35,538 results · Clear filters · Feed
-
Unscored —CVE-2020-28874 Public exploit
reset-password.php in ProjectSend before r1295 allows remote attackers to reset a password because of incorrect busines…
-
Medium 6.5CVE-2021-21239 Public exploit
Open default xmlsec1 key-type preference
PySAML2 is a pure python implementation of SAML Version 2 Standard. PySAML2 before 6.5.0 has an improper verification of cryptographic signature vulnerability. Users of pysaml2 that use the default CryptoBackendXmlSec1 backend and need to verify signed SAML d…
-
Unscored —CVE-2020-11179 Public exploit
Arbitrary read and write to kernel addresses by temporarily overwriting ring buffer pointer and creating a race conditi…
-
Unscored —CVE-2021-3164 Public exploit
ChurchRota 2.6.4 is vulnerable to authenticated remote code execution. The user does not need to have file upload permi…
-
Unscored —CVE-2020-25686 Public exploit
A flaw was found in dnsmasq before version 2.83. When receiving a query, dnsmasq does not check for an existing pending…
-
Unscored —CVE-2021-3130 Public exploit
Within the Open-AudIT up to version 3.5.3 application, the web interface hides SSH secrets, Windows passwords, and SNMP…
-
Medium 6.0CVE-2021-2119 Public exploit
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). The supported version tha…
-
High 7.2
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported version…
-
Critical 9.8CVE-2021-1994 Public exploit
Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Services). Supported ve…
-
Critical 9.8
Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core Components). Supported versi…
-
Unscored —
Local file inclusion in FHEM 6.0 allows in fhem/FileLog_logWrapper file parameter can allow an attacker to include a fi…
-
Unscored —CVE-2020-28707 Public exploit
The Stockdio Historical Chart plugin before 2.8.1 for WordPress is affected by Cross Site Scripting (XSS) via stockdio_…
-
Unscored —
A CSRF vulnerability exists in Anchor CMS 0.12.7 anchor/views/users/edit.php that can change the Delete admin users.
-
Unscored —CVE-2020-23522 Public exploit
Pixelimity 1.0 has cross-site request forgery via the admin/setting.php data [Password] parameter.
-
High 7.5
-
Unscored —CVE-2021-3166 Public exploit
An issue was discovered on ASUS DSL-N14U-B1 1.1.2.3_805 devices. An attacker can upload arbitrary file content as a fir…
-
Unscored —
Directory traversal vulnerability in class-simple_job_board_resume_download_handler.php in the Simple Board Job plugin …
-
Medium 6.1CVE-2020-27219 Public exploit
Cross-site Scripting in Eclipse Hawkbit
In all version of Eclipse Hawkbit prior to 0.3.0M7, the HTTP 404 (Not Found) JSON response body returned by the REST API may contain unsafe characters within the path attribute. Sending a POST request to a non existing resource will return the full path from …
-
Unscored —CVE-2020-27368 Public exploit
Directory Indexing in Login Portal of Login Portal of TOTOLINK-A702R-V1.0.0-B20161227.1023 allows attacker to access /i…
-
Unscored —CVE-2020-26733 Public exploit
Cross Site Scripting (XSS) in Configuration page in SKYWORTH GN542VF Hardware Version 2.0 and Software Version 2.0.0.16…
-
Unscored —CVE-2021-3138 Public exploit
In Discourse 2.7.0 through beta1, a rate-limit bypass leads to a bypass of the 2FA requirement for certain forms.
-
High 7.5CVE-2020-26732 Public exploit
SKYWORTH GN542VF Hardware Version 2.0 and Software Version 2.0.0.16 does not set the Secure flag for the session cookie…
-
Unscored —
An issue was discovered in the Manage Plugins page in Nagios XI before 5.8.0. Because the line-ending conversion featur…
-
Unscored —CVE-2020-35687 Public exploit
PHPFusion version 9.03.90 is vulnerable to CSRF attack which leads to deletion of all shoutbox messages by the attacker…
-
Unscored —CVE-2021-3131 Public exploit
The Web server in 1C:Enterprise 8 before 8.3.17.1851 sends base64 encoded credentials in the creds URL parameter.
-
Medium 5.5CVE-2021-1699 Public exploit
Windows (modem.sys) Information Disclosure Vulnerability
Windows (modem.sys) Information Disclosure Vulnerability
-
High 8.8
Windows Print Spooler Spoofing Vulnerability
Windows Print Spooler Spoofing Vulnerability
-
Medium 5.5CVE-2021-1656 Public exploit
TPM Device Driver Information Disclosure Vulnerability
TPM Device Driver Information Disclosure Vulnerability
-
High 7.8
Microsoft Defender Remote Code Execution Vulnerability
Microsoft Defender Remote Code Execution Vulnerability
KEV Nov 3, 2021 -
High 8.8CVE-2021-1636 Public exploit
Microsoft SQL Elevation of Privilege Vulnerability
Microsoft SQL Elevation of Privilege Vulnerability
-
Critical 9.8
Unauthenticated remote code execution in Ignition
Ignition before 2.5.2, as used in Laravel and other products, allows unauthenticated remote attackers to execute arbitrary code because of insecure usage of file_get_contents() and file_put_contents(). This is exploitable on sites using debug mode with Larave…
KEV Sep 18, 2023 -
Unscored —CVE-2021-0313 Public exploit
In isWordBreakAfter of LayoutUtils.cpp, there is a possible way to slow or crash a TextView due to improper input valid…
-
Unscored —CVE-2021-0315 Public exploit
In onCreate of GrantCredentialsPermissionActivity.java, there is a possible way to convince the user to grant an app ac…
-
Unscored —CVE-2020-0471 Public exploit
In reassemble_and_dispatch of packet_fragmenter.cc, there is a possible way to inject packets into an encrypted Bluetoo…
-
Unscored —CVE-2021-0316 Public exploit
In avrc_pars_vendor_cmd of avrc_pars_tg.cc, there is a possible out of bounds write due to a missing bounds check. This…
-
Unscored —CVE-2021-0318 Public exploit
In appendEventsToCacheLocked of SensorEventConnection.cpp, there is a possible out of bounds write due to a use-after-f…
-
Unscored —CVE-2021-0319 Public exploit
In checkCallerIsSystemOr of CompanionDeviceManagerService.java, there is a possible way to get a nearby Bluetooth devic…
-
Unscored —CVE-2021-0308 Public exploit
In ReadLogicalParts of basicmbr.cc, there is a possible out of bounds write due to a missing bounds check. This could l…
-
Unscored —CVE-2021-0306 Public exploit
In addAllPermissions of PermissionManagerService.java, there is a possible permissions bypass when upgrading major Andr…
-
Unscored —CVE-2020-5147 Public exploit
SonicWall NetExtender Windows client vulnerable to unquoted service path vulnerability, this allows a local attacker to…