CVE-2022-50932

Kyocera Command Center RX ECOSYS M2035dn - Directory Traversal File Disclosure (Unauthenticated)

Kyocera Command Center RX ECOSYS M2035dn contains a directory traversal vulnerability that allows unauthenticated attackers to read sensitive system files by manipulating file paths under the /js/ path. Attackers can exploit the issue by sending requests like /js/../../../../.../etc/passwd%00.jpg (null-byte appended traversal) to access critical files such as /etc/passwd and /etc/shadow.

CVSS 4.0 · 8.7 High EPSS 4.2% KEV · Not listed

Vendors

Kyocera

Products

Command Center Rx

CVE-2022-50797

Stripe Green Downloads Wordpress Plugin 2.03 Persistent XSS via Settings

Stripe Green Downloads Wordpress Plugin 2.03 contains a persistent cross-site scripting vulnerability allowing remote attackers to inject malicious scripts in button label fields. Attackers can exploit input parameters to execute arbitrary scripts, potentially leading to session hijacking and application module manipulation.

CVSS 4.0 · 5.1 Medium EPSS < 1% KEV · Not listed

Vendors

Halfdata Ithemes Wordpress

Products

Stripe Green Downloads Stripe Wordpress

CVE-2022-4978

Steppschuh Remote Control Server 3.1.1.12 Unauthenticated RCE

Remote Control Server, maintained by Steppschuh, 3.1.1.12 allows unauthenticated remote code execution when authentication is disabled, which is the default configuration. The server exposes a custom UDP-based control protocol that accepts remote keyboard input events without verification. An attacker on the same network can issue a sequence of keystroke commands to launch a system shell and execute arbitrary commands, resulting in full system compromise.

CVSS 4.0 · 9.3 Critical EPSS 2.5% KEV · Not listed

Vendors

Zenstruck

Products

Collection

CVE-2021-47977

WordPress Anti-Malware Security Bruteforce Firewall <= 4.20.72 Directory Traversal

WordPress Plugin Anti-Malware Security and Bruteforce Firewall 4.20.59 contains a directory traversal vulnerability that allows unauthenticated attackers to read arbitrary files by manipulating the file parameter. Attackers can send requests to the duplicator_download action via admin-ajax.php with path traversal sequences to access sensitive system files outside the intended directory.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed

Vendors

Gotmls Ithemes Wordpress

Products

Malware Security And Bruteforce Firewall Security Wordpress

CVE-2021-47970

Macaron Notes 5.5 Denial of Service via Buffer Overflow

Macaron Notes 5.5 contains a denial of service vulnerability that allows attackers to crash the application by creating notes with excessively long character strings. Attackers can generate a payload containing 350000 repeated characters and paste it into a note field to trigger application crash and stop functionality.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed

Vendors

Go-macaron Macaron-notes-great-notebook

Products

Macaron Macaron Notes Gear Notebook

CVE-2021-47956

EgavilanMedia PHPCRUD 1.0 SQL Injection via firstname

EgavilanMedia PHPCRUD 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the firstname parameter. Attackers can send POST requests to insert.php with malicious firstname values to extract sensitive database information.

CVSS 4.0 · 8.8 High EPSS < 1% KEV · Not listed

Vendors

Egavilanmedia

Products

Egavilanmedia Phpcrud Phpcrud

CVE-2021-47952

python jsonpickle 2.0.0 Remote Code Execution via py/repr

python jsonpickle 2.0.0 contains a remote code execution vulnerability that allows attackers to execute arbitrary Python commands by deserializing malicious JSON payloads containing py/repr objects. Attackers can craft JSON strings with py/repr directives that invoke the eval function during deserialization to execute arbitrary code.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed

Vendors

Jsonpickle Project

Products

Jsonpickle

CVE-2021-47948

WordPress GetPaid Plugin 2.4.6 HTML Injection via Help Text

WordPress GetPaid Plugin 2.4.6 contains an HTML injection vulnerability that allows authenticated attackers to inject arbitrary HTML code by exploiting the Help Text field in payment forms. Attackers can inject malicious HTML including image tags and scripts into the Help Text field during payment form creation, which gets stored in the database and executed in the browser when the form is viewed.

CVSS 4.0 · 5.1 Medium EPSS < 1% KEV · Not listed

Vendors

Ayecode Invoicing Wordpress

Products

Getpaid Payments Plugin Getpaid Wordpress

CVE-2021-47945

Argus Surveillance DVR 4.0 Unquoted Service Path Privilege Escalation

Argus Surveillance DVR 4.0 contains an unquoted service path vulnerability in the DVRWatchdog service that allows local attackers to escalate privileges by exploiting the service binary path. Attackers can place a malicious executable in the Program Files directory to be executed with LocalSystem privileges when the service starts.

CVSS 4.0 · 8.5 High EPSS < 1% KEV · Not listed

Vendors

Argussurveillance Qnap

Products

Dvr Surveillance Station

CVE-2021-47929

WordPress Plugin Filterable Portfolio Gallery 1.0 Stored XSS

Filterable Portfolio Gallery 1.0 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious JavaScript by entering payloads in the title field. Attackers can store JavaScript code like image tags with onerror handlers that execute when the gallery is previewed, affecting all users viewing the page.

CVSS 4.0 · 5.1 Medium EPSS < 1% KEV · Not listed

Vendors

Bestwebsoft Filterable-portfolio Wordpress

Products

Portfolio Filterable Portfolio Gallery Wordpress

CVE-2021-47922

WordPress Plugin Slider by Soliloquy 2.6.2 Stored XSS

Slider by Soliloquy 2.6.2 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts through the title parameter. Attackers can add JavaScript payloads in the title field when creating or editing sliders, which executes in the browsers of users viewing the slider on both administrative and frontend pages.

CVSS 4.0 · 5.1 Medium EPSS < 1% KEV · Not listed

Vendors

Soliloquywp Wordpress

Products

Slider Slider By Soliloquy Wordpress

CVE-2021-47904

PhreeBooks 5.2.3 - Remote Code Execution

PhreeBooks 5.2.3 contains an authenticated file upload vulnerability in the Image Manager that allows remote code execution. Attackers can upload a malicious PHP web shell by exploiting unrestricted file type uploads to gain command execution on the server.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed

Vendors

Phreesoft

Products

Phreebookserp

CVE-2021-47894

Managed Switch Port Mapping Tool 2.85.2 - Denial of Service

Managed Switch Port Mapping Tool 2.85.2 contains a denial of service vulnerability that allows attackers to crash the application by creating an oversized buffer. Attackers can generate a 10,000-character buffer and paste it into the IP Address and SNMP Community Name fields to trigger the application crash.

CVSS 4.0 · 6.7 Medium EPSS < 1% KEV · Not listed

Vendors

Jenkins Northwest Performance Software

Products

Performance Managed Switch Port Mapping Tool

CVE-2021-47854

DD-WRT 45723 - UPNP Buffer Overflow

DD-WRT version 45723 contains a buffer overflow vulnerability in the UPNP network discovery service that allows remote attackers to potentially execute arbitrary code. Attackers can send crafted M-SEARCH packets with oversized UUID payloads to trigger buffer overflow conditions on the target device.

CVSS 4.0 · 8.7 High EPSS 1.1% KEV · Not listed

Vendors

Dd-wrt

Products

Dd-wrt

CVE-2021-47816

Thecus N4800Eco Nas Server Control Panel - Command Injection

Thecus N4800Eco NAS Server Control Panel contains a command injection vulnerability that allows authenticated attackers to execute arbitrary system commands through user management endpoints. Attackers can inject commands via username and batch user creation parameters to execute shell commands with administrative privileges.

CVSS 4.0 · 5.3 Medium EPSS 1.8% KEV · Not listed

Vendors

Thecus

Products

N4800eco N4800eco Nas Server Control Panel

CVE-2021-47807

Sync Breeze 13.6.18 - 'Multiple' Unquoted Service Path

Sync Breeze 13.6.18 contains an unquoted service path vulnerability in its Windows service configuration that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted path in service binaries located in 'Program Files' directories to inject malicious executables and escalate privileges.

CVSS 4.0 · 8.5 High EPSS < 1% KEV · Not listed

Vendors

Flexense Syncbreeze

Products

Sync Breeze Syncbreeze Sync Breeze

CVE-2021-47806

Dup Scout 13.5.28 - 'Multiple' Unquoted Service Path

Dup Scout 13.5.28 contains an unquoted service path vulnerability in its Windows service configuration that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted path in 'C:\Program Files\Dup Scout Server\bin\dupscts.exe' to inject malicious executables and escalate privileges.

CVSS 4.0 · 8.5 High EPSS < 1% KEV · Not listed

Vendors

Dupscout Flexense

Products

Dup Scout Dup Scout Dupscout

CVE-2021-47799

Visual Tools DVR VX16 4.2.28 - Local Privilege Escalation

Visual Tools DVR VX16 version 4.2.28 contains a local privilege escalation vulnerability in its Sudo configuration that allows attackers to gain root access. Attackers can exploit the unsafe Sudo settings by using mount commands to bind a shell, enabling unauthorized system-level privileges.

CVSS 4.0 · 8.5 High EPSS < 1% KEV · Not listed

Vendors

Visual-tools

Products

Dvr Vx16 Dvr Vx16 Firmware

CVE-2021-47782

Odine Solutions GateKeeper 1.0 - 'trafficCycle' SQL Injection

Odine Solutions GateKeeper 1.0 contains a SQL injection vulnerability in the trafficCycle API endpoint that allows remote attackers to inject malicious database queries. Attackers can exploit the vulnerability by sending crafted payloads to the /rass/api/v1/trafficCycle/ endpoint to manipulate PostgreSQL database queries and potentially extract sensitive information.

CVSS 4.0 · 7.1 High EPSS < 1% KEV · Not listed

Vendors

Odinesolutions Openpolicyagent

Products

Gatekeeper Gatekeeper

CVE-2021-47751

CuteEditor for PHP 6.6 - Directory Traversal

CuteEditor for PHP (now referred to as Rich Text Editor) 6.6 contains a directory traversal vulnerability in the browse template feature that allows attackers to write files to arbitrary web root directories. Attackers can exploit the ServerMapPath() function by renaming uploaded HTML files using directory traversal sequences to write files outside the intended template directory.

CVSS 4.0 · 5.3 Medium EPSS < 1% KEV · Not listed

Vendors

Cutesoft Phphtmledit

Products

Cute Editor Cuteeditor Rich Text Editor