VYPR

CVEs

411,135 total · page 5201 of 8,223

AllCriticalHighKEV
  • CVE-2020-13562MedFeb 1, 2021
    phpGACL
    phpGACL
    risk 0.46cvss 6.1epss 0.78

    A cross-site scripting vulnerability exists in the template functionality of phpGACL 3.3.7. A specially crafted HTTP request can lead to arbitrary JavaScript execution. An attacker can provide a crafted URL to trigger this vulnaerability in the phpGACL template action parameter.

  • CVE-2021-23330CriFeb 1, 2021
    Bitovi
    Launchpad
    risk 0.64cvss 9.8epss 0.05

    All versions of package launchpad are vulnerable to Command Injection via stop.

  • CVE-2021-21277HigFeb 1, 2021
    Peerigon
    Angular Expressions
    risk 0.48cvss 8.5epss 0.03

    angular-expressions is "angular's nicest part extracted as a standalone module for the browser and node". In angular-expressions before version 1.1.2 there is a vulnerability which allows Remote Code Execution if you call "expressions.compile(userControlledInput)" where…

  • CVE-2021-21276CriFeb 1, 2021
    Polr
    Polr
    risk 0.64cvss 9.3epss 0.07

    Polr is an open source URL shortener. in Polr before version 2.3.0, a vulnerability in the setup process allows attackers to gain admin access to site instances, even if they do not possess an existing account. This vulnerability exists regardless of users' settings. If an…

  • CVE-2021-21266MedFeb 1, 2021
    Openhab
    Openhab
    risk 0.42cvss 6.4epss 0.01

    openHAB is a vendor and technology agnostic open source automation software for your home. In openHAB before versions 2.5.12 and 3.0.1 the XML external entity (XXE) attack allows attackers in the same network as the openHAB instance to retrieve internal information like the…

  • CVE-2020-24271HigFeb 1, 2021
    Easycms
    Easycms
    risk 0.57cvss 8.8epss 0.01

    A CSRF vulnerability was discovered in EasyCMS v1.6 that can add an admin account through index.php?s=/admin/rbacuser/insert/navTabId/rbacuser/callbackType/closeCurrent, then post username=***&password=***.

  • CVE-2020-36109CriFeb 1, 2021
    Asus
    RT-AX86U
    risk 0.64cvss 9.8epss 0.04

    ASUS RT-AX86U router firmware below version under 9.0.0.4_386 has a buffer overflow in the blocking_request.cgi function of the httpd module that can cause code execution when an attacker constructs malicious data.

  • CVE-2020-28194CriFeb 1, 2021
    xebd
    ACCEL-PPP
    risk 0.64cvss 9.8epss 0.03

    Variable underflow exists in accel-ppp radius/packet.c when receiving a RADIUS vendor-specific attribute with length field is less than 2. It has an impact only when the attacker controls the RADIUS server, which can lead to arbitrary code execution.

  • CVE-2021-3350MedFeb 1, 2021
    MyBB
    Delete Account
    risk 0.40cvss 6.1epss 0.01

    deleteaccount.php in the Delete Account plugin 1.4 for MyBB allows XSS via the deletereason parameter.

  • CVE-2021-3349LowFeb 1, 2021
    GNOME Foundation
    Evolution
    risk 0.21cvss 3.3epss 0.00

    GNOME Evolution through 3.38.3 produces a "Valid signature" message for an unknown identifier on a previously trusted key because Evolution does not retrieve enough information from the GnuPG API. NOTE: third parties dispute the significance of this issue, and dispute whether…

  • CVE-2021-3348HigFeb 1, 2021
    Linux
    Kernel
    risk 0.46cvss 7.0epss 0.00

    nbd_add_socket in drivers/block/nbd.c in the Linux kernel through 5.10.12 has an ndb_queue_rq use-after-free that could be triggered by local attackers (with access to the nbd device) via an I/O request at a certain point during device setup, aka CID-b98e762e3d71.

  • CVE-2020-26547CriFeb 1, 2021
    Monal
    Monal
    risk 0.64cvss 9.8epss 0.01

    Monal before 4.9 does not implement proper sender verification on MAM and Message Carbon (XEP-0280) results. This allows a remote attacker (able to send stanzas to a victim) to inject arbitrary messages into the local history, with full control over the sender and receiver…

  • CVE-2020-15836CriFeb 1, 2021
    MoFi Network
    MOFI4500-4GXeLTE-V2
    risk 0.64cvss 9.8epss 0.02

    An issue was discovered on Mofi Network MOFI4500-4GXeLTE 4.1.5-std devices. The authentication function passes untrusted data to the operating system without proper sanitization. A crafted request can be sent to execute arbitrary commands as root.

  • CVE-2020-15835CriFeb 1, 2021
    MoFi Network
    MOFI4500-4GXeLTE-V2
    risk 0.64cvss 9.8epss 0.02

    An issue was discovered on Mofi Network MOFI4500-4GXeLTE 4.1.5-std devices. The authentication function contains undocumented code that provides the ability to authenticate as root without knowing the actual root password. An adversary with the private key can remotely…

  • CVE-2020-15834HigFeb 1, 2021
    MoFi Network
    MOFI4500-4GXeLTE-V2
    risk 0.49cvss 7.5epss 0.01

    An issue was discovered on Mofi Network MOFI4500-4GXeLTE 4.1.5-std devices. The wireless network password is exposed in a QR encoded picture that an unauthenticated adversary can download via the web-management interface.

  • CVE-2020-15833CriFeb 1, 2021
    MoFi Network
    MOFI4500-4GXeLTE-V2
    risk 0.64cvss 9.8epss 0.02

    An issue was discovered on Mofi Network MOFI4500-4GXeLTE 4.1.5-std devices. The Dropbear SSH daemon has been modified to accept an alternate hard-coded path to a public key that allows root access. This key is stored in a /rom location that cannot be modified by the device owner.

  • CVE-2020-15832HigFeb 1, 2021
    MoFi Network
    MOFI4500-4GXeLTE-V2
    risk 0.49cvss 7.5epss 0.01

    An issue was discovered on Mofi Network MOFI4500-4GXeLTE 4.1.5-std devices. The poof.cgi script contains undocumented code that provides the ability to remotely reboot the device. An adversary with the private key (but not the root password) can remotely reboot the device.

  • CVE-2020-13860HigFeb 1, 2021
    MoFi Network
    MOFI4500-4GXeLTE-V2
    risk 0.49cvss 7.5epss 0.01

    An issue was discovered on Mofi Network MOFI4500-4GXeLTE 4.0.8-std devices. The one-time password algorithm for the undocumented system account mofidev generates a predictable six-digit password.

  • CVE-2020-13859CriFeb 1, 2021
    MoFi Network
    MOFI4500-4GXeLTE-V2
    risk 0.64cvss 9.8epss 0.01

    An issue was discovered on Mofi Network MOFI4500-4GXeLTE 4.0.8-std devices. A format error in /etc/shadow, coupled with a logic bug in the LuCI - OpenWrt Configuration Interface framework, allows the undocumented system account mofidev to login to the cgi-bin/luci/quick/wizard…

  • CVE-2020-13858CriFeb 1, 2021
    MoFi Network
    MOFI4500-4GXeLTE-V2
    risk 0.64cvss 9.8epss 0.01

    An issue was discovered on Mofi Network MOFI4500-4GXeLTE 3.6.1-std and 4.0.8-std devices. They contain two undocumented administrator accounts. The sftp and mofidev accounts are defined in /etc/passwd and the password is not unique across installations.

  • CVE-2020-13857HigFeb 1, 2021
    MoFi Network
    MOFI4500-4GXeLTE-V2
    risk 0.49cvss 7.5epss 0.01

    An issue was discovered on Mofi Network MOFI4500-4GXeLTE 3.6.1-std and 4.0.8-std devices. They can be rebooted by sending an unauthenticated poof.cgi HTTP GET request.

  • CVE-2020-13856HigFeb 1, 2021
    MoFi Network
    MOFI4500-4GXeLTE-V2
    risk 0.49cvss 7.5epss 0.01

    An issue was discovered on Mofi Network MOFI4500-4GXeLTE 4.0.8-std devices. Authentication is not required to download the support file that contains sensitive information such as cleartext credentials and password hashes.

  • CVE-2021-23329HigJan 31, 2021
    Getadigital
    Nested Object Assign
    risk 0.49cvss 7.5epss 0.02

    The package nested-object-assign before 1.0.4 are vulnerable to Prototype Pollution via the default function, as demonstrated by running the PoC below.

  • CVE-2020-17380MedJan 30, 2021
    QEMU
    Qemu
    risk 0.41cvss 6.3epss 0.00

    A heap-based buffer overflow was found in QEMU through 5.0.0 in the SDHCI device emulation support. It could occur while doing a multi block SDMA transfer via the sdhci_sdma_transfer_multi_blocks() routine in hw/sd/sdhci.c. A guest user or process could use this flaw to crash…

  • CVE-2020-15690CriJan 30, 2021
    Nim
    Nim
    risk 0.64cvss 9.8epss 0.03

    In Nim before 1.2.6, the standard library asyncftpclient lacks a check for whether a message contains a newline character.

  • CVE-2020-14418HigJan 30, 2021
    Madshi
    Madcodehook
    risk 0.46cvss 7.0epss 0.00

    A TOCTOU vulnerability exists in madCodeHook before 2020-07-16 that allows local attackers to elevate their privileges to SYSTEM. This occurs because path redirection can occur via vectors involving directory junctions.

  • CVE-2020-15568CriJan 30, 2021
    Terra Master
    Tos
    risk 0.66cvss 9.8epss 0.29

    TerraMaster TOS before 4.1.29 has Invalid Parameter Checking that leads to code injection as root. This is a dynamic class method invocation vulnerability in include/exportUser.php, in which an attacker can trigger a call to the exec method with (for example) OS commands in the…

  • CVE-2021-21254MedJan 29, 2021
    Fckeditor
    Fckeditor
    risk 0.42cvss 6.5epss 0.02

    CKEditor 5 is an open source rich text editor framework with a modular architecture. The CKEditor 5 Markdown plugin (@ckeditor/ckeditor5-markdown-gfm) before version 25.0.0 has a regex denial of service (ReDoS) vulnerability. The vulnerability allowed to abuse link recognition…

  • CVE-2021-25646HigJan 29, 2021
    Apache
    Druid
    risk 0.68cvss 8.8epss 0.99

    Apache Druid includes the ability to execute user-provided JavaScript code embedded in various types of requests. This functionality is intended for use in high-trust environments, and is disabled by default. However, in Druid 0.20.0 and earlier, it is possible for an…

  • CVE-2020-29557CriKEVJan 29, 2021
    Dlink
    DIR-825
    risk 0.80cvss 9.8epss 0.56

    An issue was discovered on D-Link DIR-825 R1 devices through 3.0.1 before 2020-11-20. A buffer overflow in the web interface allows attackers to achieve pre-authentication remote code execution.

  • CVE-2021-25138HigJan 29, 2021
    HPE
    Cloudline Cl3100 Gen10 Server Firmware
    risk 0.51cvss 7.8epss 0.00

    The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local buffer overlfow in spx_restservice…

  • CVE-2021-25137HigJan 29, 2021
    HPE
    Cloudline Cl3100 Gen10 Server Firmware
    risk 0.51cvss 7.8epss 0.00

    The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local buffer overlfow in spx_restservice…

  • CVE-2021-25136HigJan 29, 2021
    HPE
    Cloudline Cl3100 Gen10 Server Firmware
    risk 0.51cvss 7.8epss 0.00

    The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local buffer overlfow in spx_restservice…

  • CVE-2021-25135HigJan 29, 2021
    HPE
    Cloudline Cl3100 Gen10 Server Firmware
    risk 0.51cvss 7.8epss 0.00

    The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local buffer overlfow in spx_restservice…

  • CVE-2021-25134HigJan 29, 2021
    HPE
    Cloudline Cl3100 Gen10 Server Firmware
    risk 0.51cvss 7.8epss 0.00

    The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local buffer overlfow in spx_restservice…

  • CVE-2021-25133HigJan 29, 2021
    HPE
    Cloudline Cl3100 Gen10 Server Firmware
    risk 0.51cvss 7.8epss 0.00

    The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local buffer overlfow in spx_restservice…

  • CVE-2021-25132HigJan 29, 2021
    HPE
    Cloudline Cl3100 Gen10 Server Firmware
    risk 0.51cvss 7.8epss 0.00

    The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local buffer overlfow in spx_restservice…

  • CVE-2021-25131HigJan 29, 2021
    HPE
    Cloudline Cl3100 Gen10 Server Firmware
    risk 0.51cvss 7.8epss 0.00

    The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local buffer overlfow in spx_restservice…

  • CVE-2021-25130HigJan 29, 2021
    HPE
    Cloudline Cl3100 Gen10 Server Firmware
    risk 0.51cvss 7.8epss 0.00

    The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local buffer overlfow in spx_restservice…

  • CVE-2021-25129HigJan 29, 2021
    HPE
    Cloudline Cl3100 Gen10 Server Firmware
    risk 0.51cvss 7.8epss 0.00

    The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local spx_restservice getvideodata_func…

  • CVE-2021-25128HigJan 29, 2021
    HPE
    Cloudline Cl3100 Gen10 Server Firmware
    risk 0.51cvss 7.8epss 0.00

    The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local spx_restservice gethelpdata_func…

  • CVE-2021-25127HigJan 29, 2021
    HPE
    Cloudline CL5800 Gen9 Server
    risk 0.51cvss 7.8epss 0.00

    The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local buffer overlfow in spx_restservice…

  • CVE-2021-25126HigJan 29, 2021
    HPE
    Cloudline Cl3100 Gen10 Server Firmware
    risk 0.51cvss 7.8epss 0.00

    The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local buffer overlfow in spx_restservice…

  • CVE-2021-25125HigJan 29, 2021
    HPE
    Cloudline Cl3100 Gen10 Server Firmware
    risk 0.51cvss 7.8epss 0.00

    The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local spx_restservice…

  • CVE-2021-25124HigJan 29, 2021
    HPE
    Cloudline Cl3100 Gen10 Server Firmware
    risk 0.51cvss 7.8epss 0.00

    The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Cloudline CL4100 Gen10 Server; HPE Cloudline CL3100 Gen10 Server; HPE Cloudline CL5800 Gen10 Server BMC firmware has a local spx_restservice deletevideo_func…

  • CVE-2020-24670MedJan 29, 2021
    Hitachi
    Vantara Pentaho
    risk 0.35cvss 5.4epss 0.01

    The Dashboard Editor in Hitachi Vantara Pentaho through 7.x - 8.x contains a reflected Cross-site scripting vulnerability, which allows an authenticated remote users to execute arbitrary JavaScript code. Specifically, the vulnerability lies in the 'type' attribute of…

  • CVE-2020-24669MedJan 29, 2021
    Hitachi
    Vantara Pentaho
    risk 0.35cvss 5.4epss 0.01

    The New Analysis Report in Hitachi Vantara Pentaho through 7.x - 8.x contains a DOM-based Cross-site scripting vulnerability, which allows an authenticated remote users to execute arbitrary JavaScript code. Specifically, the vulnerability lies in the 'Analysis Report…

  • CVE-2020-24666MedJan 29, 2021
    Hitachi
    Vantara Pentaho
    risk 0.35cvss 5.4epss 0.01

    The Analysis Report in Hitachi Vantara Pentaho through 7.x - 8.x contains a stored Cross-site scripting vulnerability, which allows an authenticated remote users to execute arbitrary JavaScript code. Specifically, the vulnerability lies in the 'Display Name' parameter.…

  • CVE-2020-24665MedJan 29, 2021
    Hitachi
    Vantara Pentaho
    risk 0.42cvss 6.5epss 0.01

    The Dashboard Editor in Hitachi Vantara Pentaho through 7.x - 8.x contains an XML Entity Expansion injection vulnerability, which allows an authenticated remote users to trigger a denial of service (DoS) condition. Specifically, the vulnerability lies in the 'dashboardXml'…

  • CVE-2020-24664MedJan 29, 2021
    Hitachi
    Vantara Pentaho
    risk 0.35cvss 5.4epss 0.01

    The dashboard Editor in Hitachi Vantara Pentaho through 7.x - 8.x contains a reflected Cross-site scripting vulnerability, which allows an authenticated remote users to execute arbitrary JavaScript code. Specifically, the vulnerability lies in the 'pho:title' attribute of…