Search vulnerabilities

Expected end of text, found ',' (at char 38), (line:1, col:39)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 425,898

CVE-2024-10915

D-Link DNS-320/DNS-320LW/DNS-325/DNS-340L account_mgr.cgi cgi_user_add os command injection

A vulnerability was found in D-Link DNS-320, DNS-320LW, DNS-325 and DNS-340L up to 20241028. It has been rated as critical. Affected by this issue is the function cgi_user_add of the file /cgi-bin/account_mgr.cgi?cmd=cgi_user_add. The manipulation of the argument group leads to os command injection. The attack may be launched remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used.

CVSS 4.0 · 9.2 Critical EPSS 83.2% KEV · Not listed
Vendors
Dlink
Products
Dns-320 Dns-320 Firmware Dns-320lw and 5 more
CVE-2024-50334

Semicolon Path Injection on API /api;/config

Scoold is a Q&A and a knowledge sharing platform for teams. A semicolon path injection vulnerability was found on the /api;/config endpoint. By appending a semicolon in the URL, attackers can bypass authentication and gain unauthorised access to sensitive configuration data. Furthermore, PUT requests on the /api;/config endpoint while setting the Content-Type: application/hocon header allow unauthenticated attackers to file reading via HOCON file inclusion. This allows attackers to retrieve sensitive information such as configuration files from the server, which can be leveraged for further exploitation. The vulnerability has been fixed in Scoold 1.64.0. A workaround would be to disable the Scoold API with scoold.api_enabled = false.

CVSS 4.0 · 8.7 High EPSS 1.0% KEV · Not listed
Vendors
Erudika
Products
Scoold
CVE-2024-10318

NGINX OpenID Connect Vulnerability

A session fixation issue was discovered in the NGINX OpenID Connect reference implementation, where a nonce was not checked at login time. This flaw allows an attacker to fix a victim's session to an attacker-controlled account. As a result, although the attacker cannot log in as the victim, they can force the session to associate it with the attacker-controlled account, leading to potential misuse of the victim's session.

CVSS 4.0 · 5.1 Medium EPSS < 1% KEV · Not listed
Vendors
F5
Products
Nginx Api Connectivity Manager Nginx Ingress Controller Nginx Instance Manager and 1 more
CVE-2020-11859

Potential Cross Site Scripting vulnerability in OpenText iManager

Improper Input Validation vulnerability in OpenText iManager allows Cross-Site Scripting (XSS). This issue affects iManager before 3.2.3

CVSS 3.1 · 7.6 High EPSS < 1% KEV · Not listed
Vendors
Microfocus
Products
Imanager
CVE-2024-45794

SQL Injection in CreateUser API in devtron

devtron is an open source tool integration platform for Kubernetes. In affected versions an authenticated user (with minimum permission) could utilize and exploit SQL Injection to allow the execution of malicious SQL queries via CreateUser API (/orchestrator/user). This issue has been addressed in version 0.7.2 and all users are advised to upgrade. There are no known workarounds for this vulnerability.

CVSS 3.1 · 8.3 High EPSS < 1% KEV · Not listed
Vendors
Devtron Kubernetes
Products
Devtron Devtron
CVE-2024-9579

Certain Poly Video Conference Devices – Potential Remote Code Execution

A potential vulnerability was discovered in certain Poly video conferencing devices. The firmware flaw does not properly sanitize user input. The exploitation of this vulnerability is dependent on a layered attack and cannot be exploited by itself.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Hp Poly
Products
Poly Studio G62 Poly Studio G62 Firmware Poly Studio G7500 and 21 more
CVE-2024-49522

Substance3D - Painter | Out-of-bounds Write (CWE-787)

Substance3D - Painter versions 10.0.1 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Adobe
Products
Substance 3d Painter
CVE-2024-10452

grafana: Org admin can delete pending invites in different org

Organization admins can delete pending invites created in an organization they are not part of.

CVSS 3.1 · 2.2 Low EPSS < 1% KEV · Not listed
Vendors
Grafana
Products
Grafana
CVE-2023-29126

Insecure loose comparison in Enel X JuiceBox

The Waybox Enel X web management application contains a PHP-type juggling vulnerability that may allow a brute force process and under certain conditions bypass authentication.

CVSS 3.1 · 4.2 Medium EPSS < 1% KEV · Not listed
Vendors
Enelx
Products
Waybox Pro Waybox Pro Firmware
CVE-2023-29116

PHP Information Disclosure in Enel X JuiceBox

Under certain conditions, through a request directed to the Waybox Enel X web management application, information like Waybox OS version or service configuration details could be obtained.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Enelx
Products
Waybox Pro Waybox Pro Firmware
CVE-2023-29115

Denial of Service via Web Management interface in Enel X JuiceBox

In certain conditions a request directed to the Waybox Enel X Web management application could cause a denial-of-service (e.g. reboot).

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Enelx
Products
Waybox Pro Waybox Pro Firmware
CVE-2024-43937

WordPress WP Crowdfunding plugin <= 2.1.10 - Settings Change vulnerability

Missing Authorization vulnerability in Themeum WP Crowdfunding allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Crowdfunding: from n/a through 2.1.10.

CVSS 3.1 · 6.4 Medium EPSS < 1% KEV · Not listed
Vendors
Themeum
Products
Wp Crowdfunding
CVE-2024-51739

Users enumeration allowed through Rest API in Combodo iTop

Combodo iTop is a simple, web based IT Service Management tool. Unauthenticated user can perform users enumeration, which can make it easier to bruteforce a valid account. As a fix the sentence displayed after resetting password no longer shows if the user exists or not. This fix is included in versions 2.7.11, 3.0.5, 3.1.2, and 3.2.0. Users are advised to upgrade. Users unable to upgrade may overload the dictionary entry `"UI:ResetPwd-Error-WrongLogin"` through an extension and replace it with a generic message.

CVSS 3.1 · 7.5 High EPSS 1.2% KEV · Not listed
Vendors
Combodo
Products
Itop
CVE-2024-0134

nvidia-container-toolkit: specially-crafted container image can lead to the creation of unauthorized files on the host

NVIDIA Container Toolkit and NVIDIA GPU Operator for Linux contain a UNIX vulnerability where a specially crafted container image can lead to the creation of unauthorized files on the host. The name and location of the files cannot be controlled by an attacker. A successful exploit of this vulnerability might lead to data tampering.

CVSS 3.1 · 4.1 Medium EPSS < 1% KEV · Not listed
Vendors
Linux Nvidia
Products
Linux Kernel Nvidia Container Toolkit Nvidia Gpu Operator