VYPR

CVEs

413,306 total · page 5054 of 8,267

AllCriticalHighKEV
  • CVE-2021-3159MedJul 23, 2021
    Landray
    Ekp
    risk 0.35cvss 5.4epss 0.01

    A stored cross site scripting (XSS) vulnerability in the /sys/attachment/uploaderServlet component of Landray EKP V12.0.9.R.20160325 allows attackers to execute arbitrary web scripts or HTML via a crafted SVG, SHTML, or MHT file.

  • CVE-2021-25208CriJul 23, 2021
    Sourcecodester
    Travel Management System
    risk 0.64cvss 9.8epss 0.02

    Arbitrary file upload vulnerability in SourceCodester Travel Management System v 1.0 allows attackers to execute arbitrary code via the file upload to updatepackage.php.

  • CVE-2021-25206CriJul 23, 2021
    Sourcecodester
    Responsive Ordering System
    risk 0.64cvss 9.8epss 0.02

    Arbitrary file upload vulnerability in SourceCodester Responsive Ordering System v 1.0 allows attackers to execute arbitrary code via the file upload to Product_model.php.

  • CVE-2021-25204MedJul 23, 2021
    Sourcecodester
    E-Commerce Website
    risk 0.35cvss 5.4epss 0.01

    Cross-site scripting (XSS) vulnerability in SourceCodester E-Commerce Website v 1.0 allows remote attackers to inject arbitrary web script or HTM via the subject field to feedback_process.php.

  • CVE-2021-25203CriJul 23, 2021
    Victor CMS
    Victor
    risk 0.64cvss 9.8epss 0.02

    Arbitrary file upload vulnerability in Victor CMS v 1.0 allows attackers to execute arbitrary code via the file upload to \CMSsite-master\admin\includes\admin_add_post.php.

  • CVE-2021-25201HigJul 23, 2021
    Learning Management System Project
    Learning Management System
    risk 0.49cvss 7.5epss 0.02

    SQL injection vulnerability in Learning Management System v 1.0 allows remote attackers to execute arbitrary SQL statements through the id parameter to obtain sensitive database information.

  • CVE-2021-25207CriJul 23, 2021
    Sourcecodester
    E-Commerce Website
    risk 0.64cvss 9.8epss 0.02

    Arbitrary file upload vulnerability in SourceCodester E-Commerce Website v 1.0 allows attackers to execute arbitrary code via the file upload to prodViewUpdate.php.

  • CVE-2019-9983Jul 23, 2021
    risk 0.00cvss —epss —

    Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none

  • CVE-2021-20333MedJul 23, 2021
    MongoDB
    MongoDB
    risk 0.35cvss 5.3epss 0.01

    Sending specially crafted commands to a MongoDB Server may result in artificial log entries being generated or for log entries to be split. This issue affects MongoDB Server v3.6 versions prior to 3.6.20; MongoDB Server v4.0 versions prior to 4.0.21 and MongoDB Server v4.2…

  • CVE-2021-26799MedJul 23, 2021
    Omeka
    Omeka
    risk 0.40cvss 6.1epss 0.01

    Cross Site Scripting (XSS) vulnerability in admin/files/edit in Omeka Classic <=2.7 allows remote attackers to inject arbitrary web script or HTML.

  • CVE-2020-14032CriJul 23, 2021
    ASRock
    4x4 BOX-R1000
    risk 0.64cvss 9.8epss 0.02

    ASRock 4x4 BOX-R1000 before BIOS P1.40 allows privilege escalation via code execution in the SMM.

  • CVE-2021-24036CriJul 23, 2021
    HHVM
    HHVM
    risk 0.64cvss 9.8epss 0.03

    Passing an attacker controlled size when creating an IOBuf could cause integer overflow, leading to an out of bounds write on the heap with the possibility of remote code execution. This issue affects versions of folly prior to v2021.07.22.00. This issue affects HHVM versions…

  • CVE-2021-32786MedJul 22, 2021
    Zmartzone
    mod_auth_openidc
    risk 0.31cvss 4.7epss 0.02

    mod_auth_openidc is an authentication/authorization module for the Apache 2.x HTTP server that functions as an OpenID Connect Relying Party, authenticating users against an OpenID Connect Provider. In versions prior to 2.4.9, `oidc_validate_redirect_url()` does not parse URLs…

  • CVE-2021-32785MedJul 22, 2021
    Zmartzone
    mod_auth_openidc
    risk 0.35cvss 5.3epss 0.03

    mod_auth_openidc is an authentication/authorization module for the Apache 2.x HTTP server that functions as an OpenID Connect Relying Party, authenticating users against an OpenID Connect Provider. When mod_auth_openidc versions prior to 2.4.9 are configured to use an…

  • CVE-2021-34268MedJul 22, 2021
    St
    Stm32cube Middleware
    risk 0.30cvss 4.6epss 0.00

    An issue in the USBH_ParseDevDesc() function of STMicroelectronics STM32Cube Middleware v1.8.0 and below causes a denial of service (DOS) via a malformed USB device packet.

  • CVE-2021-34267MedJul 22, 2021
    St
    Stm32cube Middleware
    risk 0.30cvss 4.6epss 0.00

    An in the USBH_MSC_InterfaceInit() function of STMicroelectronics STM32Cube Middleware v1.8.0 and below causes a denial of service (DOS) when the system tries to communicate with the connected endpoint.

  • CVE-2021-34262MedJul 22, 2021
    St
    Stm32cube Middleware
    risk 0.44cvss 6.8epss 0.00

    A buffer overflow vulnerability in the USBH_ParseEPDesc() function of STMicroelectronics STM32Cube Middleware v1.8.0 and below allows attackers to execute arbitrary code.

  • CVE-2021-34261MedJul 22, 2021
    St
    Stm32cube Middleware
    risk 0.30cvss 4.6epss 0.00

    An issue in USBH_ParseCfgDesc() of STMicroelectronics STM32Cube Middleware v1.8.0 and below causes a denial of service due to the system hanging when trying to set a remote wake-up feature.

  • CVE-2021-34260MedJul 22, 2021
    St
    Stm32cube Middleware
    risk 0.44cvss 6.8epss 0.00

    A buffer overflow vulnerability in the USBH_ParseInterfaceDesc() function of STMicroelectronics STM32Cube Middleware v1.8.0 and below allows attackers to execute arbitrary code.

  • CVE-2021-34259MedJul 22, 2021
    St
    Stm32cube Middleware
    risk 0.44cvss 6.8epss 0.00

    A buffer overflow vulnerability in the USBH_ParseCfgDesc() function of STMicroelectronics STM32Cube Middleware v1.8.0 and below allows attackers to execute arbitrary code.

  • CVE-2021-25213CriJul 22, 2021
    Sourcecodester
    Travel Management System
    risk 0.64cvss 9.8epss 0.01

    SQL injection vulnerability in SourceCodester Travel Management System v 1.0 allows remote attackers to execute arbitrary SQL statements, via the catid parameter to subcat.php.

  • CVE-2021-25211CriJul 22, 2021
    Sourcecodester
    Ordering System
    risk 0.64cvss 9.8epss 0.02

    Arbitrary file upload vulnerability in SourceCodester Ordering System v 1.0 allows attackers to execute arbitrary code, via the file upload to ordering\admin\products\edit.php.

  • CVE-2021-25209CriJul 22, 2021
    Sourcecodester
    Theme Park Ticketing System
    risk 0.64cvss 9.8epss 0.01

    SQL injection vulnerability in SourceCodester Theme Park Ticketing System v 1.0 allows remote attackers to execute arbitrary SQL statements, via the id parameter to view_user.php .

  • CVE-2021-25205CriJul 22, 2021
    Sourcecodester
    E-Commerce Website
    risk 0.64cvss 9.8epss 0.01

    SQL injection vulnerability in SourceCodester E-Commerce Website V 1.0 allows remote attackers to execute arbitrary SQL statements, via the update parameter to empViewUpdate.php .

  • CVE-2020-22284HigJul 22, 2021
    Lwip Project
    Lwip
    risk 0.49cvss 7.5epss 0.01

    A buffer overflow vulnerability in the zepif_linkoutput() function of Free Software Foundation lwIP git head version and version 2.1.2 allows attackers to access sensitive information via a crafted 6LoWPAN packet.

  • CVE-2020-22283HigJul 22, 2021
    Lwip Project
    Lwip
    risk 0.49cvss 7.5epss 0.01

    A buffer overflow vulnerability in the icmp6_send_response_with_addrs_and_netif() function of Free Software Foundation lwIP version git head allows attackers to access sensitive information via a crafted ICMPv6 packet.

  • CVE-2021-3540MedJul 22, 2021
    Ivanti
    Mobileiron
    risk 0.43cvss 6.5epss 0.03

    By abusing the 'install rpm info detail' command, an attacker can escape the restricted clish shell on affected versions of Ivanti MobileIron Core. This issue was fixed in version 11.1.0.0.

  • CVE-2021-3198MedJul 22, 2021
    Ivanti
    Mobileiron
    risk 0.43cvss 6.5epss 0.03

    By abusing the 'install rpm url' command, an attacker can escape the restricted clish shell on affected versions of Ivanti MobileIron Core. This issue was fixed in version 11.1.0.0.

  • CVE-2021-3619LowJul 22, 2021
    Rapid7
    Velociraptor
    risk 0.23cvss 3.5epss 0.01

    Rapid7 Velociraptor 0.5.9 and prior is vulnerable to a post-authentication persistent cross-site scripting (XSS) issue, where an authenticated user could abuse MIME filetype sniffing to embed executable code on a malicious upload. This issue was fixed in version 0.6.0. Note that…

  • CVE-2021-31581HigJul 22, 2021
    Akkadian
    Provisioning Manager Engine (pme)
    risk 0.51cvss 7.9epss 0.01

    The restricted shell provided by Akkadian Provisioning Manager Engine (PME) can be escaped by abusing the 'Edit MySQL Configuration' command. This command launches a standard vi editor interface which can then be escaped. This issue was resolved in Akkadian OVA appliance version…

  • CVE-2021-31580HigJul 22, 2021
    Akkadian
    Provisioning Manager Engine (pme)
    risk 0.57cvss 8.7epss 0.03

    The restricted shell provided by Akkadian Provisioning Manager Engine (PME) can be bypassed by switching the OpenSSH channel from `shell` to `exec` and providing the ssh client a single execution parameter. This issue was resolved in Akkadian OVA appliance version 3.0 (and…

  • CVE-2021-31579HigJul 22, 2021
    Akkadian
    Provisioning Manager Engine (pme)
    risk 0.53cvss 8.2epss 0.01

    Akkadian Provisioning Manager Engine (PME) ships with a hard-coded credential, akkadianuser:haakkadianpassword. This issue was resolved in Akkadian OVA appliance version 3.0 (and later), Akkadian Provisioning Manager 5.0.2 (and later), and Akkadian Appliance Manager…

  • CVE-2021-27332MedJul 22, 2021
    Sourcecodester
    CASAP Automated Enrollment System
    risk 0.40cvss 6.1epss 0.01

    Cross-site scripting (XSS) vulnerability in SourceCodester CASAP Automated Enrollment System v 1.0 allows remote attackers to inject arbitrary web script or HTML via the class_name parameter to update_class.php.

  • CVE-2021-26224MedJul 22, 2021
    Sourcecodester
    Fantastic Blog CMS
    risk 0.40cvss 6.1epss 0.01

    Cross-site scripting (XSS) vulnerability in SourceCodester Fantastic-Blog-CMS V 1.0 allows remote attackers to inject arbitrary web script or HTML via the search field to search.php.

  • CVE-2021-26223CriJul 22, 2021
    Sourcecodester
    CASAP Automated Enrollment System
    risk 0.64cvss 9.8epss 0.02

    SQL injection vulnerability in SourceCodester CASAP Automated Enrollment System v 1.0 allows remote attackers to execute arbitrary SQL statements, via the id parameter to view_pay.php.

  • CVE-2021-25212CriJul 22, 2021
    Sourcecodester
    Alumni Management System
    risk 0.64cvss 9.8epss 0.01

    SQL injection vulnerability in SourceCodester Alumni Management System v 1.0 allows remote attackers to execute arbitrary SQL statements, via the id parameter to manage_event.php.

  • CVE-2021-25210CriJul 22, 2021
    Sourcecodester
    Alumni Management System
    risk 0.64cvss 9.8epss 0.01

    Arbitrary file upload vulnerability in SourceCodester Alumni Management System v 1.0 allows attackers to execute arbitrary code, via the file upload to manage_event.php.

  • CVE-2020-7390MedJul 22, 2021
    Sage
    Syracuse
    risk 0.30cvss 4.6epss 0.01

    Sage X3 Stored XSS Vulnerability on ‘Edit’ Page of User Profile. An authenticated user can pass XSS strings the "First Name," "Last Name," and "Email Address" fields of this web application component. Updates are available for on-premises versions of Version 12 (components…

  • CVE-2020-7389MedJul 22, 2021
    Sage
    Sage
    risk 0.36cvss 5.5epss 0.02

    Sage X3 System CHAINE Variable Script Command Injection. An authenticated user with developer access can pass OS commands via this variable used by the web application. Note, this developer configuration should not be deployed in production.

  • CVE-2020-7388CriJul 22, 2021
    Sage
    Adxadmin
    risk 0.74cvss 10.0epss 0.69

    Sage X3 Unauthenticated Remote Command Execution (RCE) as SYSTEM in AdxDSrv.exe component. By editing the client side authentication request, an attacker can bypass credential validation. While exploiting this does require knowledge of the installation path, that information can…

  • CVE-2020-7387MedJul 22, 2021
    Sage
    Adxadmin
    risk 0.40cvss 5.3epss 0.34

    Sage X3 Installation Pathname Disclosure. A specially crafted packet can elicit a response from the AdxDSrv.exe component that reveals the installation directory of the product. Note that this vulnerability can be combined with CVE-2020-7388 to achieve full RCE. This issue was…

  • CVE-2018-11669Jul 22, 2021
    risk 0.00cvss —epss —

    Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none

  • CVE-2018-11668Jul 22, 2021
    risk 0.00cvss —epss —

    Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none

  • CVE-2018-11666Jul 22, 2021
    risk 0.00cvss —epss —

    Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none

  • CVE-2018-11665Jul 22, 2021
    risk 0.00cvss —epss —

    Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none

  • CVE-2018-11664Jul 22, 2021
    risk 0.00cvss —epss —

    Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none

  • CVE-2018-11663Jul 22, 2021
    risk 0.00cvss —epss —

    Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none

  • CVE-2018-11662Jul 22, 2021
    risk 0.00cvss —epss —

    Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none

  • CVE-2021-36222HigJul 22, 2021
    Mit
    Kerberos 5
    risk 0.50cvss 7.5epss 0.11

    ec_verify in kdc/kdc_preauth_ec.c in the Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) before 1.18.4 and 1.19.x before 1.19.2 allows remote attackers to cause a NULL pointer dereference and daemon crash. This occurs because a return value is not properly managed in…

  • CVE-2021-35942CriJul 22, 2021
    GNU
    Glibc
    risk 0.52cvss 9.1epss 0.03

    The wordexp function in the GNU C Library (aka glibc) through 2.33 may crash or read arbitrary memory in parse_param (in posix/wordexp.c) when called with an untrusted, crafted pattern, potentially resulting in a denial of service or disclosure of information. This occurs…