Lucene search
+L
NvdMost viewed

399157 matches found

NVD
NVD
•added 2022/07/12 10:15 p.m.•56 views

CVE-2022-31105

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Argo CD starting with version 0.4.0 and prior to 2.2.11, 2.3.6, and 2.4.5 is vulnerable to an improper certificate validation bug which could cause Argo CD to trust a malicious or otherwise untrustworthy OpenID Connect OIDC...

9.6CVSS0.00808EPSS
SaveExploits0References3
NVD
NVD
•added 2022/06/30 10:15 p.m.•56 views

CVE-2022-31115

opensearch-ruby is a community-driven, open source fork of elasticsearch-ruby. In versions prior to 2.0.1 the ruby YAML.load function was used instead of YAML.safeload. As a result opensearch-ruby 2.0.0 and prior can lead to unsafe deserialization using YAML.load if the response is of type YAML. ...

8.8CVSS0.01617EPSS
SaveExploits1References3
NVD
NVD
•added 2022/06/13 6:15 p.m.•56 views

CVE-2021-41663

A cross-site scripting XSS vulnerability exists in Mini CMS V1.11. The vulnerability exists in the article upload: post-edit.php page...

6.1CVSS0.00773EPSS
SaveExploits1References2
NVD
NVD
•added 2022/03/10 5:47 p.m.•56 views

CVE-2022-26521

Abantecart through 1.3.2 allows remote authenticated administrators to execute arbitrary code by uploading an executable file, because the CatalogMedia ManagerImages settings can be changed by an administrator e.g., by configuring .php to be a valid image file type...

7.2CVSS0.09615EPSS
SaveExploits4References2
NVD
NVD
•added 2022/03/10 5:43 p.m.•56 views

CVE-2021-40376

otris Update Manager 1.2.1.0 allows local users to achieve SYSTEM access via unauthenticated calls to exposed interfaces over a .NET named pipe. A remote attack may be possible as well, by leveraging WsHTTPBinding for HTTP traffic on TCP port 9000...

7.8CVSS0.004EPSS
SaveExploits1References3
NVD
NVD
•added 2022/03/09 11:15 p.m.•56 views

CVE-2022-24744

Shopware is an open commerce platform based on the Symfony php Framework and the Vue javascript framework. In affected versions user sessions are not logged out if the password is reset via password recovery. This issue has been resolved in version 6.4.8.1. For older versions of 6.1, 6.2, and 6.3...

3.5CVSS0.00485EPSS
SaveExploits0References1
NVD
NVD
•added 2022/03/03 7:15 a.m.•56 views

CVE-2022-0528

Server-Side Request Forgery SSRF in GitHub repository transloadit/uppy prior to 3.3.1...

7.5CVSS0.00997EPSS
SaveExploits1References2
NVD
NVD
•added 2022/03/02 8:15 p.m.•56 views

CVE-2022-23640

Excel-Streaming-Reader is an easy-to-use implementation of a streaming Excel reader using Apache POI. Prior to xlsx-streamer 2.1.0, the XML parser that was used did apply all the necessary settings to prevent XML Entity Expansion issues. Upgrade to version 2.1.0 to receive a patch. There is no...

9.8CVSS0.01275EPSS
SaveExploits0References2
NVD
NVD
•added 2022/02/24 3:15 p.m.•56 views

CVE-2022-25080

TOTOLink A830R V5.9c.4729B20191112 was discovered to contain a command injection vulnerability in the "Main" function. This vulnerability allows attackers to execute arbitrary commands via the QUERYSTRING parameter...

9.8CVSS0.03189EPSS
SaveExploits1References1
NVD
NVD
•added 2022/02/23 11:15 p.m.•56 views

CVE-2022-23651

b2-sdk-python is a python library to access cloud storage provided by backblaze. Linux and Mac releases of the SDK version 1.14.0 and below contain a key disclosure vulnerability that, in certain conditions, can be exploited by local attackers through a time-of-check-time-of-use TOCTOU race...

4.7CVSS0.00217EPSS
SaveExploits0References3
NVD
NVD
•added 2022/02/21 11:15 a.m.•56 views

CVE-2021-24867

Numerous Plugins and Themes from the AccessPress Themes aka Access Keys vendor are backdoored due to their website being compromised. Only plugins and themes downloaded via the vendor website are affected, and those hosted on wordpress.org are not. However, all of them were updated or removed to...

9.8CVSS0.18044EPSS
SaveExploits1References2
NVD
NVD
•added 2022/02/20 7:15 p.m.•56 views

CVE-2022-23054

Openmct versions 1.3.0 to 1.7.7 are vulnerable against stored XSS via the “Summary Widget” element, that allows the injection of malicious JavaScript into the ‘URL’ field. This issue affects: nasa openmct 1.7.7 version and prior versions; 1.3.0 version and later versions...

6.1CVSS0.00615EPSS
SaveExploits0References1
NVD
NVD
•added 2022/02/11 6:15 p.m.•56 views

CVE-2022-24923

Improper access control vulnerability in Samsung SearchWidget prior to versions 2.3.00.6 in China models allows untrusted applications to load arbitrary URL and local files in webview...

4CVSS0.00218EPSS
SaveExploits0References1
NVD
NVD
•added 2022/02/04 11:15 p.m.•56 views

CVE-2022-23571

Tensorflow is an Open Source Machine Learning Framework. When decoding a tensor from protobuf, a TensorFlow process can encounter cases where a CHECK assertion is invalidated based on user controlled arguments, if the tensors have an invalid dtype and 0 elements or an invalid shape. This allows...

6.5CVSS0.00473EPSS
SaveExploits0References2
NVD
NVD
•added 2022/02/04 11:15 p.m.•56 views

CVE-2021-38130

A potential Information leakage vulnerability has been identified in versions of Micro Focus Voltage SecureMail Mail Relay prior to 7.3.0.1. The vulnerability could be exploited to create an information leakage attack...

6.5CVSS0.00857EPSS
SaveExploits2References1
NVD
NVD
•added 2022/02/01 1:15 p.m.•56 views

CVE-2021-25072

The NextScripts: Social Networks Auto-Poster WordPress plugin before 4.3.25 does not have CSRF check in place when deleting items, allowing attacker to make a logged in admin delete arbitrary posts via a CSRF attack...

6.5CVSS0.00531EPSS
SaveExploits2References1
NVD
NVD
•added 2022/01/21 12:15 a.m.•56 views

CVE-2022-22894

Jerryscript 3.0.0 was discovered to contain a stack overflow via ecmalcachelookup in /jerry-core/ecma/base/ecma-lcache.c...

7.8CVSS0.00748EPSS
SaveExploits1References1
NVD
NVD
•added 2022/01/10 2:10 p.m.•56 views

CVE-2021-23543

All versions of package realms-shim are vulnerable to Sandbox Bypass via a Prototype Pollution attack vector...

9.8CVSS0.01762EPSS
SaveExploits1References2
NVD
NVD
•added 2021/12/20 12:15 p.m.•56 views

CVE-2021-44790

A carefully crafted request body can cause a buffer overflow in the modlua multipart parser r:parsebody called from Lua scripts. The Apache httpd team is not aware of an exploit for the vulnerabilty though it might be possible to craft one. This issue affects Apache HTTP Server 2.4.51 and earlier...

9.8CVSS0.9684EPSS
SaveExploits6References20
NVD
NVD
•added 2021/12/06 4:15 p.m.•56 views

CVE-2021-24938

The WOOCS WordPress plugin before 1.3.7.1 does not sanitise and escape the key parameter of the woocsupdateprofilesdata AJAX action available to any authenticated user before outputting it back in the response, leading to a Reflected cross-Site Scripting issue...

6.1CVSS0.00822EPSS
SaveExploits2References1
NVD
NVD
•added 2021/11/23 12:15 a.m.•56 views

CVE-2021-40828

Connections initialized by the AWS IoT Device SDK v2 for Java versions prior to 1.3.3, Python versions prior to 1.5.18, C++ versions prior to 1.12.7 and Node.js versions prior to 1.5.1 did not verify server certificate hostname during TLS handshake when overriding Certificate Authorities CA in...

8.8CVSS0.00411EPSS
SaveExploits0References5
NVD
NVD
•added 2021/11/09 1:15 p.m.•56 views

CVE-2021-43114

FORT Validator versions prior to 1.5.2 will crash if an RPKI CA publishes an X.509 EE certificate. This will lead to RTR clients such as BGP routers to lose access to the RPKI VRP data set, effectively disabling Route Origin Validation...

7.5CVSS0.01131EPSS
SaveExploits0References6
NVD
NVD
•added 2021/09/28 6:15 p.m.•56 views

CVE-2021-41318

In Progress WhatsUp Gold prior to version 21.1.0, an application endpoint failed to adequately sanitize malicious input. which could allow an unauthenticated attacker to execute arbitrary code in a victim's browser...

6.1CVSS0.05881EPSS
SaveExploits4References2
NVD
NVD
•added 2021/09/14 1:15 p.m.•56 views

CVE-2021-23051

On BIG-IP versions 15.1.0.4 through 15.1.3, when the Data Plane Development Kit DPDK/Elastic Network Adapter ENA driver is used with BIG-IP on Amazon Web Services AWS systems, undisclosed requests can cause the Traffic Management Microkernel TMM to terminate. This is due to an incomplete fix for...

7.5CVSS0.00961EPSS
SaveExploits0References1
NVD
NVD
•added 2021/09/14 12:15 p.m.•56 views

CVE-2021-33685

SAP Business One version - 10.0 allows low-level authorized attacker to traverse the file system to access files or directories that are outside of the restricted directory. A successful attack allows access to high level sensitive data...

6.5CVSS0.01029EPSS
SaveExploits0References2
NVD
NVD
•added 2021/08/13 12:15 p.m.•56 views

CVE-2021-37343

A path traversal vulnerability exists in Nagios XI below version 5.8.5 AutoDiscovery component and could lead to post authenticated RCE under security context of the user running Nagios...

8.8CVSS0.2382EPSS
SaveExploits5References2
NVD
NVD
•added 2021/08/12 6:15 p.m.•56 views

CVE-2021-37653

TensorFlow is an end-to-end open source platform for machine learning. In affected versions an attacker can trigger a crash via a floating point exception in tf.rawops.ResourceGather. The implementation computes the value of a value, batchsize, and then divides by it without checking that this...

5.5CVSS0.00152EPSS
SaveExploits0References2
NVD
NVD
•added 2021/08/08 6:15 a.m.•56 views

CVE-2021-38193

An issue was discovered in the ammonia crate before 3.1.0 for Rust. XSS can occur because the parsing differences for HTML, SVG, and MathML are mishandled, a similar issue to CVE-2020-26870...

6.1CVSS0.00708EPSS
SaveExploits1References2
NVD
NVD
•added 2021/07/09 7:15 p.m.•56 views

CVE-2021-26106

An improper neutralization of special elements used in an OS Command vulnerability in FortiAP's console 6.4.1 through 6.4.5 and 6.2.4 through 6.2.5 may allow an authenticated attacker to execute unauthorized commands by running the kdbg CLI command with specifically crafted arguments...

7.8CVSS0.00295EPSS
SaveExploits0References1
NVD
NVD
•added 2021/07/06 12:15 p.m.•56 views

CVE-2021-32559

An integer overflow exists in pywin32 prior to version b301 when adding an access control entry ACE to an access control list ACL that would cause the size to be greater than 65535 bytes. An attacker who successfully exploited this vulnerability could crash the vulnerable process...

6.5CVSS0.01729EPSS
SaveExploits0References4
NVD
NVD
•added 2021/06/14 2:15 p.m.•56 views

CVE-2021-24347

The SP Project & Document Manager WordPress plugin before 4.22 allows users to upload files, however, the plugin attempts to prevent php and other similar files that could be executed on the server from being uploaded by checking the file extension. It was discovered that php files could still be...

8.8CVSS0.5408EPSS
SaveExploits8References3
NVD
NVD
•added 2021/06/08 2:15 p.m.•56 views

CVE-2021-30357

SSL Network Extender Client for Linux before build 800008302 reveals part of the contents of the configuration file supplied, which allows partially disclosing files to which the user did not have access...

5.3CVSS0.22792EPSS
SaveExploits1References1
NVD
NVD
•added 2021/05/10 2:15 p.m.•56 views

CVE-2021-23008

On version 15.1.x before 15.1.3, 14.1.x before 14.1.4, 13.1.x before 13.1.4, 12.1.x before 12.1.6, and all versions of 16.0.x and 11.6.x., BIG-IP APM AD Active Directory authentication can be bypassed via a spoofed AS-REP Kerberos Authentication Service Response response sent over a hijacked KDC...

9.8CVSS0.01326EPSS
SaveExploits0References1
NVD
NVD
•added 2021/03/30 8:15 a.m.•56 views

CVE-2021-26919

Apache Druid allows users to read data from other database systems using JDBC. This functionality is to allow trusted users with the proper permissions to set up lookups or submit ingestion tasks. The MySQL JDBC driver supports certain properties, which, if left unmitigated, can allow an attacker...

8.8CVSS0.2276EPSS
SaveExploits1References9
NVD
NVD
•added 2021/03/22 7:15 p.m.•56 views

CVE-2021-22320

There is a denial of service vulnerability in Huawei products. A module cannot deal with specific messages correctly. Attackers can exploit this vulnerability by sending malicious messages to an affected module. This can lead to denial of service. Affected product include some versions of IPS...

7.5CVSS0.00727EPSS
SaveExploits0References1
NVD
NVD
•added 2021/03/11 9:15 p.m.•56 views

CVE-2021-22710

A CWE-119:Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability exists in Interactive Graphical SCADA System IGSS Definition Def.exe V15.0.0.21041 and prior, which could cause remote code execution when malicious CGF Configuration Group File file is imported to IGS...

9.3CVSS0.02EPSS
SaveExploits0References2
NVD
NVD
•added 2021/03/05 2:15 a.m.•56 views

CVE-2021-27964

SonLogger before 6.4.1 is affected by Unauthenticated Arbitrary File Upload. An attacker can send a POST request to /Config/SaveUploadedHotspotLogoFile without any authentication or session header. There is no check for the file extension or content of the uploaded file...

9.8CVSS0.47519EPSS
SaveExploits5References3
NVD
NVD
•added 2020/12/31 9:15 a.m.•56 views

CVE-2020-35915

An issue was discovered in the futures-intrusive crate before 0.4.0 for Rust. GenericMutexGuard allows cross-thread data races of non-Sync types...

5.5CVSS5.5AI score0.00379EPSS
SaveExploits1References1
NVD
NVD
•added 2020/12/08 1:15 a.m.•56 views

CVE-2020-27822

A flaw was found in Wildfly affecting versions 19.0.0.Final, 19.1.0.Final, 20.0.0.Final, 20.0.1.Final, and 21.0.0.Final. When an application uses the OpenTracing API's java-interceptors, there is a possibility of a memory leak. This flaw allows an attacker to impact the availability of the server...

7.1CVSS5.5AI score0.01122EPSS
SaveExploits0References1
NVD
NVD
•added 2020/11/24 1:15 a.m.•56 views

CVE-2020-28991

Gitea 0.9.99 through 1.12.x before 1.12.6 does not prevent a git protocol path that specifies a TCP port number and also contains newlines with URL encoding in ParseRemoteAddr in modules/auth/repoform.go...

9.8CVSS9.4AI score0.01736EPSS
SaveExploits0References2
NVD
NVD
•added 2020/11/09 1:15 a.m.•56 views

CVE-2020-24407

Magento versions 2.4.0 and 2.3.5p1 and earlier are affected by an unsafe file upload vulnerability that could result in arbitrary code execution. This vulnerability could be abused by authenticated users with administrative permissions to the System/Data and Transfer/Import components...

9.1CVSS9.1AI score0.05272EPSS
SaveExploits1References1
NVD
NVD
•added 2020/10/29 3:15 p.m.•56 views

CVE-2020-7384

Rapid7's Metasploit msfvenom framework handles APK files in a way that allows for a malicious user to craft and publish a file that would execute arbitrary commands on a victim's machine...

9.3CVSS7.5AI score0.30463EPSS
SaveExploits8References3
NVD
NVD
•added 2020/09/25 6:15 p.m.•56 views

CVE-2020-16242

The affected Reason S20 Ethernet Switch is vulnerable to cross-site scripting XSS, which may allow an attacker to trick application users into performing critical application actions that include, but are not limited to, adding and updating accounts...

6.1CVSS0.00706EPSS
SaveExploits0References1
NVD
NVD
•added 2020/09/03 2:15 a.m.•56 views

CVE-2020-25086

Ecommerce-CodeIgniter-Bootstrap before 2020-08-03 allows XSS in application/modules/admin/views/advancedsettings/adminUsers.php...

6.1CVSS6AI score0.00679EPSS
SaveExploits0References1
NVD
NVD
•added 2020/08/11 8:15 p.m.•56 views

CVE-2020-8912

A vulnerability in the in-band key negotiation exists in the AWS S3 Crypto SDK for GoLang versions prior to V2. An attacker with write access to the targeted bucket can change the encryption algorithm of an object in the bucket, which can then allow them to change AES-GCM to AES-CTR. Using this i...

2.5CVSS4AI score0.00231EPSS
SaveExploits1References2
NVD
NVD
•added 2020/07/24 1:15 a.m.•56 views

CVE-2020-15920

There is an OS Command Injection in Mida eFramework through 2.9.0 that allows an attacker to achieve Remote Code Execution RCE with administrative root privileges. No authentication is required...

10CVSS10AI score0.98239EPSS
SaveExploits6References3
NVD
NVD
•added 2020/06/11 3:15 p.m.•56 views

CVE-2020-0180

In GetOpusHeaderBuffers of OpusHeader.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10Android...

6.5CVSS0.00732EPSS
SaveExploits0References1
NVD
NVD
•added 2020/04/21 5:15 p.m.•56 views

CVE-2020-5268

In Saml2 Authentication Services for ASP.NET versions before 1.0.2, and between 2.0.0 and 2.6.0, there is a vulnerability in how tokens are validated in some cases. Saml2 tokens are usually used as bearer tokens - a caller that presents a token is assumed to be the subject of the token. There is...

7.3CVSS6.5AI score0.01086EPSS
SaveExploits0References4
NVD
NVD
•added 2020/04/15 9:15 p.m.•56 views

CVE-2020-9280

In SilverStripe through 4.5, files uploaded via Forms to folders migrated from Silverstripe CMS 3.x may be put to the default "/Uploads" folder instead. This affects installations which allowed upload folder protection via the optional silverstripe/secureassets module under 3.x. This module is...

7.5CVSS7.5AI score0.01729EPSS
SaveExploits0References3
NVD
NVD
•added 2020/03/19 6:15 p.m.•56 views

CVE-2019-20520

ERPNext 11.1.47 allows reflected XSS via the PATHINFO to the api/method/ URI...

7.4CVSS6.3AI score0.00786EPSS
SaveExploits1References1
Total number of security vulnerabilities5000