ENISA EU Vulnerability Database

35,538 results · Clear filters · Feed

• Medium 4.3
  CVE-2020-23588 Public exploit

  A vulnerability in OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OP_V3.3.1-191028 allows an unauthent…

  Nov 23, 2022
• Medium 4.3
  CVE-2020-23586 Public exploit

  A vulnerability found in OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OP_V3.3.1-191028 allows an una…

  Nov 23, 2022
• Medium 6.5
  CVE-2020-23589 Public exploit

  A vulnerability in OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OP_V3.3.1-191028 allows an unauthent…

  Nov 23, 2022
• Low 3.1
  CVE-2020-23587 Public exploit

  A vulnerability found in the OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OP_V3.3.1-191028 allows an…

  Nov 23, 2022
• High 8.8
  CVE-2020-23592 Public exploit

  A vulnerability in OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OP_V3.3.1-191028 allows an unauthent…

  Nov 23, 2022
• Critical 9.8
  CVE-2020-23591 Public exploit

  A vulnerability in OPTILINK OP-XT71000N Hardware Version: V2.2 , Firmware Version: OP_V3.3.1-191028 allows an attacker …

  Nov 23, 2022
• Medium 6.5
  CVE-2020-23593 Public exploit

  A vulnerability in OPTILINK OP-XT71000N Hardware Version: V2.2, Firmware Version: OP_V3.3.1-191028 allows an unauthenti…

  Nov 23, 2022
• Critical 9.8
  CVE-2020-23584 Public exploit EPSS 41%

  Unauthenticated remote code execution in OPTILINK OP-XT71000N, Hardware Version: V2.2 occurs when the attacker passes a…

  Nov 23, 2022
• Medium 6.5
  CVE-2020-23590 Public exploit

  A vulnerability in Optilink OP-XT71000N Hardware version: V2.2 , Firmware Version: OP_V3.3.1-191028 allows an unauthent…

  Nov 23, 2022
• High 8.8
  CVE-2020-23585 Public exploit

  A remote attacker can conduct a cross-site request forgery (CSRF) attack on OPTILINK OP-XT71000N Hardware Version: V2.2…

  Nov 23, 2022
• Medium 5.4
  CVE-2022-35501 Public exploit

  Stored Cross-site Scripting (XSS) exists in the Amasty Blog Pro 2.10.3 and 2.10.4 plugin for Magento 2 because of the d…

  Nov 23, 2022
• Medium 5.4
  CVE-2022-35500 Public exploit

  Amasty Blog 2.10.3 is vulnerable to Cross Site Scripting (XSS) via leave comment functionality.

  Nov 23, 2022
• Medium 5.4
  CVE-2022-45472 Public exploit

  CAE LearningSpace Enterprise (with Intuity License) image 267r patch 639 allows DOM XSS, related to ontouchmove and onp…

  Nov 23, 2022
• High 8.8
  CVE-2022-44789 Public exploit

  A logical issue in O_getOwnPropertyDescriptor() in Artifex MuJS 1.0.0 through 1.3.x before 1.3.2 allows an attacker to …

  mujs mujs Debian Ubuntu
  Nov 23, 2022
• Critical 9.8
  CVE-2022-44118 Public exploit

  dedecmdv6 v6.1.9 is vulnerable to Remote Code Execution (RCE) via file_manage_control.php.

  Nov 23, 2022
• Critical 9.6
  CVE-2022-41924 Public exploit

  Tailscale Windows daemon is vulnerable to RCE via CSRF

  A vulnerability identified in the Tailscale Windows client allows a malicious website to reconfigure the Tailscale daemon `tailscaled`, which can then be used to remotely execute code. In the Tailscale Windows client, the local API was bound to a local TCP so…

  tailscale tailscale tailscale.com tailscale Alpine Go
  Nov 23, 2022
• Critical 9.1
  CVE-2022-41923 Public exploit

  Grails Spring Security Core plugin vulnerable to privilege escalation

  Grails Spring Security Core plugin is vulnerable to privilege escalation. The vulnerability allows an attacker access to one endpoint (i.e. the targeted endpoint) using the authorization requirements of a different endpoint (i.e. the donor endpoint). In some …

  grails grails-spring-security-core
  Nov 23, 2022
• Medium 5.4
  CVE-2022-41446 Public exploit

  An access control issue in /Admin/dashboard.php of Record Management System using CodeIgniter v1.0 allows attackers to …

  Nov 23, 2022
• Medium 4.8
  CVE-2022-42095 Public exploit Scanner template

  Cross-site Scripting in Backdrop CMS

  Backdrop CMS version 1.23.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Page content.

  backdrop/backdrop Packagist
  Nov 23, 2022
• High 8.8
  CVE-2021-43258 Public exploit EPSS 12%

  CartView.php in ChurchInfo 1.3.0 allows attackers to achieve remote code execution through insecure uploads. This requi…

  Nov 23, 2022
• High 7.8
  CVE-2022-3910 Public exploit

  Use after free in IO_uring in the Linux Kernel

  Use After Free vulnerability in Linux Kernel allows Privilege Escalation. An improper Update of Reference Count in io_uring leads to Use-After-Free and Local Privilege Escalation. When io_msg_ring was invoked with a fixed file, it called io_fput_file() which …

  Linux linux_kernel linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  Nov 22, 2022
• High 8.8
  CVE-2022-39066 Public exploit EPSS 27%

  There is a SQL injection vulnerability in ZTE MF286R. Due to insufficient validation of the input parameters of the pho…

  Nov 22, 2022
• Medium 4.8
  CVE-2022-41445 Public exploit

  A cross-site scripting (XSS) vulnerability in Record Management System using CodeIgniter 1.0 allows attackers to execut…

  Nov 22, 2022
• Medium 4.8
  CVE-2022-42097 Public exploit

  Cross-site Scripting in Backdrop CMS

  Backdrop CMS version 1.23.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via 'Comment.' .

  backdrop/backdrop Packagist
  Nov 22, 2022
• Medium 4.8
  CVE-2022-42094 Public exploit Scanner template

  Cross-site Scripting in Backdrop CMS

  Backdrop CMS version 1.23.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the 'Card' content.

  backdrop/backdrop Packagist
  Nov 22, 2022
• High 8.8
  CVE-2022-42098 Public exploit

  KLiK SocialMediaWebsite version v1.0.1 is vulnerable to SQL Injection via the profile.php.

  Nov 22, 2022
• High 8.8
  CVE-2022-37332 Public exploit

  A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 12.0.1.12430. A …

  Foxit Foxit Reader
  Nov 21, 2022
• Medium 6.5
  CVE-2020-23582 Public exploit

  A vulnerability in the "/admin/wlmultipleap.asp" of optilink OP-XT71000N version: V2.2 could allow an unauthenticated, …

  Nov 21, 2022
• High 8.8
  CVE-2022-4096 Public exploit

  Server-Side Request Forgery (SSRF) in appsmithorg/appsmith

  Server-Side Request Forgery (SSRF) in GitHub repository appsmithorg/appsmith prior to 1.8.2.

  appsmithorg appsmithorg/appsmith
  Nov 21, 2022
• Medium 4.8
  CVE-2022-40470 Public exploit

  Phpgurukul Blood Donor Management System 1.0 allows Cross Site Scripting via Add Blood Group Name Feature.

  Nov 21, 2022
• High 7.8
  CVE-2022-44830 Public exploit

  Sourcecodester Event Registration App v1.0 was discovered to contain multiple CSV injection vulnerabilities via the Fir…

  Nov 21, 2022
• Medium 4.8
  CVE-2022-42096 Public exploit Scanner template

  Cross-site Scripting in Backdrop CMS

  Backdrop CMS version 1.23.0 was discovered to contain a stored cross-site scripting (XSS) vulnerability via Post content.

  backdrop/backdrop Packagist
  Nov 21, 2022
• Medium 5.4
  CVE-2022-43117 Public exploit

  Sourcecodester Password Storage Application in PHP/OOP and MySQL 1.0 was discovered to contain multiple cross-site scri…

  Nov 21, 2022
• Critical 9.6
  CVE-2022-43143 Public exploit

  A cross-site scripting (XSS) vulnerability in Beekeeper Studio v3.6.6 allows attackers to execute arbitrary web scripts…

  Nov 21, 2022
• Medium 5.5
  CVE-2022-4065 Public exploit

  cbeust testng XML File Parser JarFileUtils.java testngXmlExistsInJar path traversal

  A vulnerability was found in cbeust testng 7.5.0/7.6.0/7.6.1/7.7.0. It has been declared as critical. Affected by this vulnerability is the function testngXmlExistsInJar of the file testng-core/src/main/java/org/testng/JarFileUtils.java of the component XML F…

  cbeust testng org.testng:testng testng Ubuntu Maven
  Nov 19, 2022
• High 7.5
  CVE-2022-41840 Public exploit Scanner template

  WordPress Welcart eCommerce plugin <= 2.7.7 - Unauth. Directory Traversal vulnerability

  Unauth. Directory Traversal vulnerability in Welcart eCommerce plugin <= 2.7.7 on WordPress.

  Collne Welcart e-Commerce (WordPress plugin) Web / CMS
  Nov 18, 2022
• High 7.8
  CVE-2022-37197 Public exploit

  IOBit IOTransfer V4 is vulnerable to Unquoted Service Path.

  Nov 18, 2022
• Critical 9.8
  CVE-2022-43781 Public exploit EPSS 98%

  There is a command injection vulnerability using environment variables in Bitbucket Server and Data Center. An attacker…

  Atlassian Bitbucket Server Bitbucket Data Center
  Nov 17, 2022
• Medium 5.4
  CVE-2022-36432 Public exploit

  The Preview functionality in the Amasty Blog Pro 2.10.3 plugin for Magento 2 uses eval unsafely. This allows attackers …

  Nov 17, 2022
• Critical 9.8
  CVE-2022-40881 Public exploit Scanner template EPSS 31%

  SolarView Compact 6.00 was discovered to contain a command injection vulnerability via network_test.php

  Nov 17, 2022