35,538 results · Clear filters · Feed
-
Unscored —CVE-2022-23342 Public exploit
The Hyland Onbase Application Server releases prior to 20.3.58.1000 and OnBase releases 21.1.1.1000 through 21.1.15.100…
-
Medium 5.3CVE-2022-31062 Public exploit
Unauthenticated Local File Inclusion
### Impact A plugin public script can be used to read content of system files. ### Patches Upgrade to version 1.0.2. ### Workarounds `b/deploy/index.php` file can be deleted if deploy feature is not used.
-
Unscored —CVE-2021-40903 Public exploit
A vulnerability in Antminer Monitor 0.50.0 exists because of backdoor or misconfiguration inside a settings file in fla…
-
Unscored —CVE-2022-31296 Public exploit
Online Discussion Forum Site 1 was discovered to contain a blind SQL injection vulnerability via the component /odfs/po…
-
Unscored —CVE-2021-45026 Public exploit
ASG technologies ASG-Zena Cross Platform Server Enterprise Edition 4.2.1 is vulnerable to Cross Site Scripting (XSS).
-
Unscored —
Haraj v3.7 was discovered to contain a reflected cross-site scripting (XSS) vulnerability in the User Upgrade Form.
-
Unscored —CVE-2022-31295 Public exploit
An issue in the delete_post() function of Online Discussion Forum Site 1 allows unauthenticated attackers to arbitraril…
-
Unscored —
In IOBit IOTransfer 4.3.1.1561, an unauthenticated attacker can send GET and POST requests to Airserv and gain arbitrar…
-
Unscored —CVE-2022-31294 Public exploit
An issue in the save_users() function of Online Discussion Forum Site 1 allows unauthenticated attackers to arbitrarily…
-
Unscored —CVE-2022-31301 Public exploit
Haraj v3.7 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the Post Ads component.
-
Unscored —CVE-2022-31298 Public exploit
A cross-site scripting vulnerability in the ads comment section of Haraj v3.7 allows attackers to execute arbitrary web…
-
Unscored —
Tenda ONT GPON AC1200 Dual band WiFi HG9 v1.0.1 is vulnerable to Command Injection via the Ping function.
-
Unscored —CVE-2022-31300 Public exploit
A cross-site scripting vulnerability in the DM Section component of Haraj v3.7 allows attackers to execute arbitrary we…
-
High 7.5
mysqlnd/pdo password buffer overflow
In PHP versions 7.4.x below 7.4.30, 8.0.x below 8.0.20, and 8.1.x below 8.1.7, when pdo_mysql extension with mysqlnd driver, if the third party is allowed to supply host to connect to and the password for the connection, password of excessive length can trigg…
-
Critical 9.8
Windows Network File System Remote Code Execution Vulnerability
Windows Network File System Remote Code Execution Vulnerability
-
High 8.8CVE-2022-33140 Public exploit
Improper Neutralization of Command Elements in Shell User Group Provider
The optional ShellUserGroupProvider in Apache NiFi 1.10.0 to 1.16.2 and Apache NiFi Registry 0.6.0 to 1.16.2 does not neutralize arguments for group resolution commands, allowing injection of operating system commands on Linux and macOS platforms. The ShellUs…
-
Unscored —CVE-2022-20142 Public exploit
In createFromParcel of GeofenceHardwareRequestParcelable.java, there is a possible arbitrary code execution due to parc…
-
Unscored —CVE-2022-20140 Public exploit
In read_multi_rsp of gatt_sr.cc, there is a possible out of bounds write due to an incorrect bounds check. This could l…
-
Unscored —CVE-2022-20138 Public exploit
In ACTION_MANAGED_PROFILE_PROVISIONED of DevicePolicyManagerService.java, there is a possible way for unprivileged app …
-
Unscored —CVE-2022-20130 Public exploit
In transportDec_OutOfBandConfig of tpdec_lib.cpp, there is a possible out of bounds write due to a heap buffer overflow…
-
Unscored —CVE-2022-20126 Public exploit
In setScanMode of AdapterService.java, there is a possible way to enable Bluetooth discovery mode without user interact…
-
Unscored —CVE-2022-20186 Public exploit
In kbase_mem_alias of mali_kbase_mem_linux.c, there is a possible arbitrary code execution due to improper input valida…
-
Unscored —CVE-2022-31403 Public exploit
ITOP v3.0.1 was discovered to contain a cross-site scripting (XSS) vulnerability via /itop/pages/ajax.render.php.
-
High 7.5CVE-2021-30327 Public exploit
Buffer overflow in sahara protocol while processing commands leads to overwrite of secure configuration data in Snapdra…
-
High 8.4CVE-2022-22057 Public exploit
Use after free in graphics fence due to a race condition while closing fence file descriptor and destroy graphics timel…
-
Critical 9.8
Power Distribution Units running on Powertek firmware (multiple brands) before 3.30.30 allows remote authorization bypa…
-
Medium 4.7
WordPress Elementor plugin <= 3.5.5 - Unauthenticated DOM-based Reflected Cross-Site Scripting (XSS) vulnerability
DOM-based Reflected Cross-Site Scripting (XSS) vulnerability in Elementor's Elementor Website Builder plugin <= 3.5.5 versions.
-
Unscored —
Lighttpd 1.4.56 through 1.4.58 allows a remote attacker to cause a denial of service (CPU consumption from stuck connec…
-
High 8.1
Deserialization of Untrusted Data
The package com.alibaba:fastjson before 1.2.83 are vulnerable to Deserialization of Untrusted Data by bypassing the default autoType shutdown restrictions, which is possible under certain conditions. Exploiting this vulnerability allows attacking remote serve…
-
Unscored —CVE-2022-32981 Public exploit
An issue was discovered in the Linux kernel through 5.18.3 on powerpc 32-bit platforms. There is a buffer overflow in p…
-
Unscored —CVE-2018-17240 Public exploit
There is a memory dump vulnerability on Netwave IP camera devices at //proc/kcore that allows an unauthenticated attack…
-
Unscored —CVE-2022-31402 Public exploit
ITOP v3.0.1 was discovered to contain a cross-site scripting (XSS) vulnerability via /itop/webservices/export-v2.php.
-
Unscored —CVE-2021-44117 Public exploit
A Cross Site Request Forgery (CSRF) vulnerability exists in TheDayLightStudio Fuel CMS 1.5.0 via a POST call to /fuel/s…
-
Unscored —CVE-2021-44582 Public exploit
A Privilege Escalation vulnerability exists in Sourcecodester Money Transfer Management System 1.0, which allows a remo…
-
Unscored —CVE-2022-27502 Public exploit
RealVNC VNC Server 6.9.0 through 5.1.0 for Windows allows local privilege escalation because an installer repair operat…
-
Medium 6.3CVE-2019-25066 Public exploit
ajenti API privileges management
A vulnerability has been found in ajenti 2.1.31 and classified as critical. This vulnerability affects unknown code of the component API. The manipulation leads to privilege escalation. The attack can be initiated remotely. The exploit has been disclosed to t…
-
Medium 6.3CVE-2019-25065 Public exploit
OpenNetAdmin os command injection
A vulnerability was found in OpenNetAdmin 18.1.1. It has been rated as critical. Affected by this issue is some unknown functionality. The manipulation leads to privilege escalation. The attack may be launched remotely. The exploit has been disclosed to the p…
-
Unscored —
In TP-Link Router AX50 firmware 210730 and older, import of a malicious backup file via web interface can lead to remot…
-
Unscored —CVE-2022-32272 Public exploit
OPSWAT MetaDefender Core before 5.1.2, MetaDefender ICAP before 4.12.1, and MetaDefender Email Gateway Security before …
-
Unscored —CVE-2022-31325 Public exploit
There is a SQL Injection vulnerability in ChurchCRM 4.4.5 via the 'PersonID' field in /churchcrm/WhyCameEditor.php.