2:55 p.m.50 views

CVE-2014-7182

Multiple cross-site scripting XSS vulnerabilities in the WP Google Maps plugin before 6.0.27 for WordPress allow remote attackers to inject arbitrary web script or HTML via the polyid parameter in an 1 editpoly, 2 editpolyline, or 3 editmarker action in the wp-google-maps-menu page to...

4.3CVSS5.8AI score0.02461EPSS
SaveExploits3References5
NVD
NVD
added 2014/06/02 3:55 p.m.50 views

CVE-2013-6433

The default configuration in the Red Hat openstack-neutron package before 2013.2.3-7 does not properly set a configuration file for rootwrap, which allows remote attackers to gain privileges via a crafted configuration file...

7.6CVSS6.5AI score0.03324EPSS
SaveExploits0References4
NVD
NVD
added 2013/11/18 2:55 a.m.50 views

CVE-2013-4480

Red Hat Satellite 5.6 and earlier does not disable the web interface that is used to create the first user for a satellite, which allows remote attackers to create administrator accounts...

7.5CVSS6.5AI score0.02134EPSS
SaveExploits0References5
NVD
NVD
added 2013/10/19 10:36 a.m.50 views

CVE-2013-6021

Buffer overflow in WGagent in WatchGuard WSM and Fireware before 11.8 allows remote attackers to execute arbitrary code via a long sessionid value in a cookie...

9.3CVSS7.8AI score0.12203EPSS
SaveExploits7References7
NVD
NVD
added 2013/09/16 1:1 p.m.50 views

CVE-2013-4812

UpdateCertificatesServlet in the SNAC registration server in HP ProCurve Manager PCM 3.20 and 4.0, PCM+ 3.20 and 4.0, and Identity Driven Manager IDM 4.0 does not properly validate the fileName argument, which allows remote attackers to upload .jsp files and consequently execute arbitrary code vi...

10CVSS7.5AI score0.51903EPSS
SaveExploits10References4
NVD
NVD
added 2013/08/28 11:55 p.m.50 views

CVE-2013-2035

Race condition in hawtjni-runtime/src/main/java/org/fusesource/hawtjni/runtime/Library.java in HawtJNI before 1.8, when a custom library path is not specified, allows local users to execute arbitrary Java code by overwriting a temporary JAR file with a predictable name in /tmp...

4.4CVSS6.9AI score0.00594EPSS
SaveExploits1References18
NVD
NVD
added 2013/04/09 8:55 p.m.50 views

CVE-2013-1800

The crack gem 0.3.1 and earlier for Ruby does not properly restrict casts of string values, which might allow remote attackers to conduct object-injection attacks and execute arbitrary code, or cause a denial of service memory and CPU consumption by leveraging Action Pack support for 1 YAML type...

7.5CVSS7.1AI score0.04952EPSS
SaveExploits1References6
NVD
NVD
added 2011/01/28 9:0 p.m.50 views

CVE-2010-4710

Cross-site scripting XSS vulnerability in the addItem method in the Menu widget in YUI before 2.9.0 allows remote attackers to inject arbitrary web script or HTML via a field that is added to a menu, related to documentation that specifies this field as a text field rather than an HTML field, a...

4.3CVSS5.6AI score0.0223EPSS
SaveExploits0References4
Total number of security vulnerabilities5000