Search vulnerabilities

Expected end of text, found ':' (at char 23), (line:1, col:24)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 425,910

CVE-2019-25574

Green CMS 2.x Path Traversal Arbitrary File Download

Green CMS 2.x contains a path traversal vulnerability that allows authenticated attackers to download arbitrary files and directories by injecting directory traversal sequences. Attackers can manipulate the theme_name parameter in the themeexporthandle action or supply base64-encoded file paths to the downfile action to retrieve sensitive files outside intended directories.

CVSS 4.0 · 7.1 High EPSS 1.1% KEV · Not listed
Vendors
Greencms Njtech
Products
Greencms Greencms
CVE-2019-25573

Green CMS 2.x SQL Injection via cat Parameter

Green CMS 2.x contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code through the cat parameter. Attackers can send GET requests to index.php with m=admin, c=posts, a=index parameters and inject SQL code in the cat parameter to manipulate database queries and extract sensitive information.

CVSS 4.0 · 7.1 High EPSS < 1% KEV · Not listed
Vendors
Greencms Njtech
Products
Greencms Greencms
CVE-2019-25487

SAPIDO RB-1732 V2.0.43 Remote Command Execution via formSysCmd

SAPIDO RB-1732 V2.0.43 contains a remote command execution vulnerability that allows unauthenticated attackers to execute arbitrary system commands by submitting malicious input to the formSysCmd endpoint. Attackers can send POST requests with the sysCmd parameter containing shell commands to execute code on the device with router privileges.

CVSS 4.0 · 9.3 Critical EPSS 9.0% KEV · Not listed
Vendors
Sapido
Products
Rb-1732
CVE-2019-25485

R 3.4.4 Windows x64 Buffer Overflow SEH DEP ASLR Bypass

R 3.4.4 on Windows x64 contains a buffer overflow vulnerability in the GUI Preferences language menu field that allows local attackers to bypass DEP and ASLR protections. Attackers can inject a crafted payload through the Language for menus preference to trigger a structured exception handler chain pivot and execute arbitrary shellcode with application privileges.

CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Vendors
R-project
Products
R
CVE-2019-25478

GetGo Download Manager 6.2.2.3300 Buffer Overflow DoS

GetGo Download Manager 6.2.2.3300 contains a buffer overflow vulnerability that allows remote attackers to cause denial of service by sending HTTP responses with excessively long headers. Attackers can craft malicious HTTP responses with oversized header values to crash the application and make it unavailable.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Getgosoft
Products
Getgo Download Manager
CVE-2019-25477

RAR Password Recovery 1.80 Denial of Service Buffer Overflow

RAR Password Recovery 1.80 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an oversized payload in the registration dialog. Attackers can craft a malicious input string exceeding 6000 bytes and paste it into the User Name and Registration Code field to trigger an application crash.

CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Vendors
Krylack Top Password Software
Products
Rar Password Recovery Rar Password Recovery
CVE-2019-25470

eWON Firmware 12.2-13.0 Authentication Bypass via wsdReadForm

eWON Firmware versions 12.2 to 13.0 contain an authentication bypass vulnerability that allows attackers with minimal privileges to retrieve sensitive user data by exploiting the wsdReadForm endpoint. Attackers can send POST requests to /wrcgi.bin/wsdReadForm with base64-encoded partial credentials and a crafted wsdList parameter to extract encrypted passwords for all users, which can be decrypted using a hardcoded XOR key.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Ewon
Products
Ewon Ewon Firmware
CVE-2019-25469

Folder Lock 7.7.9 Denial of Service via Serial Number Field

Folder Lock 7.7.9 contains a buffer overflow vulnerability in the serial number registration field that allows local attackers to crash the application by submitting an oversized payload. Attackers can paste a 6000-byte buffer of arbitrary data into the 'Serial Number and Registration Key' field to trigger a denial of service condition.

CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Vendors
Newsoftwares
Products
Folder Lock
CVE-2019-25466

Easy File Sharing Web Server 7.2 Local SEH Overflow

Easy File Sharing Web Server 7.2 contains a local structured exception handling buffer overflow vulnerability that allows local attackers to execute arbitrary code by creating a malicious username. Attackers can craft a username with a payload containing 4059 bytes of padding followed by a nseh value and seh pointer to trigger the overflow when adding a new user account.

CVSS 4.0 · 8.6 High EPSS < 1% KEV · Not listed
Vendors
Sharing-file
Products
Easy File Sharing Web Server
CVE-2019-25367

ArangoDB Community Edition 3.4.2-1 XSS via aardvark admin interface

ArangoDB Community Edition 3.4.2-1 contains multiple cross-site scripting vulnerabilities in the Aardvark web admin interface (index.html) through search, user management, and API parameters. Attackers can inject scripts via parameters in /_db/_system/_admin/aardvark/index.html to execute JavaScript in authenticated users' browsers.

CVSS 4.0 · 4.8 Medium EPSS < 1% KEV · Not listed
Vendors
Arangodb
Products
Arangodb Arangodb Community Edition
CVE-2019-25337

OwnCloud 8.1.8 - Username Disclosure

OwnCloud 8.1.8 contains a username enumeration vulnerability that allows remote attackers to discover user accounts by manipulating the share.php endpoint. Attackers can send crafted GET requests to /index.php/core/ajax/share.php with a wildcard search parameter to retrieve comprehensive user information.

CVSS 4.0 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Owncloud
Products
Owncloud
CVE-2019-25332

FTP Commander Pro 8.03 - Local Stack Overflow

FTP Commander Pro 8.03 contains a local stack overflow vulnerability that allows attackers to execute arbitrary code by overwriting the EIP register through a custom command input. Attackers can craft a malicious payload of 4108 bytes to overwrite memory and execute shellcode, demonstrating remote code execution potential.

CVSS 4.0 · 8.4 High EPSS < 1% KEV · Not listed
Vendors
Internet-soft
Products
Ftp Commander Ftp Commander Pro
CVE-2019-25326

ipPulse 1.92 - 'Enter Key' Denial of Service

ipPulse 1.92 contains a denial of service vulnerability that allows local attackers to crash the application by providing an oversized input in the Enter Key field. Attackers can generate a 256-byte buffer of repeated 'A' characters to trigger an application crash when pasting the malicious content.

CVSS 4.0 · 4.6 Medium EPSS < 1% KEV · Not listed
Vendors
Northwest Performance Software Nwpsw
Products
Ippulse Ippulse
CVE-2019-25303

TheJshen contentManagementSystem 1.04 - 'id' SQL Injection

TheJshen ContentManagementSystem 1.04 contains a SQL injection vulnerability that allows attackers to manipulate database queries through the 'id' GET parameter. Attackers can exploit boolean-based, time-based, and UNION-based SQL injection techniques to extract or manipulate database information by crafting malicious query payloads.

CVSS 4.0 · 7.1 High EPSS < 1% KEV · Not listed
Vendors
Cusg Thejshen
Products
Content Management System Contentmanagementsystem
CVE-2019-25301

thrsrossi Millhouse-Project 1.414 - 'content' Persistent Cross-Site Scripting

Millhouse-Project 1.414 contains a persistent cross-site scripting vulnerability in the comment submission functionality that allows attackers to inject malicious scripts. Attackers can post comments with embedded JavaScript through the 'content' parameter in add_comment_sql.php to execute arbitrary scripts in victim browsers.

CVSS 4.0 · 5.1 Medium EPSS < 1% KEV · Not listed
Vendors
Millhouse-project Project
Products
Millhouse-project
CVE-2019-25280

Yahei-PHP Prober 0.4.7 Remote HTML Injection via Speed Parameter

Yahei-PHP Prober 0.4.7 contains a remote HTML injection vulnerability that allows attackers to execute arbitrary HTML code through the 'speed' GET parameter. Attackers can inject malicious HTML code in the 'speed' parameter of prober.php to trigger cross-site scripting in user browser sessions.

CVSS 4.0 · 5.1 Medium EPSS < 1% KEV · Not listed
Vendors
Yahei
Products
Yahei Php Prober
CVE-2019-25279

FaceSentry Access Control System 6.4.8 Cleartext Password Storage Vulnerability

FaceSentry Access Control System 6.4.8 contains a cleartext password storage vulnerability that allows attackers to access unencrypted credentials in the device's SQLite database. Attackers can directly read sensitive login information stored in /faceGuard/database/FaceSentryWeb.sqlite without additional authentication.

CVSS 4.0 · 6.8 Medium EPSS < 1% KEV · Not listed
Vendors
Iwt
Products
Facesentry Access Control System Facesentry Access Control System Firmware
CVE-2019-25278

FaceSentry Access Control System 6.4.8 Authentication Credentials MiTM Disclosure

FaceSentry Access Control System 6.4.8 contains a cleartext transmission vulnerability that allows remote attackers to intercept authentication credentials. Attackers can perform man-in-the-middle attacks to capture HTTP cookie authentication information during network communication.

CVSS 4.0 · 9.1 Critical EPSS < 1% KEV · Not listed
Vendors
Iwt
Products
Facesentry Access Control System Facesentry Access Control System Firmware
CVE-2019-25260

OXID eShop 6.3.4 - 'sorting' SQL Injection

OXID eShop versions 6.x prior to 6.3.4 contains a SQL injection vulnerability in the 'sorting' parameter that allows attackers to insert malicious database content. Attackers can exploit the vulnerability by manipulating the sorting parameter to inject PHP code into the database and execute arbitrary code through crafted URLs.

CVSS 4.0 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Oxid-esales Oxidforge
Products
Eshop Oxid Eshop
CVE-2019-25251

Teradek VidiU Pro 3.0.3 Server-Side Request Forgery via RTMP Settings

Teradek VidiU Pro 3.0.3 contains a server-side request forgery vulnerability in the management interface that allows attackers to manipulate GET parameters 'url' and 'xml_url'. Attackers can exploit this flaw to bypass firewalls, initiate network enumeration, and potentially trigger external HTTP requests to arbitrary destinations.

CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Vendors
Teradek
Products
Vidiu Vidiu Firmware Vidiu Mini and 3 more