Search vulnerabilities

Expected end of text, found ':' (at char 23), (line:1, col:24)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 425,865

CVE-2023-54366

SurrealDB before 1.0.1 Insecure Default Table Permissions

SurrealDB before 1.0.1 sets default table permissions to FULL instead of NONE, allowing SELECT, CREATE, UPDATE, and DELETE operations on tables without explicit permissions. Attackers with database access or unauthenticated users on publicly exposed instances can perform unrestricted operations on unprotected tables within their authorization scope.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Surrealdb
Products
Surrealdb
CVE-2023-53911

Textpattern CMS 4.8.8 Authenticated Stored Cross-Site Scripting via Article Excerpt

Textpattern CMS 4.8.8 contains a stored cross-site scripting vulnerability in the article excerpt field that allows authenticated users to inject malicious scripts. Attackers can insert JavaScript payloads into the excerpt, which will execute when the article is viewed by other users.

CVSS 4.0 · 5.1 Medium EPSS < 1% KEV · Not listed
Vendors
Textpattern
Products
Textpattern
CVE-2023-53770

MiniDVBLinux 5.4 Unauthenticated Configuration Download via Backup Endpoint

MiniDVBLinux 5.4 contains an unauthenticated configuration download vulnerability that allows remote attackers to access sensitive system configuration files through a direct object reference. Attackers can exploit the backup download endpoint by sending a GET request with 'action=getconfig' to retrieve a complete system configuration archive containing sensitive credentials.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Distribution Minidvblinux
Products
Distribution Minidvblinux
CVE-2023-53739

Tinycontrol LAN Controller v3 LK3 1.58a Unauthenticated Configuration Backup Disclosure

Tinycontrol LAN Controller v3 LK3 version 1.58a contains an unauthenticated vulnerability that allows remote attackers to download configuration backup files containing sensitive credentials. Attackers can retrieve the lk3_settings.bin file and extract base64-encoded user and admin passwords without authentication.

CVSS 4.0 · 9.9 Critical EPSS < 1% KEV · Not listed
Vendors
Aviatrix Tinycontrol
Products
Controller Lan Controller
CVE-2022-50960

WordPress International Sms Contact Form 7 Integration 1.2 XSS

WordPress International SMS for Contact Form 7 Integration version 1.2 contains a reflected cross-site scripting vulnerability in the page parameter of the admin settings interface. Attackers can inject malicious scripts through the page parameter in class-sms-log-display.php to execute arbitrary JavaScript in administrator browsers.

CVSS 4.0 · 5.1 Medium EPSS < 1% KEV · Not listed
Vendors
Icu-project Varun Sridharan Wordpress
Products
International Components For Unicode International Sms For Contact Form Wordpress
CVE-2022-50949

WordPress Plugin Videos sync PDF 1.7.4 Stored XSS

WordPress Plugin Videos sync PDF 1.7.4 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by exploiting unsanitized mov, pdf, mp4, webm, and ogg parameters. Attackers can inject payloads like autofocus onfocus event handlers through the plugin options panel to execute arbitrary JavaScript when administrators view or edit video settings.

CVSS 4.0 · 5.1 Medium EPSS < 1% KEV · Not listed
Vendors
A-j-evolution Cs-technologies Wordpress
Products
Videos Sync Pdf Evolution Wordpress
CVE-2022-50932

Kyocera Command Center RX ECOSYS M2035dn - Directory Traversal File Disclosure (Unauthenticated)

Kyocera Command Center RX ECOSYS M2035dn contains a directory traversal vulnerability that allows unauthenticated attackers to read sensitive system files by manipulating file paths under the /js/ path. Attackers can exploit the issue by sending requests like /js/../../../../.../etc/passwd%00.jpg (null-byte appended traversal) to access critical files such as /etc/passwd and /etc/shadow.

CVSS 4.0 · 8.7 High EPSS 4.2% KEV · Not listed
Vendors
Kyocera
Products
Command Center Rx
CVE-2022-50797

Stripe Green Downloads Wordpress Plugin 2.03 Persistent XSS via Settings

Stripe Green Downloads Wordpress Plugin 2.03 contains a persistent cross-site scripting vulnerability allowing remote attackers to inject malicious scripts in button label fields. Attackers can exploit input parameters to execute arbitrary scripts, potentially leading to session hijacking and application module manipulation.

CVSS 4.0 · 5.1 Medium EPSS < 1% KEV · Not listed
Vendors
Halfdata Ithemes Wordpress
Products
Stripe Green Downloads Stripe Wordpress
CVE-2022-4978

Steppschuh Remote Control Server 3.1.1.12 Unauthenticated RCE

Remote Control Server, maintained by Steppschuh, 3.1.1.12 allows unauthenticated remote code execution when authentication is disabled, which is the default configuration. The server exposes a custom UDP-based control protocol that accepts remote keyboard input events without verification. An attacker on the same network can issue a sequence of keystroke commands to launch a system shell and execute arbitrary commands, resulting in full system compromise.

CVSS 4.0 · 9.3 Critical EPSS 2.5% KEV · Not listed
Vendors
Zenstruck
Products
Collection
CVE-2021-47977

WordPress Anti-Malware Security Bruteforce Firewall <= 4.20.72 Directory Traversal

WordPress Plugin Anti-Malware Security and Bruteforce Firewall 4.20.59 contains a directory traversal vulnerability that allows unauthenticated attackers to read arbitrary files by manipulating the file parameter. Attackers can send requests to the duplicator_download action via admin-ajax.php with path traversal sequences to access sensitive system files outside the intended directory.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Gotmls Ithemes Wordpress
Products
Malware Security And Bruteforce Firewall Security Wordpress
CVE-2021-47970

Macaron Notes 5.5 Denial of Service via Buffer Overflow

Macaron Notes 5.5 contains a denial of service vulnerability that allows attackers to crash the application by creating notes with excessively long character strings. Attackers can generate a payload containing 350000 repeated characters and paste it into a note field to trigger application crash and stop functionality.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Go-macaron Macaron-notes-great-notebook
Products
Macaron Macaron Notes Gear Notebook
CVE-2021-47956

EgavilanMedia PHPCRUD 1.0 SQL Injection via firstname

EgavilanMedia PHPCRUD 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the firstname parameter. Attackers can send POST requests to insert.php with malicious firstname values to extract sensitive database information.

CVSS 4.0 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Egavilanmedia
Products
Egavilanmedia Phpcrud Phpcrud
CVE-2021-47952

python jsonpickle 2.0.0 Remote Code Execution via py/repr

python jsonpickle 2.0.0 contains a remote code execution vulnerability that allows attackers to execute arbitrary Python commands by deserializing malicious JSON payloads containing py/repr objects. Attackers can craft JSON strings with py/repr directives that invoke the eval function during deserialization to execute arbitrary code.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed
Vendors
Jsonpickle Project
Products
Jsonpickle
CVE-2021-47948

WordPress GetPaid Plugin 2.4.6 HTML Injection via Help Text

WordPress GetPaid Plugin 2.4.6 contains an HTML injection vulnerability that allows authenticated attackers to inject arbitrary HTML code by exploiting the Help Text field in payment forms. Attackers can inject malicious HTML including image tags and scripts into the Help Text field during payment form creation, which gets stored in the database and executed in the browser when the form is viewed.

CVSS 4.0 · 5.1 Medium EPSS < 1% KEV · Not listed
Vendors
Ayecode Invoicing Wordpress
Products
Getpaid Payments Plugin Getpaid Wordpress
CVE-2021-47945

Argus Surveillance DVR 4.0 Unquoted Service Path Privilege Escalation

Argus Surveillance DVR 4.0 contains an unquoted service path vulnerability in the DVRWatchdog service that allows local attackers to escalate privileges by exploiting the service binary path. Attackers can place a malicious executable in the Program Files directory to be executed with LocalSystem privileges when the service starts.

CVSS 4.0 · 8.5 High EPSS < 1% KEV · Not listed
Vendors
Argussurveillance Qnap
Products
Dvr Surveillance Station
CVE-2021-47929

WordPress Plugin Filterable Portfolio Gallery 1.0 Stored XSS

Filterable Portfolio Gallery 1.0 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious JavaScript by entering payloads in the title field. Attackers can store JavaScript code like image tags with onerror handlers that execute when the gallery is previewed, affecting all users viewing the page.

CVSS 4.0 · 5.1 Medium EPSS < 1% KEV · Not listed
Vendors
Bestwebsoft Filterable-portfolio Wordpress
Products
Portfolio Filterable Portfolio Gallery Wordpress
CVE-2021-47922

WordPress Plugin Slider by Soliloquy 2.6.2 Stored XSS

Slider by Soliloquy 2.6.2 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts through the title parameter. Attackers can add JavaScript payloads in the title field when creating or editing sliders, which executes in the browsers of users viewing the slider on both administrative and frontend pages.

CVSS 4.0 · 5.1 Medium EPSS < 1% KEV · Not listed
Vendors
Soliloquywp Wordpress
Products
Slider Slider By Soliloquy Wordpress
CVE-2021-47904

PhreeBooks 5.2.3 - Remote Code Execution

PhreeBooks 5.2.3 contains an authenticated file upload vulnerability in the Image Manager that allows remote code execution. Attackers can upload a malicious PHP web shell by exploiting unrestricted file type uploads to gain command execution on the server.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Phreesoft
Products
Phreebookserp
CVE-2021-47894

Managed Switch Port Mapping Tool 2.85.2 - Denial of Service

Managed Switch Port Mapping Tool 2.85.2 contains a denial of service vulnerability that allows attackers to crash the application by creating an oversized buffer. Attackers can generate a 10,000-character buffer and paste it into the IP Address and SNMP Community Name fields to trigger the application crash.

CVSS 4.0 · 6.7 Medium EPSS < 1% KEV · Not listed
Vendors
Jenkins Northwest Performance Software
Products
Performance Managed Switch Port Mapping Tool
CVE-2021-47854

DD-WRT 45723 - UPNP Buffer Overflow

DD-WRT version 45723 contains a buffer overflow vulnerability in the UPNP network discovery service that allows remote attackers to potentially execute arbitrary code. Attackers can send crafted M-SEARCH packets with oversized UUID payloads to trigger buffer overflow conditions on the target device.

CVSS 4.0 · 8.7 High EPSS 1.1% KEV · Not listed
Vendors
Dd-wrt
Products
Dd-wrt