NAME Node.js @advanced-rest-client/base module privilege escalation Platforms Affected:Node.js @advanced-rest-client/base 0.1.9Risk Level:8.8Exploitability:UnprovenConsequences:Gain Privileges DESCRIPTION Node.js @advanced-rest-client/base module could allow a remote...
NAME Zabbix items.php file upload Platforms Affected:Zabbix Zabbix 5.0.17Risk Level:8.8Exploitability:Proof of ConceptConsequences:Gain Access DESCRIPTION Zabbix could allow a remote authenticated...
NAME Delta Industrial Automation DIAEnergie file upload Platforms Affected:Delta Industrial Automation DIAEnergieRisk Level:8.8Exploitability:UnprovenConsequences:File Manipulation DESCRIPTION Delta Industrial Automation DIAEnergie could...
NAME MithrilJS mithril.js code execution Platforms Affected:Node.js Node.jsRisk Level:8.2Exploitability:UnprovenConsequences:Gain Access DESCRIPTION MithrilJS mithril.js could allow a remote attacker to execute...
NAME Rufus code execution Platforms Affected:Rufus Rufus 3.17.1846Risk Level:8.4Exploitability:UnprovenConsequences:Gain Access DESCRIPTION Rufus could allow a local attacker to execute arbitrary...
NAME Prowise code execution Platforms Affected:Prowise Reflect 1.0.9Risk Level:8.8Exploitability:Proof of ConceptConsequences:Gain Access DESCRIPTION Prowise could allow a remote attacker to...
NAME Technitium TMAC code execution Platforms Affected:Technitium TMAC 6.0.7Risk Level:7.8Exploitability:Proof of ConceptConsequences:Gain Access DESCRIPTION Technitium TMAC could allow a remote...
NAME Dahua ToolBox code execution Platforms Affected:Dahua ToolBox 1.010.0000000.0Risk Level:7.8Exploitability:Proof of ConceptConsequences:Gain Access DESCRIPTION Dahua ToolBox could allow a remote...
NAME Axis IP cameras file upload Platforms Affected:Axis M3044-V 9.80.3.8Risk Level:8.8Exploitability:FunctionalConsequences:Gain Access DESCRIPTION Axis IP cameras could allow a remote...
NAME Node.js toastr module cross-site scripting Platforms Affected:Node.js toastr 2.1.4Risk Level:8.1Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION Node.js toastr module is vulnerable to cross-site...
NAME Auto Spare Parts Management user SQL injection Platforms Affected:Auto Spare Parts Management Auto Spare Parts Management 1.0Risk Level:9.8Exploitability:HighConsequences:Data Manipulation...
NAME Adobe ColdFusion code execution Platforms Affected:Adobe ColdFusion 11.0Risk Level:8.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION Adobe ColdFusion could allow a remote attacker to...
NAME Distributed Data Systems WebHMI code execution Platforms Affected:Distributed Data Systems WebHMI 4.1Risk Level:8.8Exploitability:Proof of ConceptConsequences:Gain Access DESCRIPTION Distributed Data...
NAME Wondershare MirrorGo ElevationService.exe privilege escalation Platforms Affected:Wondershare Wondershare MirrorGo 2.0.11.346Risk Level:8.4Exploitability:Proof of ConceptConsequences:Gain Privileges DESCRIPTION Wondershare MirrorGo could allow...
NAME Cyclades Serial Console Server privilege escalation Platforms Affected:Vertiv Cyclades Serial Console Server 3.3.0Risk Level:8.4Exploitability:Proof of ConceptConsequences:Gain Privileges DESCRIPTION Cyclades...
NAME Samsung Galaxy S21 open redirect Platforms Affected:Samsung Galaxy S21Risk Level:8.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION Samsung Galaxy S21 could allow a remote...
NAME Vicidial AST_IVRstats.php AST_LISTS_pass_report.php AST_usergroup_login_report.php admin_lists_custom.php Platforms Affected:Vicidial Vicidial 2.14-783aRisk Level:7.3Exploitability:HighConsequences:Data Manipulation DESCRIPTION Vicidial is vulnerable to SQL injection. A...
NAME Cosmetics and Beauty Product Online Store search SQL injection Platforms Affected:Sourcecodester Cosmetics and Beauty Product Online Store 1.0Risk Level:9.1Exploitability:HighConsequences:Data...
NAME Zyxel devices ping certificate upload command execution Platforms Affected:Zyxel VMG3312 B10B Zyxel VMG1312-B10D Zyxel AMG1302-T11C Zyxel VMG3925-B10C Zyxel VMG8924-B10D...
NAME Zyxel devices /cgi-bin/DAL?oid=login_privilege /cgi-bin/DAL?oid=mgmt_srv security bypass Platforms Affected:Zyxel VMG3312 B10B Zyxel VMG1312-B10D Zyxel WSQ20 Zyxel WSQ50 Zyxel AMG1302-T11C Zyxel...
NAME Linux Kernel privilege escalation Platforms Affected:Linux Kernel 5.14 Linux Kernel 5.15 Linux Kernel 5.16Risk Level:8.8Exploitability:UnprovenConsequences:Gain Privileges DESCRIPTION Linux Kernel...
NAME Zyxel devices libclinkc.so Export_Log zhttpd buffer overflow Platforms Affected:Zyxel VMG3312 B10B Zyxel VMG1312-B10D Zyxel AMG1302-T11C Zyxel VMG3925-B10C Zyxel VMG8924-B10D...
NAME Vicidial AST_IVRstats.php AST_LISTS_pass_report.php AST_usergroup_login_report.php admin_lists_custom.php Platforms Affected:Vicidial Vicidial 2.14-783aRisk Level:7.3Exploitability:HighConsequences:Data Manipulation DESCRIPTION Vicidial is vulnerable to SQL injection. A...
NAME Telegram for Android flag emojis denial of service Platforms Affected:Telegram Telegram for Android 8.4.4Risk Level:7.8Exploitability:Proof of ConceptConsequences:Denial of Service...
