Lucene search
+L
Vulncheck KevMost viewed

5118 matches found

VulnCheck KEV
VulnCheck KEV
•added 2024/01/22 12:00 a.m.•8 views

VulnCheck KEV: CVE-2022-24816

OSGeo GeoServer JAI-EXT contains a code injection vulnerability that, when programs use jt-jiffle and allow Jiffle script to be provided via network request, could allow remote code execution...

10CVSS7.5AI score0.98518EPSS
SaveExploits1References1
VulnCheck KEV
VulnCheck KEV
•added 2024/01/21 12:00 a.m.•8 views

VulnCheck KEV: CVE-2022-1916

The Active Products Tables for WooCommerce. Professional products tables for WooCommerce store WordPress plugin before 1.0.5 does not sanitise and escape a parameter before outputting it back in the response of an AJAX action available to both unauthenticated and authenticated users, leading to...

6.1CVSS6.4AI score0.01913EPSS
SaveExploits1References1
VulnCheck KEV
VulnCheck KEV
•added 2024/01/19 12:00 a.m.•8 views

VulnCheck KEV: CVE-2024-22307

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Lab WP-Lister Lite for eBay wp-lister-for-ebay.This issue affects WP-Lister Lite for eBay: from n/a through = 3.5.7...

6.1CVSS6.8AI score0.00334EPSS
SaveExploits0References1
VulnCheck KEV
VulnCheck KEV
•added 2024/01/05 12:00 a.m.•8 views

VulnCheck KEV: CVE-2021-34624

A vulnerability in the file uploader component found in the /src/Classes/FileUploader.php file of the ProfilePress WordPress plugin made it possible for users to upload arbitrary files during user registration or during profile updates. This issue affects versions 3.0.0 - 3.1.3...

9.8CVSS7.3AI score0.06744EPSS
SaveExploits2References1
VulnCheck KEV
VulnCheck KEV
•added 2023/12/24 12:00 a.m.•8 views

VulnCheck KEV: CVE-2021-35250

A researcher reported a Directory Transversal Vulnerability in Serv-U 15.3. This may allow access to files relating to the Serv-U installation and server files. This issue has been resolved in Serv-U 15.3 Hotfix 1...

7.5CVSS7AI score0.12804EPSS
SaveExploits1References1
VulnCheck KEV
VulnCheck KEV
•added 2023/12/24 12:00 a.m.•8 views

VulnCheck KEV: CVE-2021-24227

The Jetpack Scan team identified a Local File Disclosure vulnerability in the Patreon WordPress plugin before 1.7.0 that could be abused by anyone visiting the site. Using this attack vector, an attacker could leak important internal files like wp-config.php, which contains database credentials...

7.5CVSS7.1AI score0.05927EPSS
SaveExploits1References1
VulnCheck KEV
VulnCheck KEV
•added 2023/12/05 12:00 a.m.•8 views

VulnCheck KEV: CVE-2023-33063

Multiple Qualcomm chipsets contain a use-after-free vulnerability due to memory corruption in DSP Services during a remote call from HLOS to DSP...

7.8CVSS7.3AI score0.007EPSS
SaveExploits0References1
VulnCheck KEV
VulnCheck KEV
•added 2023/12/03 12:00 a.m.•8 views

VulnCheck KEV: CVE-2021-21978

VMware View Planner 4.x prior to 4.6 Security Patch 1 contains a remote code execution vulnerability. Improper input validation and lack of authorization leading to arbitrary file upload in logupload web application. An unauthorized attacker with network access to View Planner Harness could...

9.8CVSS7.9AI score0.99005EPSS
SaveExploits9References1
VulnCheck KEV
VulnCheck KEV
•added 2023/12/02 12:00 a.m.•8 views

VulnCheck KEV: CVE-2021-34187

main/inc/ajax/model.ajax.php in Chamilo through 1.11.14 allows SQL Injection via the searchField, filters, or filters2 parameter...

9.8CVSS7.4AI score0.16181EPSS
SaveExploits1References1
VulnCheck KEV
VulnCheck KEV
•added 2023/11/28 12:00 a.m.•8 views

VulnCheck KEV: CVE-2023-6448

Unitronics Vision Series PLCs and HMIs ship with an insecure default password, which if left unchanged, can allow attackers to execute remote commands...

9.8CVSS7.4AI score0.02089EPSS
SaveExploits0References1
VulnCheck KEV
VulnCheck KEV
•added 2023/11/26 12:00 a.m.•8 views

VulnCheck KEV: CVE-2017-15363

Directory traversal vulnerability in public/examples/resources/getsource.php in Luracast Restler through 3.0.0, as used in the restler extension before 1.7.1 for TYPO3, allows remote attackers to read arbitrary files via the file parameter...

7.5CVSS7.2AI score0.15333EPSS
SaveExploits1References1
VulnCheck KEV
VulnCheck KEV
•added 2023/11/25 12:00 a.m.•8 views

VulnCheck KEV: CVE-2023-1454

A vulnerability classified as critical has been found in jeecg-boot 3.5.0. This affects an unknown part of the file jmreport/qurestSql. The manipulation of the argument apiSelectId leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public...

9.8CVSS6.5AI score0.35825EPSS
SaveExploits3References1
VulnCheck KEV
VulnCheck KEV
•added 2023/11/20 12:00 a.m.•8 views

VulnCheck KEV: CVE-2020-28185

User Enumeration vulnerability in TerraMaster TOS = 4.2.06 allows remote unauthenticated attackers to identify valid users within the system via the username parameter to wizard/initialise.php...

5.3CVSS6.1AI score0.18253EPSS
SaveExploits1References1
VulnCheck KEV
VulnCheck KEV
•added 2023/11/18 12:00 a.m.•8 views

VulnCheck KEV: CVE-2022-38130

The com.keysight.tentacle.config.ResourceManager.smsRestoreDatabaseZip method is used to restore the HSQLDB database used in SMS. It takes the path of the zipped database file as the single parameter. An unauthenticated, remote attacker can specify an UNC path for the database file i.e.,...

9.8CVSS7.3AI score0.54072EPSS
SaveExploits0References1
VulnCheck KEV
VulnCheck KEV
•added 2023/11/17 12:00 a.m.•8 views

VulnCheck KEV: CVE-2017-12635

Due to differences in the Erlang-based JSON parser and JavaScript-based JSON parser, it is possible in Apache CouchDB before 1.7.0 and 2.x before 2.1.1 to submit users documents with duplicate keys for 'roles' used for access control within the database, including the special case 'admin' role,...

10CVSS7.3AI score0.99838EPSS
SaveExploits23References1
VulnCheck KEV
VulnCheck KEV
•added 2023/11/17 12:00 a.m.•8 views

VulnCheck KEV: CVE-2021-46417

Insecure handling of a download function leads to disclosure of internal files due to path traversal with root privileges in Franklin Fueling Systems Colibri Controller Module 1.8.19.8580...

7.8CVSS7.1AI score0.59753EPSS
SaveExploits7References1
VulnCheck KEV
VulnCheck KEV
•added 2023/11/15 12:00 a.m.•8 views

VulnCheck KEV: CVE-2022-32409

A local file inclusion LFI vulnerability in the component codemirror.php of Portal do Software Publico Brasileiro i3geo v7.0.5 allows attackers to execute arbitrary PHP code via a crafted HTTP request...

9.8CVSS7.5AI score0.12593EPSS
SaveExploits1References1
VulnCheck KEV
VulnCheck KEV
•added 2023/11/14 12:00 a.m.•8 views

VulnCheck KEV: CVE-2019-18394

A Server Side Request Forgery SSRF vulnerability in FaviconServlet.java in Ignite Realtime Openfire through 4.4.2 allows attackers to send arbitrary HTTP GET requests...

9.8CVSS7.4AI score0.32304EPSS
SaveExploits1References1
VulnCheck KEV
VulnCheck KEV
•added 2023/11/14 12:00 a.m.•8 views

VulnCheck KEV: CVE-2021-46442

In the "webupg" binary of D-Link DIR-825 G1, attackers can bypass authentication through parameters "autoupgrade.asp", and perform functions such as downloading configuration files and updating firmware without authorization...

9.8CVSS7.3AI score0.5554EPSS
SaveExploits1References1
VulnCheck KEV
VulnCheck KEV
•added 2023/11/14 12:00 a.m.•8 views

VulnCheck KEV: CVE-2023-36036

Microsoft Windows Cloud Files Mini Filter Driver contains a privilege escalation vulnerability that could allow an attacker to gain SYSTEM privileges...

7.8CVSS7.3AI score0.1667EPSS
SaveExploits0References1
VulnCheck KEV
VulnCheck KEV
•added 2023/11/13 12:00 a.m.•8 views

VulnCheck KEV: CVE-2022-29014

A local file inclusion vulnerability in Razer Sila Gaming Router v2.0.441api-2.0.418 allows attackers to read arbitrary files...

7.5CVSS7.2AI score0.113EPSS
SaveExploits1References1
VulnCheck KEV
VulnCheck KEV
•added 2023/11/02 12:00 a.m.•8 views

VulnCheck KEV: CVE-2023-22518

Atlassian Confluence Data Center and Server contain an improper authorization vulnerability that can result in significant data loss when exploited by an unauthenticated attacker. There is no impact on confidentiality since the attacker cannot exfiltrate any data...

10CVSS7.4AI score0.99999EPSS
SaveExploits14References1
VulnCheck KEV
VulnCheck KEV
•added 2023/10/31 12:00 a.m.•8 views

VulnCheck KEV: CVE-2019-12988

Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation issue 4 of 6...

10CVSS7.3AI score0.42551EPSS
SaveExploits1References1
VulnCheck KEV
VulnCheck KEV
•added 2023/10/10 12:00 a.m.•8 views

VulnCheck KEV: CVE-2023-36563

Microsoft WordPad contains an unspecified vulnerability that allows for information disclosure...

6.5CVSS7.1AI score0.20719EPSS
SaveExploits0References1
VulnCheck KEV
VulnCheck KEV
•added 2023/10/10 12:00 a.m.•8 views

VulnCheck KEV: CVE-2023-41763

Microsoft Skype for Business contains an unspecified vulnerability that allows for privilege escalation...

5.3CVSS7AI score0.90353EPSS
SaveExploits0References1
VulnCheck KEV
VulnCheck KEV
•added 2023/10/02 12:00 a.m.•8 views

VulnCheck KEV: CVE-2022-22071

Multiple Qualcomm chipsets contain a use-after-free vulnerability when process shell memory is freed using IOCTL munmap call and process initialization is in progress...

8.4CVSS7.3AI score0.00455EPSS
SaveExploits0References1
VulnCheck KEV
VulnCheck KEV
•added 2023/09/07 12:00 a.m.•8 views

VulnCheck KEV: CVE-2023-41061

Apple iOS, iPadOS, and watchOS contain an unspecified vulnerability due to a validation issue affecting Wallet in which a maliciously crafted attachment may result in code execution. This vulnerability was chained with CVE-2023-41064...

7.8CVSS7.4AI score0.15263EPSS
SaveExploits2References1
VulnCheck KEV
VulnCheck KEV
•added 2023/08/30 12:00 a.m.•8 views

VulnCheck KEV: CVE-2023-38204

Adobe ColdFusion versions 2018u18 and earlier, 2021u8 and earlier and 2023u2 and earlier are affected by a Deserialization of Untrusted Data vulnerability that could result in Arbitrary code execution. Exploitation of this issue does not require user interaction...

9.8CVSS7.5AI score0.66837EPSS
SaveExploits0References1
VulnCheck KEV
VulnCheck KEV
•added 2023/08/10 12:00 a.m.•8 views

VulnCheck KEV: CVE-2023-39312

Missing Authorization vulnerability in ThemeFusion Avada.This issue affects Avada: from n/a through 7.11.1...

9.1CVSS7.3AI score0.00598EPSS
SaveExploits0References1
VulnCheck KEV
VulnCheck KEV
•added 2023/07/26 12:00 a.m.•8 views

VulnCheck KEV: CVE-2023-38408

The PKCS11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently trustworthy search path, leading to remote code execution if an agent is forwarded to an attacker-controlled system. Code in /usr/lib is not necessarily safe for loading into ssh-agent. NOTE: this issue exists...

9.8CVSS7.5AI score0.797EPSS
SaveExploits10References1
VulnCheck KEV
VulnCheck KEV
•added 2023/07/20 12:00 a.m.•8 views

VulnCheck KEV: CVE-2023-38205

Adobe ColdFusion contains an improper access control vulnerability that allows for a security feature bypass...

7.5CVSS7.3AI score0.99742EPSS
SaveExploits0References1
VulnCheck KEV
VulnCheck KEV
•added 2023/07/18 12:00 a.m.•8 views

VulnCheck KEV: CVE-2023-3519

Citrix NetScaler ADC and NetScaler Gateway contains a code injection vulnerability that allows for unauthenticated remote code execution...

9.8CVSS7.7AI score0.99749EPSS
SaveExploits16References1
VulnCheck KEV
VulnCheck KEV
•added 2023/07/12 12:00 a.m.•8 views

VulnCheck KEV: CVE-2023-38198

acme.sh before 3.0.6 runs arbitrary commands from a remote server via eval, as exploited in the wild in June 2023...

9.8CVSS7.5AI score0.01079EPSS
SaveExploits0References1
VulnCheck KEV
VulnCheck KEV
•added 2023/07/11 12:00 a.m.•8 views

VulnCheck KEV: CVE-2023-32046

Microsoft Windows MSHTML Platform contains an unspecified vulnerability that allows for privilege escalation...

7.8CVSS7.3AI score0.10049EPSS
SaveExploits0References1
VulnCheck KEV
VulnCheck KEV
•added 2023/07/05 12:00 a.m.•8 views

VulnCheck KEV: CVE-2022-31374

An arbitrary file upload vulnerability /images/background/1.php in of SolarView Compact 6.0 allows attackers to execute arbitrary code via a crafted php file...

9.8CVSS7.6AI score0.02463EPSS
SaveExploits1References1
VulnCheck KEV
VulnCheck KEV
•added 2023/07/05 12:00 a.m.•8 views

VulnCheck KEV: CVE-2022-39952

A external control of file name or path in Fortinet FortiNAC versions 9.4.0, 9.2.0 through 9.2.5, 9.1.0 through 9.1.7, 8.8.0 through 8.8.11, 8.7.0 through 8.7.6, 8.6.0 through 8.6.5, 8.5.0 through 8.5.4, 8.3.7 may allow an unauthenticated attacker to execute unauthorized code or commands via...

9.8CVSS7.5AI score0.99809EPSS
SaveExploits7References1
VulnCheck KEV
VulnCheck KEV
•added 2023/07/01 12:00 a.m.•8 views

VulnCheck KEV: CVE-2022-46690

An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 16.2 and iPadOS 16.2, macOS Ventura 13.1, tvOS 16.2, watchOS 9.2. An app may be able to execute arbitrary code with kernel privileges...

7.8CVSS7.6AI score0.00533EPSS
SaveExploits0References1
VulnCheck KEV
VulnCheck KEV
•added 2023/06/22 12:00 a.m.•8 views

VulnCheck KEV: CVE-2019-5526

VMware Workstation 15.x before 15.1.0 contains a DLL hijacking issue because some DLL files are improperly loaded by the application. Successful exploitation of this issue may allow attackers with normal user privileges to escalate their privileges to administrator on a windows host where...

9.3CVSS7.1AI score0.0903EPSS
SaveExploits4References1
VulnCheck KEV
VulnCheck KEV
•added 2023/06/07 12:00 a.m.•8 views

VulnCheck KEV: CVE-2023-3124

The Elementor Pro plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check on the updatepageoption function in versions up to, and including, 3.11.6. This makes it possible for authenticated attackers with subscriber-level capabilities to update...

8.8CVSS7.3AI score0.2272EPSS
SaveExploits2References1
VulnCheck KEV
VulnCheck KEV
•added 2023/06/01 12:00 a.m.•8 views

VulnCheck KEV: CVE-2023-3079

Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft...

8.8CVSS7.5AI score0.3211EPSS
SaveExploits2References1
VulnCheck KEV
VulnCheck KEV
•added 2023/06/01 12:00 a.m.•8 views

VulnCheck KEV: CVE-2023-27639

An issue was discovered in the tshirtecommerce aka Custom Product Designer component 2.1.4 for PrestaShop. An HTTP request can be forged with the POST parameter filename in the tshirtecommerce/ajax.php?type=svg endpoint, to allow a remote attacker to traverse directories on the system in order...

7.5CVSS7.2AI score0.03551EPSS
SaveExploits1References1
VulnCheck KEV
VulnCheck KEV
•added 2023/05/12 12:00 a.m.•8 views

VulnCheck KEV: CVE-2014-0196

Linux Kernel contains a race condition vulnerability within the nttywrite function that allows local users to cause a denial-of-service DoS or gain privileges via read and write operations with long strings...

6.9CVSS6.4AI score0.22475EPSS
SaveExploits7References1
VulnCheck KEV
VulnCheck KEV
•added 2023/05/12 12:00 a.m.•8 views

VulnCheck KEV: CVE-2016-3427

Oracle Java SE and JRockit contains an unspecified vulnerability that allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Java Management Extensions JMX. This vulnerability can be exploited through sandboxed Java Web Start applications and...

10CVSS6.8AI score0.92334EPSS
SaveExploits1References1
VulnCheck KEV
VulnCheck KEV
•added 2023/05/11 12:00 a.m.•8 views

VulnCheck KEV: CVE-2023-32244

Improper Privilege Management vulnerability in XTemos Woodmart Core allows Privilege Escalation.This issue affects Woodmart Core: from n/a through 1.0.36...

9.8CVSS7.3AI score0.00789EPSS
SaveExploits0References1
VulnCheck KEV
VulnCheck KEV
•added 2023/05/02 12:00 a.m.•8 views

VulnCheck KEV: CVE-2021-31602

An issue was discovered in Hitachi Vantara Pentaho through 9.1 and Pentaho Business Intelligence Server through 7.x. The Security Model has different layers of Access Control. One of these layers is the applicationContext security, which is defined in the applicationContext-spring-security.xml...

7.5CVSS7.2AI score0.51653EPSS
SaveExploits5References1
VulnCheck KEV
VulnCheck KEV
•added 2023/04/28 12:00 a.m.•8 views

VulnCheck KEV: CVE-2023-27351

This vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG 22.0.5 Build 63914. Authentication is not required to exploit this vulnerability. The specific flaw exists within the SecurityRequestFilter class. The issue results from improper...

8.2CVSS7.4AI score0.77388EPSS
SaveExploits2References1
VulnCheck KEV
VulnCheck KEV
•added 2023/04/11 12:00 a.m.•8 views

VulnCheck KEV: CVE-2021-38153

Some components in Apache Kafka use Arrays.equals to validate a password or key, which is vulnerable to timing attacks that make brute force attacks for such credentials more likely to be successful. Users should upgrade to 2.8.1 or higher, or 3.0.0 or higher where this vulnerability has been...

5.9CVSS6.8AI score0.06252EPSS
SaveExploits0References1
VulnCheck KEV
VulnCheck KEV
•added 2023/03/29 12:00 a.m.•8 views

VulnCheck KEV: CVE-2023-0266

Linux kernel contains a use-after-free vulnerability that allows for privilege escalation to gain ring0 access from the system user...

7.9CVSS6.9AI score0.03702EPSS
SaveExploits0References1
VulnCheck KEV
VulnCheck KEV
•added 2023/03/24 12:00 a.m.•8 views

VulnCheck KEV: CVE-2023-28432

MinIO contains a vulnerability in a cluster deployment where MinIO returns all environment variables, which allows for information disclosure...

7.5CVSS7.3AI score0.83957EPSS
SaveExploits13References1
VulnCheck KEV
VulnCheck KEV
•added 2023/03/08 12:00 a.m.•8 views

VulnCheck KEV: CVE-2021-39144

XStream contains a remote code execution vulnerability that allows an attacker to manipulate the processed input stream and replace or inject objects that result in the execution of a local command on the server. This vulnerability can affect multiple products, including but not limited to VMware...

8.5CVSS7.6AI score0.98124EPSS
SaveExploits6References1
Total number of security vulnerabilities5000