Insecure direct object reference in SUNNY TRIPOWER 5.0 Firmware version 3.10.16.R leads to unauthorized user groups accessing due to insecure cookie handling. CVSSv3.1 8.1 (HIGH) · EPSS 93th percentile
Dr Trust USA iCheck Connect BP Monitor BP Testing 118 version 1.2.1 is vulnerable to Missing Authentication. CVSSv3.1 8.8 (HIGH) · EPSS 60th percentile
Dr Trust USA iCheck Connect BP Monitor BP Testing 118 1.2.1 is vulnerable to Plain text command over BLE. CVSSv3.1 8.8 (HIGH) · EPSS 60th percentile
n Spring Framework versions 5.3.0 - 5.3.16 and older unsupported versions, it is possible for a user to provide a specially crafted SpEL expression that may cause a denial of service condition. CVSSv3.1 6.5 (MEDIUM) · EPSS 98th percentile
Online Banking System Protect v1.0 was discovered to contain a local file inclusion (LFI) vulnerability via the pages parameter. CVSSv3.1 9.8 (CRITICAL) · EPSS 66th percentile
A remote code execution (RCE) vulnerability in Online Banking System Protect v1.0 allows attackers to execute arbitrary code via a crafted PHP file uploaded through the Upload Image function. CVSSv3.1 9.8 (CRITICAL) · EPSS 84th percentile
Totolink A3100R V5.9c.4577 suffers from Use of Insufficiently Random Values via the web configuration. The SESSION_ID is predictable. An attacker can hijack a valid session and conduct further malicious operations. CVSSv3.1 8.8 (HIGH) · EPSS 73th percentile
In Totolink A3100R V5.9c.4577, multiple pages can be read by curl or Burp Suite without authentication. Additionally, admin configurations can be set without cookies. CVSSv3.1 9.8 (CRITICAL)
In totolink a3100r V5.9c.4577, the hard-coded telnet password can be discovered from official released firmware. An attacker, who has connected to the Wi-Fi, can easily telnet into the target with root shell if the telnet is function turned on. CVSSv3.1 8.8 (HIGH) · EPSS 64th percentile
totolink a3100r V5.9c.4577 is vulnerable to os command injection. The backend of a page is executing the "ping" command, and the input field does not adequately filter special symbols. This can lead to command injection attacks. CVSSv3.1 9.8 (CRITICAL) · EPSS 88th percentile
NUUO v03.11.00 was discovered to contain access control issue. CVSSv3.1 9.8 (CRITICAL) · EPSS 74th percentile
D-Link DIR-820L 1.05B03 was discovered to contain remote command execution (RCE) vulnerability via HTTP POST to get set ccp. CVSSv3.1 9.8 (CRITICAL) · EPSS 100th percentile
The web management console of CheckMK Enterprise Edition (versions 1.5.0 to 2.0.0p9) does not properly sanitise the uploading of ".mkp" files, which are Extension Packages, making remote code execution possible. Successful exploitation requires access to the web management interface, either with valid credentials or with a hijacked session of a user with administrator role. NOTE: the vendor states that this is the intended behavior: admins are supposed to be able to execute c CVSSv3.1 8.8 (HIGH) · EPSS 85th percentile
The web management console of CheckMK Raw Edition (versions 1.5.0 to 1.6.0) allows a misconfiguration of the web-app Dokuwiki (installed by default), which allows embedded php code. As a result, remote code execution is achieved. Successful exploitation requires access to the web management interface, either with valid credentials or with a hijacked session by a user with the role of administrator. CVSSv3.1 8.8 (HIGH) · EPSS 89th percentile
TypesetterCMS v5.1 was discovered to contain a Cross-Site Request Forgery (CSRF) which is exploited via a crafted POST request. CVSSv3.1 8.8 (HIGH) · EPSS 46th percentile
Yonyou u8 v13.0 was discovered to contain a DOM-based cross-site scripting (XSS) vulnerability via the component /u8sl/WebHelp. CVSSv3.1 6.1 (MEDIUM) · EPSS 98th percentile
zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many distant matches. CVSSv3.1 7.5 (HIGH) · EPSS 99th percentile
Certain HP Print devices may be vulnerable to potential information disclosure, denial of service, or remote code execution. CVSSv3.1 9.8 (CRITICAL) · EPSS 93th percentile
Certain HP Print devices may be vulnerable to potential information disclosure, denial of service, or remote code execution. CVSSv3.1 9.8 (CRITICAL) · EPSS 93th percentile
The Ninja Forms - File Uploads Extension WordPress plugin is vulnerable to arbitrary file uploads due to insufficient input file type validation found in the ~/includes/ajax/controllers/uploads.php file which can be bypassed making it possible for unauthenticated attackers to upload malicious files that can be used to obtain remote code execution, in versions up to and including 3.3.0 CVSSv3.1 9.8 (CRITICAL) · EPSS 93th percentile
Asus RT-AC68U <3.0.0.4.385.20633 and RT-AC5300 <3.0.0.4.384.82072 are affected by a buffer overflow in blocking_request.cgi. CVSSv3.1 9.8 (CRITICAL) · EPSS 75th percentile
BigAnt Software BigAnt Server v5.6.06 was discovered to contain a Cross-Site Request Forgery (CSRF). CVSSv3.1 8.8 (HIGH) · EPSS 49th percentile
BigAnt Software BigAnt Server v5.6.06 was discovered to be vulnerable to directory traversal attacks. CVSSv3.1 7.5 (HIGH) · EPSS 96th percentile
BigAnt Software BigAnt Server v5.6.06 was discovered to contain incorrect access control issues. CVSSv3.1 8.8 (HIGH) · EPSS 73th percentile
taocms v3.0.2 allows attackers to execute code injection via arbitrarily editing the .htaccess file. CVSSv3.1 9.8 (CRITICAL) · EPSS 75th percentile