Overview 1,282 matches · 54 in Waratek scope · 10 protected · 0 exploited · 0 CISA KEV · 82 EPSS ≥ 0.5
Protected by Waratek
10
0.8%
Rule in development
0
0.0%
Mitigation candidate
44
3.4%
No exploit published
0
0.0%
Outside Waratek scope
17
1.3%
Not applicable
1,211
94.5%
Withdrawn CVE
0
0.0%
blocked by ARMR today
10
0.8%
partly blocked
0
0.0%
not blocked
1,272
99.2%
not established
0
0.0%
unrecorded
0
0.0%
Exploited
0
0.0%
Working exploit published
1,282
100.0%
Proof of concept only
0
0.0%
Forecast only
0
0.0%
No public exploit
0
0.0%
split by
peak 137 / year
19951
Not applicable1
High1
not blocked1
Working exploit published1
19961
Not applicable1
Medium1
not blocked1
Working exploit published1
19974
Not applicable4
High3
Medium1
not blocked4
Working exploit published4
19980
199910
Not applicable10
High3
Medium7
not blocked10
Working exploit published10
200024
Mitigation candidate4
Outside Waratek scope1
Not applicable19
High10
Medium14
not blocked24
Working exploit published24
200143
Mitigation candidate1
Outside Waratek scope2
Not applicable40
High14
Medium29
not blocked43
Working exploit published43
200252
Mitigation candidate1
Not applicable51
High18
Medium31
Low3
not blocked52
Working exploit published52
200331
Mitigation candidate1
Outside Waratek scope1
Not applicable29
Critical1
High14
Medium15
Low1
not blocked31
Working exploit published31
200454
Outside Waratek scope1
Not applicable53
High20
Medium32
Low2
not blocked54
Working exploit published54
200564
Mitigation candidate2
Outside Waratek scope1
Not applicable61
High27
Medium37
not blocked64
Working exploit published64
2006119
Mitigation candidate1
Not applicable118
High57
Medium61
Low1
not blocked119
Working exploit published119
2007122
Mitigation candidate1
Outside Waratek scope1
Not applicable120
High58
Medium62
Low2
not blocked122
Working exploit published122
2008137
Outside Waratek scope1
Not applicable136
High85
Medium51
Low1
not blocked137
Working exploit published137
2009122
Mitigation candidate1
Not applicable121
High68
Medium54
not blocked122
Working exploit published122
201063
Mitigation candidate2
Outside Waratek scope1
Not applicable60
High30
Medium33
not blocked63
Working exploit published63
201133
Mitigation candidate2
Not applicable31
High18
Medium14
Low1
not blocked33
Working exploit published33
201258
Outside Waratek scope2
Not applicable56
High18
Medium38
Low2
not blocked58
Working exploit published58
201313
Mitigation candidate1
Not applicable12
High8
Medium4
Low1
not blocked13
Working exploit published13
201430
Not applicable30
High15
Medium14
Low1
not blocked30
Working exploit published30
201515
Outside Waratek scope1
Not applicable14
High9
Medium6
not blocked15
Working exploit published15
201614
Protected by Waratek1
Mitigation candidate1
Not applicable12
Critical3
High5
Medium6
blocked by ARMR today1
not blocked13
Working exploit published14
201780
Protected by Waratek3
Mitigation candidate2
Outside Waratek scope2
Not applicable73
Critical17
High46
Medium17
blocked by ARMR today3
not blocked77
Working exploit published80
201834
Protected by Waratek1
Mitigation candidate2
Outside Waratek scope1
Not applicable30
Critical12
High14
Medium8
blocked by ARMR today1
not blocked33
Working exploit published34
201928
Protected by Waratek1
Mitigation candidate2
Outside Waratek scope1
Not applicable24
Critical5
High12
Medium11
blocked by ARMR today1
not blocked27
Working exploit published28
202019
Mitigation candidate1
Not applicable18
Critical4
High11
Medium4
not blocked19
Working exploit published19
202127
Protected by Waratek2
Mitigation candidate3
Outside Waratek scope1
Not applicable21
Critical8
High5
Medium14
blocked by ARMR today2
not blocked25
Working exploit published27
202235
Mitigation candidate2
Not applicable33
Critical6
High9
Medium20
not blocked35
Working exploit published35
202318
Mitigation candidate5
Not applicable13
Critical5
High4
Medium9
not blocked18
Working exploit published18
202410
Protected by Waratek1
Mitigation candidate2
Not applicable7
Critical4
High2
Medium3
Low1
blocked by ARMR today1
not blocked9
Working exploit published10
202513
Protected by Waratek1
Mitigation candidate4
Not applicable8
Critical1
High3
Medium9
blocked by ARMR today1
not blocked12
Working exploit published13
20268
Mitigation candidate3
Not applicable5
Critical3
High1
Medium4
not blocked8
Working exploit published8
19961999200220052008201120142017202020232026
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2026-55864 | High | 2026-09-15 | Mitigation candidate | Working exploit published | GeoNetwork is a catalog application to manage spatially referenced resources. Prior to 4.2.17 and 4.4.12, POST /api/tools/ogc/sld accepted a caller-supplied WMS server URL and performed a server-side HTTP GET without destination validation. An anonymous attacker could make the GeoNetwork server send requests to internal hosts that are not publicly reachable. When the outbound response was XML, the endpoint could store and return the fetched body, making the request forgery non-blind and enabling internal data disclosure, authorization bypass, and network reconnaissance. This issue is fixed in versions 4.2.17 and 4.4.12. |
| CVE-2026-14620 | Medium | 2026-07-03 | Not applicable | Working exploit published | webpack-dev-server versions 5.2.5 and earlier expose two internal developer endpoints, /webpack-dev-server/open-editor and /webpack-dev-server/invalidate, that perform state-changing actions on any GET request without verifying that the request originated from the dev server's own page. Any website a developer visits while the dev server is running can trigger these endpoints cross-origin with no interaction beyond the visit. An attacker can open an arbitrary existing local file in the developer's editor, including files outside the project root, and repeated requests can spawn editor processes and force recompilations that degrade the developer's machine. Patches: upgrade to webpack-dev-server 5.2.6. Workarounds: none. |
| CVE-2026-45397 | Medium | 2026-05-15 | Not applicable | Working exploit published | Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.5, GET /api/v1/retrieval/ returns live RAG pipeline configuration to any unauthenticated HTTP client. No Authorization header, cookie, or API key is required. Every adjacent endpoint on the same router (/embedding, /config) is correctly guarded by get_admin_user making this a targeted omission. This vulnerability is fixed in 0.9.5. |
| CVE-2026-44551 | Critical | 2026-05-15 | Not applicable | Working exploit published | Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.0, the LDAP authentication endpoint does not validate that the submitted password is non-empty before performing a Simple Bind against the LDAP server. The LdapForm Pydantic model accepts password: str with no minimum length constraint, so an empty string passes validation. The subsequent Connection.bind() call succeeds on vulnerable LDAP servers, and the application issues a full session token for the target user. This vulnerability is fixed in 0.9.0. |
| CVE-2026-40105 | Medium | 2026-04-15 | Mitigation candidate | Working exploit published | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Versions 10.4-rc-1, through 16.10.15, 17.0.0-rc-1, through 17.4.7 and 17.5.0-rc-1 through 17.10.0 contain a reflected cross-site scripting vulnerability (XSS) in the comparison view between revisions of a page allows executing JavaScript code in the user's browser. If the current user is an admin, this can not only affect the current user but also the confidentiality, integrity and availability of the whole XWiki instance. If developers are unable to update immediately, they can apply the patch manually to templates/changesdoc.vm in the deployed WAR. |
| CVE-2026-33340 | Critical | 2026-03-24 | Not applicable | Working exploit published | LoLLMs WEBUI provides the Web user interface for Lord of Large Language and Multi modal Systems. A critical Server-Side Request Forgery (SSRF) vulnerability has been identified in all known existing versions of `lollms-webui`. The `@router.post("/api/proxy")` endpoint allows unauthenticated attackers to force the server into making arbitrary GET requests. This can be exploited to access internal services, scan local networks, or exfiltrate sensitive cloud metadata (e.g., AWS/GCP IAM tokens). As of time of publication, no known patched versions are available. |
| CVE-2025-40552 | Critical | 2026-01-28 | Not applicable | Working exploit published | SolarWinds Web Help Desk was found to be susceptible to an authentication bypass vulnerability that if exploited, would allow a malicious actor to execute actions and methods that should be protected by authentication. |
| CVE-2026-24128 | Medium | 2026-01-24 | Mitigation candidate | Working exploit published | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Versions 7.0-milestone-2 through 16.10.11, 17.0.0-rc-1 through 17.4.4, and 17.5.0-rc-1 through 17.7.0 contain a reflected Cross-site Scripting (XSS) vulnerability, which allows an attacker to craft a malicious URL and execute arbitrary actions with the same privileges as the victim. If the victim has administrative or programming rights, those rights can be exploited to gain full access to the XWiki installation. This issue has been patched in versions 17.8.0-rc-1, 17.4.5 and 16.10.12. To workaround, the patch can be applied manually, only a single line in templates/logging_macros.vm needs to be changed, no restart is required. |
| CVE-2025-66472 | Medium | 2025-12-10 | Mitigation candidate | Working exploit published | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Versions 6.2-milestone-1 through 16.10.9 and 17.0.0-rc-1 through 17.4.1 of both XWiki Platform Flamingo Skin Resources and XWiki Platform Web Templates are vulnerable to a reflected XSS attack through a deletion confirmation message. The attacker-supplied script is executed when the victim clicks the "No" button. This issue is fixed in versions 16.10.10 and 17.4.2 of both XWiki Platform Flamingo Skin Resources and XWiki Platform Web Templates. |
| CVE-2025-53533 | Medium | 2025-10-27 | Not applicable | Working exploit published | Pi-hole Admin Interface is a web interface for managing Pi-hole, a network-level advertisement and internet tracker blocking application. Pi-hole Admin Interface versions 6.2.1 and earlier are vulnerable to reflected cross-site scripting (XSS) via a malformed URL path. The 404 error page includes the requested path in the class attribute of the body tag without proper sanitization or escaping. An attacker can craft a URL containing an onload attribute that will execute arbitrary JavaScript code in the browser when a victim visits the malicious link. If an attacker sends a crafted pi-hole link to a victim and the victim visits it, attacker-controlled JavaScript code is executed in the browser of the victim. This has been patched in version 6.3. |
| CVE-2025-5946 | High | 2025-10-14 | Not applicable | Working exploit published | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Centreon Infra Monitoring (Poller reload setup in the configuration modules) allows OS Command Injection. On the poller parameters page, a user with high privilege is able to concatenate custom instructions into the poller reload command. This issue affects Infra Monitoring: from 24.10.0 before 24.10.13, from 24.04.0 before 24.04.18, from 23.10.0 before 23.10.28. |
| CVE-2025-41242 | Medium | 2025-08-18 | Protected by Waratek | Working exploit published | Spring Framework MVC applications can be vulnerable to a “Path Traversal Vulnerability” when deployed on a non-compliant Servlet container. An application can be vulnerable when all the following are true: * the application is deployed as a WAR or with an embedded Servlet container * the Servlet container does not reject suspicious sequences https://jakarta.ee/specifications/servlet/6.1/jakarta-servlet-spec-6.1.html#uri-path-canonicalization * the application serves static resources https://docs.spring.io/spring-framework/reference/web/webmvc/mvc-config/static-resources.html#page-title with Spring resource handling We have verified that applications deployed on Apache Tomcat or Eclipse Jetty are not vulnerable, as long as default security features are not disabled in the configuration. Because we cannot check exploits against all Servlet containers and configuration variants, we strongly recommend upgrading your application. |
| CVE-2025-4576 | Medium | 2025-08-08 | Mitigation candidate | Working exploit published | A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.0 through 7.4.3.133, and Liferay DXP 2025.Q1.0 through 2025.Q1.4 ,2024.Q4.0 through 2024.Q4.7, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.15, 7.4 GA through update 92 allows an remote non-authenticated attacker to inject JavaScript into the modules/apps/blogs/blogs-web/src/main/resources/META-INF/resources/blogs/entry_cover_image_caption.jsp |
| CVE-2025-32430 | Medium | 2025-08-06 | Mitigation candidate | Working exploit published | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In versions 4.2-milestone-3 through 16.4.7, 16.5.0-rc-1 through 16.10.5 and 17.0.0-rc-1 through 17.2.2, two templates contain reflected XSS vulnerabilities, allowing an attacker to execute malicious JavaScript code in the context of the victim's session by getting the victim to visit an attacker-controlled URL. This permits the attacker to perform arbitrary actions using the permissions of the victim. This issue is fixed in versions 16.4.8, 16.10.6 and 17.3.0-rc-1. To workaround the issue, manually patch the WAR with the same changes as the original patch. |
| CVE-2025-51502 | Medium | 2025-08-01 | Not applicable | Working exploit published | Reflected Cross-Site Scripting (XSS) in Microweber CMS 2.0 via the layout parameter on the /admin/page/create page allows arbitrary JavaScript execution in the context of authenticated admin users. |
| CVE-2025-51501 | Medium | 2025-08-01 | Not applicable | Working exploit published | Reflected Cross-Site Scripting (XSS) in the id parameter of the live_edit.module_settings API endpoint in Microweber CMS2.0 allows execution of arbitrary JavaScript. |
| CVE-2015-10137 | Critical | 2025-07-22 | Not applicable | Working exploit published | The Website Contact Form With File Upload plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'upload_file()' function in versions up to, and including, 1.3.4. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected sites server which may make remote code execution possible. |
| CVE-2025-36845 | High | 2025-07-21 | Not applicable | Working exploit published | An issue was discovered in Eveo URVE Web Manager 27.02.2025. The endpoint /_internal/redirect.php allows for Server-Side Request Forgery (SSRF). The endpoint takes a URL as input, sends a request to this address, and reflects the content in the response. This can be used to request endpoints only reachable by the application server. |
| CVE-2025-4388 | Medium | 2025-05-06 | Mitigation candidate | Working exploit published | A reflected cross-site scripting (XSS) vulnerability in the Liferay Portal 7.4.0 through 7.4.3.131, and Liferay DXP 2024.Q4.0 through 2024.Q4.5, 2024.Q3.1 through 2024.Q3.13, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.12, 7.4 GA through update 92 allows an remote non-authenticated attacker to inject JavaScript into the modules/apps/marketplace/marketplace-app-manager-web. |
| CVE-2025-28228 | High | 2025-04-18 | Not applicable | Working exploit published | A credential exposure vulnerability in Electrolink 500W, 1kW, 2kW Medium DAB Transmitter Web v01.09, v01.08, v01.07, and Display v1.4, v1.2 allows unauthorized attackers to access credentials in plaintext. |
| CVE-2024-11044 | Medium | 2025-03-20 | Not applicable | Working exploit published | An open redirect vulnerability in automatic1111/stable-diffusion-webui version 1.10.0 allows a remote unauthenticated attacker to redirect users to arbitrary websites via a specially crafted URL. This vulnerability can be exploited to conduct phishing attacks, distribute malware, and steal user credentials. |
| CVE-2024-56512 | Low | 2024-12-28 | Mitigation candidate | Working exploit published | Apache NiFi 1.10.0 through 2.0.0 are missing fine-grained authorization checking for Parameter Contexts, referenced Controller Services, and referenced Parameter Providers, when creating new Process Groups. Creating a new Process Group can include binding to a Parameter Context, but in cases where the Process Group did not reference any Parameter values, the framework did not check user authorization for the bound Parameter Context. Missing authorization for a bound Parameter Context enabled clients to download non-sensitive Parameter values after creating the Process Group. Creating a new Process Group can also include referencing existing Controller Services or Parameter Providers. The framework did not check user authorization for referenced Controller Services or Parameter Providers, enabling clients to create Process Groups and use these components that were otherwise unauthorized. This vulnerability is limited in scope to authenticated users authorized to create Process Groups. The scope is further limited to deployments with component-based authorization policies. Upgrading to Apache NiFi 2.1.0 is the recommended mitigation, which includes authorization checking for Parameter and Controller Service references on Process Group creation. |
| CVE-2024-38819 | High | 2024-12-19 | Protected by Waratek | Working exploit published | Applications serving static resources through the functional web frameworks WebMvc.fn or WebFlux.fn are vulnerable to path traversal attacks. An attacker can craft malicious HTTP requests and obtain any file on the file system that is also accessible to the process in which the Spring application is running. |
| CVE-2024-52762 | Medium | 2024-11-19 | Not applicable | Working exploit published | A cross-site scripting (XSS) vulnerability in the component /master/header.php of Ganglia-web v3.73 to v3.76 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the "tz" parameter. |
| CVE-2024-3673 | Critical | 2024-08-30 | Not applicable | Working exploit published | The Web Directory Free WordPress plugin before 1.7.3 does not validate a parameter before using it in an include(), which could lead to Local File Inclusion issues. |
| CVE-2024-41947 | Critical | 2024-07-31 | Mitigation candidate | Working exploit published | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. By creating a conflict when another user with more rights is currently editing a page, it is possible to execute JavaScript snippets on the side of the other user, which compromises the confidentiality, integrity and availability of the whole XWiki installation. This has been patched in XWiki 15.10.8 and 16.3.0RC1. |
| CVE-2024-38773 | Critical | 2024-07-22 | Not applicable | Working exploit published | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Adrian Tobey FormLift for Infusionsoft Web Forms allows Blind SQL Injection.This issue affects FormLift for Infusionsoft Web Forms: from n/a through 7.5.17. |
| CVE-2024-3552 | Critical | 2024-06-13 | Not applicable | Working exploit published | The Web Directory Free WordPress plugin before 1.7.0 does not sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection with different techniques like UNION, Time-Based and Error-Based. |
| CVE-2024-4322 | High | 2024-05-16 | Not applicable | Working exploit published | A path traversal vulnerability exists in the parisneo/lollms-webui application, specifically within the `/list_personalities` endpoint. By manipulating the `category` parameter, an attacker can traverse the directory structure and list any directory on the system. This issue affects the latest version of the application. The vulnerability is due to improper handling of user-supplied input in the `list_personalities` function, where the `category` parameter can be controlled to specify arbitrary directories for listing. Successful exploitation of this vulnerability could allow an attacker to list all folders in the drive on the system, potentially leading to information disclosure. |
| CVE-2024-24131 | Medium | 2024-02-07 | Not applicable | Working exploit published | SuperWebMailer v9.31.0.01799 was discovered to contain a reflected cross-site scripting (XSS) vulenrability via the component api.php. |
| CVE-2023-40355 | Medium | 2024-02-07 | Not applicable | Working exploit published | Cross Site Scripting (XSS) vulnerability in Axigen versions 10.3.3.0 before 10.3.3.59, 10.4.0 before 10.4.19, and 10.5.0 before 10.5.5, allows authenticated attackers to execute arbitrary code and obtain sensitive information via the logic for switching between the Standard and Ajax versions. |
| CVE-2023-7116 | Critical | 2023-12-27 | Not applicable | Working exploit published | A vulnerability, which was classified as critical, has been found in WeiYe-Jing datax-web 2.1.2. Affected by this issue is some unknown functionality of the file /api/log/killJob of the component HTTP POST Request Handler. The manipulation of the argument processId leads to os command injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-249086 is the identifier assigned to this vulnerability. |
| CVE-2023-6065 | Medium | 2023-12-18 | Not applicable | Working exploit published | The Quttera Web Malware Scanner WordPress plugin before 3.4.2.1 doesn't restrict access to detailed scan logs, which allows a malicious actor to discover local paths and portions of the site's code |
| CVE-2023-45136 | Critical | 2023-10-25 | Mitigation candidate | Working exploit published | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. When document names are validated according to a name strategy (disabled by default), XWiki starting in version 12.0-rc-1 and prior to versions 12.10.12 and 15.5-rc-1 is vulnerable to a reflected cross-site scripting attack in the page creation form. This allows an attacker to execute arbitrary actions with the rights of the user opening the malicious link. Depending on the rights of the user, this may allow remote code execution and full read and write access to the whole XWiki installation. This has been patched in XWiki 14.10.12 and 15.5-rc-1 by adding appropriate escaping. The vulnerable template file `createinline.vm` is part of XWiki's WAR and can be patched by manually applying the changes from the fix. |
| CVE-2023-38194 | Medium | 2023-10-21 | Not applicable | Working exploit published | An issue was discovered in SuperWebMailer 9.00.0.01710. It allows keepalive.php XSS via a GET parameter. |
| CVE-2023-5244 | Medium | 2023-09-28 | Not applicable | Working exploit published | Cross-site Scripting (XSS) - Reflected in GitHub repository microweber/microweber prior to 2.0. |
| CVE-2023-39598 | Medium | 2023-09-05 | Not applicable | Working exploit published | Cross Site Scripting vulnerability in IceWarp Corporation WebClient v.10.2.1 allows a remote attacker to execute arbitrary code via a crafted payload to the mid parameter. |
| CVE-2023-39141 | High | 2023-08-22 | Not applicable | Working exploit published | webui-aria2 commit 4fe2e was discovered to contain a path traversal vulnerability. |
| CVE-2023-40315 | High | 2023-08-17 | Mitigation candidate | Working exploit published | In OpenMNS Horizon 31.0.8 and versions earlier than 32.0.2 and related Meridian versions, any user that has the ROLE_FILESYSTEM_EDITOR can easily escalate their privileges to ROLE_ADMIN or any other role. The solution is to upgrade to Meridian 2023.1.5 or Horizon 32.0.2 or newer. Meridian and Horizon installation instructions state that they are intended for installation within an organization's private networks and should not be directly accessible from the Internet. OpenNMS thanks Erik Wynter for reporting this issue. |
| CVE-2023-39115 | Critical | 2023-08-16 | Not applicable | Working exploit published | install/aiz-uploader/upload in Campcodes Online Matrimonial Website System Script 3.3 allows XSS via a crafted SVG document. |
| CVE-2023-0872 | High | 2023-08-14 | Mitigation candidate | Working exploit published | The Horizon REST API includes a users endpoint in OpenMNS Horizon 31.0.8 and versions earlier than 32.0.2 on multiple platforms is vulnerable to elevation of privilege. The solution is to upgrade to Meridian 2023.1.6, 2022.1.19, 2021.1.30, 2020.1.38 or Horizon 32.0.2 or newer. Meridian and Horizon installation instructions state that they are intended for installation within an organization's private networks and should not be directly accessible from the Internet. OpenNMS thanks Erik Wynter for reporting this issue. |
| CVE-2022-4953 | Medium | 2023-08-14 | Not applicable | Working exploit published | The Elementor Website Builder WordPress plugin before 3.5.5 does not filter out user-controlled URLs from being loaded into the DOM. This could be used to inject rogue iframes that point to malicious URLs. |
| CVE-2023-35160 | Critical | 2023-06-23 | Mitigation candidate | Working exploit published | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Users are able to forge an URL with a payload allowing to inject Javascript in the page (XSS). It's possible to exploit the resubmit template to perform a XSS, e.g. by using URL such as: > xwiki/bin/view/XWiki/Main xpage=resubmit&resubmit=javascript:alert(document.domain)&xback=javascript:alert(document.domain). This vulnerability exists since XWiki 2.5-milestone-2. The vulnerability has been patched in XWiki 14.10.5 and 15.1-rc-1. |
| CVE-2023-35159 | Critical | 2023-06-23 | Mitigation candidate | Working exploit published | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Users are able to forge an URL with a payload allowing to inject Javascript in the page (XSS). It's possible to exploit the deletespace template to perform a XSS, e.g. by using URL such as: > xwiki/bin/deletespace/Sandbox/?xredirect=javascript:alert(document.domain). This vulnerability exists since XWiki 3.4-milestone-1. The vulnerability has been patched in XWiki 14.10.5 and 15.1-rc-1. |
| CVE-2023-23956 | Medium | 2023-05-30 | Not applicable | Working exploit published | A user can supply malicious HTML and JavaScript code that will be executed in the client browser |
| CVE-2023-1258 | Medium | 2023-03-31 | Not applicable | Working exploit published | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in ABB Flow-X firmware on Flow-X embedded hardware (web service modules) allows Footprinting.This issue affects Flow-X: before 4.0. |
| CVE-2023-23399 | High | 2023-03-14 | Not applicable | Working exploit published | Microsoft Excel Remote Code Execution Vulnerability |
| CVE-2023-22432 | Medium | 2023-03-06 | Not applicable | Working exploit published | Open redirect vulnerability exists in web2py versions prior to 2.23.1. When using the tool, a web2py user may be redirected to an arbitrary website by accessing a specially crafted URL. As a result, the user may become a victim of a phishing attack. |
| CVE-2023-0214 | Medium | 2023-01-18 | Not applicable | Working exploit published | A cross-site scripting vulnerability in Skyhigh SWG in main releases 11.x prior to 11.2.6, 10.x prior to 10.2.17, and controlled release 12.x prior to 12.0.1 allows a remote attacker to craft SWG-specific internal requests with URL paths to any third-party website, causing arbitrary content to be injected into the response when accessed through SWG. |
| CVE-2022-44957 | Medium | 2022-12-02 | Not applicable | Working exploit published | webtareas 2.4p5 was discovered to contain a cross-site scripting (XSS) vulnerability in the component /clients/listclients.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name field. |
| CVE-2022-44291 | Critical | 2022-12-02 | Not applicable | Working exploit published | webTareas 2.4p5 was discovered to contain a SQL injection vulnerability via the id parameter in phasesets.php. |
| CVE-2022-44290 | Critical | 2022-12-02 | Not applicable | Working exploit published | webTareas 2.4p5 was discovered to contain a SQL injection vulnerability via the id parameter in deleteapprovalstages.php. |
| CVE-2022-42118 | Medium | 2022-11-15 | Mitigation candidate | Working exploit published | A Cross-site scripting (XSS) vulnerability in the Portal Search module in Liferay Portal 7.1.0 through 7.4.2, and Liferay DXP 7.1 before fix pack 27, 7.2 before fix pack 15, and 7.3 before service pack 3 allows remote attackers to inject arbitrary web script or HTML via the `tag` parameter. |
| CVE-2022-3242 | Medium | 2022-09-20 | Not applicable | Working exploit published | Code Injection in GitHub repository microweber/microweber prior to 1.3.2. |
| CVE-2022-37122 | High | 2022-08-31 | Not applicable | Working exploit published | Carel pCOWeb HVAC BACnet Gateway 2.1.0, Firmware: A2.1.0 - B2.1.0, Application Software: 2.15.4A Software v16 13020200 suffers from an unauthenticated arbitrary file disclosure vulnerability. Input passed through the 'file' GET parameter through the 'logdownload.cgi' Bash script is not properly verified before being used to download log files. This can be exploited to disclose the contents of arbitrary and sensitive files via directory traversal attacks. |
| CVE-2022-35493 | Medium | 2022-08-08 | Not applicable | Working exploit published | A Cross-site scripting (XSS) vulnerability in json search parse and the json response in wrteam.in, eShop - Multipurpose Ecommerce Store Website version 3.0.4 allows remote attackers to inject arbitrary web script or HTML via the get_products?search parameter. |
| CVE-2022-36446 | Critical | 2022-07-25 | Not applicable | Working exploit published | software/apt-lib.pl in Webmin before 1.997 lacks HTML escaping for a UI command. |
| CVE-2022-2174 | Medium | 2022-06-22 | Not applicable | Working exploit published | Cross-site Scripting (XSS) - Reflected in GitHub repository microweber/microweber prior to 1.2.18. |
| CVE-2022-2130 | Medium | 2022-06-20 | Not applicable | Working exploit published | Cross-site Scripting (XSS) - Reflected in GitHub repository microweber/microweber prior to 1.2.17. |
| CVE-2022-29455 | Medium | 2022-06-13 | Not applicable | Working exploit published | DOM-based Reflected Cross-Site Scripting (XSS) vulnerability in Elementor's Elementor Website Builder plugin <= 3.5.5 versions. |
| CVE-2022-31470 | Medium | 2022-06-07 | Not applicable | Working exploit published | An XSS vulnerability in the index_mobile_changepass.hsp reset-password section of Axigen Mobile WebMail before 10.2.3.12 and 10.3.x before 10.3.3.47 allows attackers to run arbitrary Javascript code that, using an active end-user session (for a logged-in user), can access and retrieve mailbox content. |
| CVE-2022-1631 | High | 2022-05-09 | Not applicable | Working exploit published | Users Account Pre-Takeover or Users Account Takeover. in GitHub repository microweber/microweber prior to 1.2.15. Victim Account Take Over. Since, there is no email confirmation, an attacker can easily create an account in the application using the Victim’s Email. This allows an attacker to gain pre-authentication to the victim’s account. Further, due to the lack of proper validation of email coming from Social Login and failing to check if an account already exists, the victim will not identify if an account is already existing. Hence, the attacker’s persistence will remain. An attacker would be able to see all the activities performed by the victim user impacting the confidentiality and attempt to modify/corrupt the data impacting the integrity and availability factor. This attack becomes more interesting when an attacker can register an account from an employee’s email address. Assuming the organization uses G-Suite, it is much more impactful to hijack into an employee’s account. |
| CVE-2021-43481 | Critical | 2022-04-20 | Not applicable | Working exploit published | An SQL Injection vulnerability exists in Webtareas 2.4p3 and earlier via the $uq HTTP POST parameter in editapprovalstage.php. |
| CVE-2022-24819 | Medium | 2022-04-08 | Mitigation candidate | Working exploit published | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. A guest user without the right to view pages of the wiki can still list documents related to users of the wiki. The problem has been patched in XWiki versions 12.10.11, 13.4.4, and 13.9-rc-1. There is no known workaround for this problem. |
| CVE-2022-1163 | Medium | 2022-03-30 | Not applicable | Working exploit published | Cross-site Scripting (XSS) - Stored in GitHub repository mineweb/minewebcms prior to next. |
| CVE-2021-43725 | Medium | 2022-03-28 | Not applicable | Working exploit published | There is a Cross Site Scripting (XSS) vulnerability in SpotPage_login.php of Spotweb 1.5.1 and below, which allows remote attackers to inject arbitrary web script or HTML via the data[performredirect] parameter. |
| CVE-2021-43650 | Critical | 2022-03-22 | Not applicable | Working exploit published | WebRun 3.6.0.42 is vulnerable to SQL Injection via the P_0 parameter used to set the username during the login process. |
| CVE-2022-0968 | Medium | 2022-03-15 | Not applicable | Working exploit published | The microweber application allows large characters to insert in the input field "fist & last name" which can allow attackers to cause a Denial of Service (DoS) via a crafted HTTP request. in microweber/microweber in GitHub repository microweber/microweber prior to 1.2.12. |
| CVE-2022-0963 | Medium | 2022-03-15 | Not applicable | Working exploit published | Unrestricted XML Files Leads to Stored XSS in GitHub repository microweber/microweber prior to 1.2.12. |
| CVE-2022-0954 | Medium | 2022-03-15 | Not applicable | Working exploit published | Multiple Stored Cross-site Scripting (XSS) Vulnerabilities in Shop's Other Settings, Shop's Autorespond E-mail Settings and Shops' Payments Methods in GitHub repository microweber/microweber prior to 1.2.11. |
| CVE-2022-0928 | Medium | 2022-03-11 | Not applicable | Working exploit published | Cross-site Scripting (XSS) - Stored in GitHub repository microweber/microweber prior to 1.2.12. |
| CVE-2022-24715 | High | 2022-03-08 | Not applicable | Working exploit published | Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. Authenticated users, with access to the configuration, can create SSH resource files in unintended directories, leading to the execution of arbitrary code. This issue has been resolved in versions 2.8.6, 2.9.6 and 2.10 of Icinga Web 2. Users unable to upgrade should limit access to the Icinga Web 2 configuration. |
| CVE-2022-0824 | High | 2022-03-02 | Not applicable | Working exploit published | Improper Access Control to Remote Code Execution in GitHub repository webmin/webmin prior to 1.990. |
| CVE-2022-25359 | Critical | 2022-02-26 | Not applicable | Working exploit published | On ICL ScadaFlex II SCADA Controller SC-1 and SC-2 1.03.07 devices, unauthenticated remote attackers can overwrite, delete, or create files. |
| CVE-2022-0678 | Medium | 2022-02-19 | Not applicable | Working exploit published | Cross-site Scripting (XSS) - Reflected in Packagist microweber/microweber prior to 1.2.11. |
| CVE-2022-25323 | Medium | 2022-02-18 | Not applicable | Working exploit published | ZEROF Web Server 2.0 allows /admin.back XSS. |
| CVE-2022-0666 | High | 2022-02-18 | Not applicable | Working exploit published | CRLF Injection leads to Stack Trace Exposure due to lack of filtering at https://demo.microweber.org/ in Packagist microweber/microweber prior to 1.2.11. |
| CVE-2022-0660 | High | 2022-02-18 | Not applicable | Working exploit published | Generation of Error Message Containing Sensitive Information in Packagist microweber/microweber prior to 1.2.11. |
| CVE-2022-0597 | Medium | 2022-02-15 | Not applicable | Working exploit published | Open Redirect in Packagist microweber/microweber prior to 1.2.11. |
| CVE-2022-0557 | High | 2022-02-11 | Not applicable | Working exploit published | OS Command Injection in Packagist microweber/microweber prior to 1.2.11. |
| CVE-2022-0378 | Medium | 2022-01-26 | Not applicable | Working exploit published | Cross-site Scripting (XSS) - Reflected in Packagist microweber/microweber prior to 1.2.11. |
| CVE-2021-25074 | Medium | 2022-01-24 | Not applicable | Working exploit published | The WebP Converter for Media WordPress plugin before 4.0.3 contains a file (passthru.php) which does not validate the src parameter before redirecting the user to it, leading to an Open Redirect issue |
| CVE-2022-0281 | High | 2022-01-20 | Not applicable | Working exploit published | Exposure of Sensitive Information to an Unauthorized Actor in Packagist microweber/microweber prior to 1.2.11. |
| CVE-2021-46104 | High | 2022-01-19 | Not applicable | Working exploit published | An issue was discovered in webp_server_go 0.4.0. There is a directory traversal vulnerability that can read arbitrary file information on the server. |
| CVE-2021-24891 | Medium | 2021-11-23 | Not applicable | Working exploit published | The Elementor Website Builder WordPress plugin before 3.4.8 does not sanitise or escape user input appended to the DOM via a malicious hash, resulting in a DOM Cross-Site Scripting issue. |
| CVE-2021-43140 | Critical | 2021-11-03 | Not applicable | Working exploit published | SQL Injection vulnerability exists in Sourcecodester. Simple Subscription Website 1.0. via the login. |
| CVE-2021-31682 | Medium | 2021-10-22 | Not applicable | Working exploit published | The login portal for the Automated Logic WebCTRL/WebCTRL OEM web application contains a vulnerability that allows for reflected XSS attacks due to the operatorlocale GET parameter not being sanitized. This issue impacts versions 6.5 and below. This issue works by passing in a basic XSS payload to a vulnerable GET parameter that is reflected in the output without sanitization. |
| CVE-2021-40973 | Medium | 2021-10-01 | Not applicable | Working exploit published | Cross-site scripting (XSS) vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below allow remote attackers to inject arbitrary web script or HTML via the lastname parameter. |
| CVE-2021-40972 | Medium | 2021-10-01 | Not applicable | Working exploit published | Cross-site scripting (XSS) vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below allow remote attackers to inject arbitrary web script or HTML via the mail parameter. |
| CVE-2021-40971 | Medium | 2021-10-01 | Not applicable | Working exploit published | Cross-site scripting (XSS) vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below allow remote attackers to inject arbitrary web script or HTML via the newpassword1 parameter. |
| CVE-2021-40970 | Medium | 2021-10-01 | Not applicable | Working exploit published | Cross-site scripting (XSS) vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below allow remote attackers to inject arbitrary web script or HTML via the username parameter. |
| CVE-2021-40969 | Medium | 2021-10-01 | Not applicable | Working exploit published | Cross-site scripting (XSS) vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below allow remote attackers to inject arbitrary web script or HTML via the firstname parameter. |
| CVE-2021-40968 | Medium | 2021-10-01 | Not applicable | Working exploit published | Cross-site scripting (XSS) vulnerability in templates/installer/step-004.inc.php in spotweb 1.5.1 and below allow remote attackers to inject arbitrary web script or HTML via the newpassword2 parameter. |
| CVE-2021-40960 | Critical | 2021-10-01 | Not applicable | Working exploit published | Galera WebTemplate 1.0 is affected by a directory traversal vulnerability that could reveal information from /etc/passwd and /etc/shadow. |
| CVE-2021-39146 | High | 2021-08-23 | Mitigation candidate | Working exploit published | XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who followed the recommendation to setup XStream's security framework with a whitelist limited to the minimal required types. XStream 1.4.18 uses no longer a blacklist by default, since it cannot be secured for general purpose. |
| CVE-2021-39141 | High | 2021-08-23 | Mitigation candidate | Working exploit published | XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who followed the recommendation to setup XStream's security framework with a whitelist limited to the minimal required types. XStream 1.4.18 uses no longer a blacklist by default, since it cannot be secured for general purpose. |
| CVE-2021-37573 | Medium | 2021-08-09 | Not applicable | Working exploit published | A reflected cross-site scripting (XSS) vulnerability in the web server TTiny Java Web Server and Servlet Container (TJWS) <=1.115 allows an adversary to inject malicious code on the server's "404 Page not Found" error page |
| CVE-2021-31642 | Medium | 2021-06-01 | Not applicable | Working exploit published | A denial of service condition exists after an integer overflow in several IoT devices from CHIYU Technology, including BIOSENSE, Webpass, and BF-630, BF-631, and SEMAC. The vulnerability can be explored by sending an unexpected integer (> 32 bits) on the page parameter that will crash the web portal and making it unavailable until a reboot of the device. |
| CVE-2021-29505 | High | 2021-05-28 | Mitigation candidate | Working exploit published | XStream is software for serializing Java objects to XML and back again. A vulnerability in XStream versions prior to 1.4.17 may allow a remote attacker has sufficient rights to execute commands of the host only by manipulating the processed input stream. No user who followed the recommendation to setup XStream's security framework with a whitelist limited to the minimal required types is affected. The vulnerability is patched in version 1.4.17. |
| CVE-2021-31324 | Critical | 2021-05-18 | Not applicable | Working exploit published | The unprivileged user portal part of CentOS Web Panel is affected by a Command Injection vulnerability leading to root Remote Code Execution. |