CVE-2021-47816

Thecus N4800Eco Nas Server Control Panel - Command Injection

Thecus N4800Eco NAS Server Control Panel contains a command injection vulnerability that allows authenticated attackers to execute arbitrary system commands through user management endpoints. Attackers can inject commands via username and batch user creation parameters to execute shell commands with administrative privileges.

CVSS 4.0 · 5.3 Medium EPSS 1.8% KEV · Not listed

Vendors

Thecus

Products

N4800eco N4800eco Nas Server Control Panel

CVE-2021-47807

Sync Breeze 13.6.18 - 'Multiple' Unquoted Service Path

Sync Breeze 13.6.18 contains an unquoted service path vulnerability in its Windows service configuration that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted path in service binaries located in 'Program Files' directories to inject malicious executables and escalate privileges.

CVSS 4.0 · 8.5 High EPSS < 1% KEV · Not listed

Vendors

Flexense Syncbreeze

Products

Sync Breeze Syncbreeze Sync Breeze

CVE-2021-47806

Dup Scout 13.5.28 - 'Multiple' Unquoted Service Path

Dup Scout 13.5.28 contains an unquoted service path vulnerability in its Windows service configuration that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted path in 'C:\Program Files\Dup Scout Server\bin\dupscts.exe' to inject malicious executables and escalate privileges.

CVSS 4.0 · 8.5 High EPSS < 1% KEV · Not listed

Vendors

Dupscout Flexense

Products

Dup Scout Dup Scout Dupscout

CVE-2021-47799

Visual Tools DVR VX16 4.2.28 - Local Privilege Escalation

Visual Tools DVR VX16 version 4.2.28 contains a local privilege escalation vulnerability in its Sudo configuration that allows attackers to gain root access. Attackers can exploit the unsafe Sudo settings by using mount commands to bind a shell, enabling unauthorized system-level privileges.

CVSS 4.0 · 8.5 High EPSS < 1% KEV · Not listed

Vendors

Visual-tools

Products

Dvr Vx16 Dvr Vx16 Firmware

CVE-2021-47782

Odine Solutions GateKeeper 1.0 - 'trafficCycle' SQL Injection

Odine Solutions GateKeeper 1.0 contains a SQL injection vulnerability in the trafficCycle API endpoint that allows remote attackers to inject malicious database queries. Attackers can exploit the vulnerability by sending crafted payloads to the /rass/api/v1/trafficCycle/ endpoint to manipulate PostgreSQL database queries and potentially extract sensitive information.

CVSS 4.0 · 7.1 High EPSS < 1% KEV · Not listed

Vendors

Odinesolutions Openpolicyagent

Products

Gatekeeper Gatekeeper

CVE-2021-47751

CuteEditor for PHP 6.6 - Directory Traversal

CuteEditor for PHP (now referred to as Rich Text Editor) 6.6 contains a directory traversal vulnerability in the browse template feature that allows attackers to write files to arbitrary web root directories. Attackers can exploit the ServerMapPath() function by renaming uploaded HTML files using directory traversal sequences to write files outside the intended template directory.

CVSS 4.0 · 5.3 Medium EPSS < 1% KEV · Not listed

Vendors

Cutesoft Phphtmledit

Products

Cute Editor Cuteeditor Rich Text Editor

CVE-2021-47748

Hasura GraphQL 1.3.3 - Remote Code Execution

Hasura GraphQL 1.3.3 contains a remote code execution vulnerability that allows attackers to execute arbitrary shell commands through SQL query manipulation. Attackers can inject commands into the run_sql endpoint by crafting malicious GraphQL queries that execute system commands through PostgreSQL's COPY FROM PROGRAM functionality.

CVSS 4.0 · 9.3 Critical EPSS 1.1% KEV · Not listed

Vendors

Graphql Hasura

Products

Graphql Graphql Engine

CVE-2021-47725

STVS ProVision 5.9.10 Authenticated Reflected Cross-Site Scripting via Files Parameter

STVS ProVision 5.9.10 contains a cross-site scripting vulnerability in the 'files' POST parameter that allows authenticated attackers to inject arbitrary HTML code. Attackers can exploit the unvalidated input to execute malicious scripts within a user's browser session in the context of the affected site.

CVSS 4.0 · 4.8 Medium EPSS < 1% KEV · Not listed

Vendors

Stvs

Products

Provision

CVE-2020-37252

Realtek Audio Service 1.0.0.55 Unquoted Service Path Privilege Escalation

Realtek Audio Service 1.0.0.55 contains an unquoted service path vulnerability in RtkAudioService64.exe that allows local attackers to escalate privileges by injecting malicious code. Attackers can place executable files in the unquoted service path directory to execute arbitrary code with LocalSystem privileges during service startup or system reboot.

CVSS 4.0 · 8.5 High EPSS < 1% KEV · Not listed

Vendors

Dell Realtek

Products

Realtek High Definition Audio Driver Realtek Audio Service

CVE-2020-37244

WordPress Plugin Supsystic Membership 1.4.7 SQL Injection via sidx

Supsystic Membership 1.4.7 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the 'search' and 'sidx' parameters. Attackers can send GET requests to the badges module with crafted payloads to extract sensitive database information using time-based blind or UNION-based SQL injection techniques.

CVSS 4.0 · 8.8 High EPSS < 1% KEV · Not listed

Vendors

Ithemes Supsystic Wordpress

Products

Membership Membership Wordpress

CVE-2020-37227

WordPress Plugin HS Brand Logo Slider 2.1 Unrestricted File Upload

HS Brand Logo Slider 2.1 contains an unrestricted file upload vulnerability that allows authenticated users to bypass client-side file extension validation by uploading arbitrary files. Attackers can intercept upload requests to the logoupload parameter in the admin interface and rename files to executable extensions .php to achieve remote code execution.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed

Vendors

10web Heliossolutions Wordpress

Products

Slider Hs Brand Logo Slider Wordpress

CVE-2020-37223

IObit Uninstaller 9.5.0.15 Unquoted Service Path Privilege Escalation

IObit Uninstaller 9.5.0.15 contains an unquoted service path vulnerability in the IObitUnSvr service that allows local attackers to escalate privileges to SYSTEM level. Attackers can place a malicious executable named IObit.exe in the C:\Program Files (x86)\IObit directory and restart the service to execute code with SYSTEM privileges.

CVSS 4.0 · 8.5 High EPSS < 1% KEV · Not listed

Vendors

Iobit Revouninstaller

Products

Uninstaller Uninstaller

CVE-2020-37206

ShareAlarmPro Advanced Network Access Control - 'Key' Denial of Service

ShareAlarmPro contains a denial of service vulnerability that allows attackers to crash the application by supplying an oversized registration key. Attackers can generate a 1000-character buffer payload to trigger an application crash when pasted into the registration key field.

CVSS 4.0 · 4.6 Medium EPSS < 1% KEV · Not listed

Vendors

Nsasoft

Products

Nsauditor Sharealarmpro Advanced Network Access Control Sharealarmpro

CVE-2020-37141

AMSS++ v 4.31 - 'id' SQL Injection

AMSS++ version 4.31 contains a SQL injection vulnerability in the mail module's maildetail.php script through the 'id' parameter. Attackers can manipulate the 'id' parameter in /modules/mail/main/maildetail.php to inject malicious SQL queries and potentially access or modify database contents.

CVSS 4.0 · 8.8 High EPSS < 1% KEV · Not listed

Vendors

Amss++ Project Amss\+\+ Project Amssplus

Products

Amss++ Amss\+\+ Amss Plus

CVE-2020-37116

GUnet OpenEclass 1.7.3 E-learning platform - phpMyAdmin Remote Access

GUnet OpenEclass 1.7.3 includes phpMyAdmin 2.10.0.2 by default, which allows remote logins. Attackers with access to the platform can remotely access phpMyAdmin and, after uploading a shell, view the config.php file to obtain the MySQL password, leading to full database compromise.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed

Vendors

Gunet Openeclass

Products

Open Eclass Platform Openeclass

CVE-2020-37115

GUnet OpenEclass 1.7.3 E-learning platform - Plaintext Password Storage

GUnet OpenEclass 1.7.3 stores user credentials in plaintext, allowing administrators to view all registered users' usernames and passwords without encryption. This vulnerability exposes sensitive information and increases the risk of credential theft and unauthorized access.

CVSS 4.0 · 7.1 High EPSS < 1% KEV · Not listed

Vendors

Gunet Openeclass

Products

Open Eclass Platform Openeclass

CVE-2020-37114

GUnet OpenEclass 1.7.3 E-learning platform - Information Disclosure

GUnet OpenEclass 1.7.3 allows unauthenticated and authenticated users to access sensitive information, including system information, application version, and other students' uploaded assessments, due to improper access controls and information disclosure flaws in various modules. Attackers can retrieve system info, version info, and view or download other users' files without proper authorization.

CVSS 4.0 · 5.3 Medium EPSS < 1% KEV · Not listed

Vendors

Gunet Openeclass

Products

Open Eclass Platform Openeclass

CVE-2020-37113

GUnet OpenEclass 1.7.3 E-learning platform - File Upload Extension Bypass

GUnet OpenEclass 1.7.3 allows authenticated users to bypass file extension restrictions when uploading files. By renaming a PHP file to .php3 or .PhP, an attacker can upload a web shell and execute arbitrary code on the server. This vulnerability enables remote code execution by bypassing the intended file type checks in the exercise submission feature.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed

Vendors

Gunet Openeclass

Products

Open Eclass Platform Openeclass

CVE-2020-37056

Crystal Shard http-protection 0.2.0 - IP Spoofing Bypass

Crystal Shard http-protection 0.2.0 contains an IP spoofing vulnerability that allows attackers to bypass protection middleware by manipulating request headers. Attackers can hardcode consistent IP values across X-Forwarded-For, X-Client-IP, and X-Real-IP headers to circumvent security checks and gain unauthorized access.

CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed

Vendors

Avg Crystal Shard

Products

Protection Http-protection

CVE-2020-37040

Code Blocks 17.12 - 'File Name' Local Buffer Overflow

Code Blocks 17.12 contains a local buffer overflow vulnerability that allows attackers to execute arbitrary code by crafting a malicious file name with Unicode characters. Attackers can trigger the vulnerability by pasting a specially crafted payload into the file name field during project creation, potentially executing system commands like calc.exe.

CVSS 4.0 · 8.4 High EPSS < 1% KEV · Not listed

Vendors

Codeblocks

Products

Code::blocks Code\\