Overview 287 matches · 17 in Waratek scope · 11 protected · 10 exploited · 1 CISA KEV · 28 public PoC · 8 EPSS ≥ 0.5
287matches
17in Waratek scope5.9%
11protected3.8%
10exploited3.5%
1CISA KEV0.3%
28public PoC9.8%
8EPSS ≥ 0.52.8%
Protected by Waratek
11
3.8%
Rule in development
0
0.0%
Mitigation candidate
1
0.3%
No exploit published
5
1.7%
Outside Waratek scope
0
0.0%
Not applicable
270
94.1%
Withdrawn CVE
0
0.0%
blocked by ARMR today
11
3.8%
partly blocked
0
0.0%
not blocked
276
96.2%
not established
0
0.0%
unrecorded
0
0.0%
split by
peak 41 / year
19971
Not applicable1
High1
not blocked1
No public exploit1
19980
19993
Not applicable3
High2
Medium1
not blocked3
No public exploit3
20006
Not applicable6
High3
Medium2
Low1
not blocked6
Working exploit published3
No public exploit3
20011
Not applicable1
Medium1
not blocked1
Forecast only1
200216
Not applicable16
High9
Medium7
not blocked16
Working exploit published3
No public exploit13
20039
Not applicable9
High5
Medium4
not blocked9
Exploited2
Working exploit published4
No public exploit3
20041
Not applicable1
Medium1
not blocked1
No public exploit1
20058
Not applicable8
High4
Medium4
not blocked8
Working exploit published1
No public exploit7
20063
Not applicable3
High2
Medium1
not blocked3
Working exploit published1
No public exploit2
20073
Not applicable3
High3
not blocked3
No public exploit3
20083
Not applicable3
Medium3
not blocked3
No public exploit3
20091
Not applicable1
High1
not blocked1
Working exploit published1
20100
20113
Not applicable3
Medium3
not blocked3
Working exploit published2
No public exploit1
20123
Not applicable3
High1
Medium1
Low1
not blocked3
No public exploit3
20134
Not applicable4
High4
not blocked4
No public exploit4
201410
Not applicable10
High6
Medium3
Low1
not blocked10
Working exploit published1
No public exploit9
20151
Not applicable1
High1
not blocked1
No public exploit1
20160
20178
Not applicable8
High5
Medium3
not blocked8
Working exploit published1
No public exploit7
20181
Not applicable1
Medium1
not blocked1
No public exploit1
20197
Not applicable7
High4
Medium3
not blocked7
Exploited1
No public exploit6
202015
Not applicable15
Critical4
High5
Medium6
not blocked15
Working exploit published2
No public exploit13
202127
No exploit published2
Not applicable25
Critical11
High10
Medium6
not blocked27
Exploited3
Working exploit published1
No public exploit23
202228
Not applicable28
Critical5
High12
Medium11
not blocked28
Proof of concept only2
No public exploit26
202333
Mitigation candidate1
Not applicable32
Critical6
High12
Medium14
Low1
not blocked33
Exploited2
Proof of concept only5
No public exploit26
202441
Protected by Waratek1
No exploit published1
Not applicable39
Critical4
High9
Medium28
blocked by ARMR today1
not blocked40
Exploited2
Proof of concept only12
No public exploit27
202528
Not applicable28
Critical8
High4
Medium16
not blocked28
Proof of concept only10
No public exploit18
202623
Protected by Waratek10
No exploit published2
Not applicable11
Critical6
High9
Medium6
Low2
blocked by ARMR today10
not blocked13
Proof of concept only8
No public exploit15
1999200220052008201120142017202020232026
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2023-6133 | Medium | 2023-11-15 | Not applicable | No public exploit | The Forminator plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient blacklisting on the 'forminator_allowed_mime_types' function in versions up to, and including, 1.27.0. This makes it possible for authenticated attackers with administrator-level capabilities or above to upload arbitrary files on the affected site's server, but due to the htaccess configuration, remote code cannot be executed. |
| CVE-2023-46963 | Medium | 2023-11-04 | Not applicable | Proof of concept only | An issue in Beijing Yunfan Internet Technology Co., Ltd, Yunfan Learning Examination System v.6.5 allows a remote attacker to obtain sensitive information via the password parameter in the login function. |
| CVE-2023-45111 | Critical | 2023-11-02 | Not applicable | Proof of concept only | Online Examination System v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'email' parameter of the feed.php resource does not validate the characters received and they are sent unfiltered to the database. |
| CVE-2023-45203 | Medium | 2023-11-01 | Not applicable | No public exploit | Online Examination System v1.0 is vulnerable to multiple Open Redirect vulnerabilities. The 'q' parameter of the login.php resource allows an attacker to redirect a victim user to an arbitrary web site using a crafted URL. |
| CVE-2023-45202 | Medium | 2023-11-01 | Not applicable | No public exploit | Online Examination System v1.0 is vulnerable to multiple Open Redirect vulnerabilities. The 'q' parameter of the feed.php resource allows an attacker to redirect a victim user to an arbitrary web site using a crafted URL. |
| CVE-2023-45201 | Medium | 2023-11-01 | Not applicable | No public exploit | Online Examination System v1.0 is vulnerable to multiple Open Redirect vulnerabilities. The 'q' parameter of the admin.php resource allows an attacker to redirect a victim user to an arbitrary web site using a crafted URL. |
| CVE-2023-29484 | Medium | 2023-10-16 | Not applicable | No public exploit | In Terminalfour before 8.3.16, misconfigured LDAP users are able to login with an invalid password. |
| CVE-2023-44487 | High | 2023-10-10 | Mitigation candidate | Exploited | The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023. |
| CVE-2023-4596 | Critical | 2023-08-30 | Not applicable | Exploited | The Forminator plugin for WordPress is vulnerable to arbitrary file uploads due to file type validation occurring after a file has been uploaded to the server in the upload_post_image() function in versions up to, and including, 1.24.6. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible. |
| CVE-2023-3134 | Medium | 2023-07-31 | Not applicable | No public exploit | The Forminator WordPress plugin before 1.24.4 does not properly escape values that are being reflected inside form fields that use pre-populated query parameters, which could lead to reflected XSS attacks. |
| CVE-2021-4417 | Medium | 2023-07-12 | Not applicable | No public exploit | The Forminator – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.13.4. This is due to missing or incorrect nonce validation on the listen_for_saving_export_schedule() function. This makes it possible for unauthenticated attackers to export form submissions via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. |
| CVE-2023-36256 | Medium | 2023-07-07 | Not applicable | Proof of concept only | The Online Examination System Project 1.0 version is vulnerable to Cross-Site Request Forgery (CSRF) attacks. An attacker can craft a malicious link that, when clicked by an admin user, will delete a user account from the database without the admin's consent. The email of the user to be deleted is passed as a parameter in the URL, which can be manipulated by the attacker. This could result in a loss of data. |
| CVE-2023-2010 | Low | 2023-07-04 | Not applicable | Proof of concept only | The Forminator WordPress plugin before 1.24.1 does not use an atomic operation to check whether a user has already voted, and then update that information. This leads to a Race Condition that may allow a single user to vote multiple times on a poll. |
| CVE-2023-1049 | High | 2023-06-14 | Not applicable | No public exploit | A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that could cause execution of malicious code when an unsuspicious user loads a project file from the local filesystem into the HMI. |
| CVE-2023-1508 | Critical | 2023-05-23 | Not applicable | No public exploit | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Adam Retail Automation Systems Mobilmen Terminal Software allows SQL Injection. This issue affects Mobilmen Terminal Software: before 3. |
| CVE-2023-29530 | High | 2023-04-24 | Not applicable | No public exploit | Laminas Diactoros provides PSR HTTP Message implementations. In versions 2.18.0 and prior, 2.19.0, 2.20.0, 2.21.0, 2.22.0, 2.23.0, 2.24.0, and 2.25.0, users who create HTTP requests or responses using laminas/laminas-diactoros, when providing a newline at the start or end of a header key or value, can cause an invalid message. This can lead to denial of service vectors or application errors. The problem has been patched in following versions 2.18.1, 2.19.1, 2.20.1, 2.21.1, 2.22.1, 2.23.1, 2.24.1, and 2.25.1. As a workaround, validate HTTP header keys and/or values, and if using user-supplied values, filter them to strip off leading or trailing newline characters before calling `withHeader()`. |
| CVE-2023-1863 | Critical | 2023-04-14 | Not applicable | No public exploit | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Eskom Water Metering Software allows Command Line Execution through SQL Injection. This issue affects Water Metering Software: before 23.04.06. |
| CVE-2023-23591 | Medium | 2023-04-12 | Not applicable | No public exploit | The Logback component in Terminalfour before 8.3.14.1 allows OS administrators to obtain sensitive information from application server logs when debug logging is enabled. The fixed versions are 8.2.18.7, 8.2.18.2.2, 8.3.11.1, and 8.3.14.1. |
| CVE-2021-36821 | High | 2023-03-16 | Not applicable | No public exploit | Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WPMU DEV Forminator allows Stored XSS.This issue affects Forminator: from n/a through 1.14.11. |
| CVE-2023-23558 | Medium | 2023-02-16 | Not applicable | Proof of concept only | In Eternal Terminal 6.2.1, TelemetryService uses fixed paths in /tmp. For example, a local attacker can create /tmp/.sentry-native-etserver with mode 0777 before the etserver process is started. The attacker can choose to read sensitive information from that file, or modify the information in that file. |
| CVE-2022-48258 | Medium | 2023-01-13 | Not applicable | No public exploit | In Eternal Terminal 6.2.1, etserver and etclient have world-readable logfiles. |
| CVE-2022-48257 | Medium | 2023-01-13 | Not applicable | No public exploit | In Eternal Terminal 6.2.1, etserver and etclient have predictable logfile names in /tmp. |
| CVE-2014-125076 | Critical | 2023-01-11 | Not applicable | No public exploit | A vulnerability was found in NoxxieNl Criminals. It has been classified as critical. Affected is an unknown function of the file ingame/roulette.php. The manipulation of the argument gambleMoney leads to sql injection. The patch is identified as 0a60b31271d4cbf8babe4be993d2a3a1617f0897. It is recommended to apply a patch to fix this issue. VDB-218022 is the identifier assigned to this vulnerability. |
| CVE-2022-3792 | Critical | 2023-01-10 | Not applicable | No public exploit | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in GullsEye GullsEye terminal operating system allows SQL Injection. This issue affects GullsEye terminal operating system: from unspecified before 5.0.13. |
| CVE-2021-4306 | High | 2023-01-07 | Not applicable | No public exploit | A vulnerability classified as problematic has been found in cronvel terminal-kit up to 2.1.7. Affected is an unknown function. The manipulation leads to inefficient regular expression complexity. Upgrading to version 2.1.8 is able to address this issue. The name of the patch is a2e446cc3927b559d0281683feb9b821e83b758c. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-217620. |
| CVE-2022-30260 | High | 2022-12-26 | Not applicable | No public exploit | Emerson DeltaV Distributed Control System (DCS) has insufficient verification of firmware integrity (an inadequate checksum approach, and no signature). This affects versions before 14.3 of DeltaV M-series, DeltaV S-series, DeltaV P-series, DeltaV SIS, and DeltaV CIOC/EIOC/WIOC IO cards. |
| CVE-2022-44702 | High | 2022-12-13 | Not applicable | No public exploit | Windows Terminal Remote Code Execution Vulnerability |
| CVE-2022-41671 | High | 2022-11-04 | Not applicable | No public exploit | A CWE-89: Improper Neutralization of Special Elements used in SQL Command (‘SQL Injection’) vulnerability exists that allows adversaries with local user privileges to craft a malicious SQL query and execute as part of project migration which could result in execution of malicious code. Affected Products: EcoStruxure Operator Terminal Expert(V3.3 Hotfix 1 or prior), Pro-face BLUE(V3.3 Hotfix1 or prior). |
| CVE-2022-41670 | High | 2022-11-04 | Not applicable | No public exploit | A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in the SGIUtility component that allows adversaries with local user privileges to load malicious DLL which could result in execution of malicious code. Affected Products: EcoStruxure Operator Terminal Expert(V3.3 Hotfix 1 or prior), Pro-face BLUE(V3.3 Hotfix1 or prior). |
| CVE-2022-41669 | High | 2022-11-04 | Not applicable | No public exploit | A CWE-347: Improper Verification of Cryptographic Signature vulnerability exists in the SGIUtility component that allows adversaries with local user privileges to load a malicious DLL which could result in execution of malicious code. Affected Products: EcoStruxure Operator Terminal Expert(V3.3 Hotfix 1 or prior), Pro-face BLUE(V3.3 Hotfix1 or prior). |
| CVE-2022-41668 | High | 2022-11-04 | Not applicable | No public exploit | A CWE-704: Incorrect Project Conversion vulnerability exists that allows adversaries with local user privileges to load a project file from an adversary-controlled network share which could result in execution of malicious code. Affected Products: EcoStruxure Operator Terminal Expert(V3.3 Hotfix 1 or prior), Pro-face BLUE(V3.3 Hotfix1 or prior). |
| CVE-2022-41667 | High | 2022-11-04 | Not applicable | No public exploit | A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that allows adversaries with local user privileges to load a malicious DLL which could lead to execution of malicious code. Affected Products: EcoStruxure Operator Terminal Expert(V3.3 Hotfix 1 or prior), Pro-face BLUE(V3.3 Hotfix1 or prior). |
| CVE-2022-41666 | High | 2022-11-04 | Not applicable | No public exploit | A CWE-347: Improper Verification of Cryptographic Signature vulnerability exists that allows adversaries with local user privileges to load a malicious DLL which could lead to execution of malicious code. Affected Products: EcoStruxure Operator Terminal Expert(V3.3 Hotfix 1 or prior), Pro-face BLUE(V3.3 Hotfix1 or prior). |
| CVE-2022-42066 | Medium | 2022-10-14 | Not applicable | Proof of concept only | Online Examination System version 1.0 suffers from a cross site scripting vulnerability via index.php. |
| CVE-2022-3268 | Critical | 2022-09-22 | Not applicable | No public exploit | Weak Password Requirements in GitHub repository ikus060/minarca prior to 4.2.2. |
| CVE-2022-3251 | Medium | 2022-09-21 | Not applicable | Proof of concept only | Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository ikus060/minarca prior to 4.2.2. |
| CVE-2022-24952 | Medium | 2022-08-16 | Not applicable | No public exploit | Several denial of service vulnerabilities exist in Eternal Terminal prior to version 6.2.0, including a DoS triggered remotely by an invalid sequence number and a local bug triggered by invalid input sent directly to the IPC socket. |
| CVE-2022-24951 | High | 2022-08-16 | Not applicable | No public exploit | A race condition exists in Eternal Terminal prior to version 6.2.0 which allows a local attacker to hijack Eternal Terminal's IPC socket, enabling access to Eternal Terminal clients which attempt to connect in the future. |
| CVE-2022-24950 | High | 2022-08-16 | Not applicable | No public exploit | A race condition exists in Eternal Terminal prior to version 6.2.0 that allows an authenticated attacker to hijack other users' SSH authorization socket, enabling the attacker to login to other systems as the targeted users. The bug is in UserTerminalRouter::getInfoForId(). |
| CVE-2022-24949 | High | 2022-08-16 | Not applicable | No public exploit | A privilege escalation to root exists in Eternal Terminal prior to version 6.2.0. This is due to the combination of a race condition, buffer overflow, and logic bug all in PipeSocketHandler::listen(). |
| CVE-2022-31109 | High | 2022-08-01 | Not applicable | No public exploit | laminas-diactoros is a PHP package containing implementations of the PSR-7 HTTP message interfaces and PSR-17 HTTP message factory interfaces. Applications that use Diactoros, and are either not behind a proxy, or can be accessed via untrusted proxies, can potentially have the host, protocol, and/or port of a `Laminas\Diactoros\Uri` instance associated with the incoming server request modified to reflect values from `X-Forwarded-*` headers. Such changes can potentially lead to XSS attacks (if a fully-qualified URL is used in links) and/or URL poisoning. Since the `X-Forwarded-*` headers do have valid use cases, particularly in clustered environments using a load balancer, the library offers mitigation measures only in the v2 releases, as doing otherwise would break these use cases immediately. Users of v2 releases from 2.11.1 can provide an additional argument to `Laminas\Diactoros\ServerRequestFactory::fromGlobals()` in the form of a `Laminas\Diactoros\RequestFilter\RequestFilterInterface` instance, including the shipped `Laminas\Diactoros\RequestFilter\NoOpRequestFilter` implementation which ignores the `X-Forwarded-*` headers. Starting in version 3.0, the library will reverse behavior to use the `NoOpRequestFilter` by default, and require users to opt-in to `X-Forwarded-*` header usage via a configured `Laminas\Diactoros\RequestFilter\LegacyXForwardedHeaderFilter` instance. Users are advised to upgrade to version 2.11.1 or later to resolve this issue. Users unable to upgrade may configure web servers to reject `X-Forwarded-*` headers at the web server level. |
| CVE-2022-29965 | Medium | 2022-07-26 | Not applicable | No public exploit | The Emerson DeltaV Distributed Control System (DCS) controllers and IO cards through 2022-04-29 misuse passwords. Access to privileged operations on the maintenance port TELNET interface (23/TCP) on M-series and SIS (CSLS/LSNB/LSNG) nodes is controlled by means of utility passwords. These passwords are generated using a deterministic, insecure algorithm using a single seed value composed of a day/hour/minute timestamp with less than 16 bits of entropy. The seed value is fed through a lookup table and a series of permutation operations resulting in three different four-character passwords corresponding to different privilege levels. An attacker can easily reconstruct these passwords and thus gain access to privileged maintenance operations. NOTE: this is different from CVE-2014-2350. |
| CVE-2022-29964 | Medium | 2022-07-26 | Not applicable | No public exploit | The Emerson DeltaV Distributed Control System (DCS) controllers and IO cards through 2022-04-29 misuse passwords. WIOC SSH provides access to a shell as root, DeltaV, or backup via hardcoded credentials. NOTE: this is different from CVE-2014-2350. |
| CVE-2022-29963 | Medium | 2022-07-26 | Not applicable | No public exploit | The Emerson DeltaV Distributed Control System (DCS) controllers and IO cards through 2022-04-29 misuse passwords. TELNET on port 18550 provides access to a root shell via hardcoded credentials. This affects S-series, P-series, and CIOC/EIOC nodes. NOTE: this is different from CVE-2014-2350. |
| CVE-2022-29962 | Medium | 2022-07-26 | Not applicable | No public exploit | The Emerson DeltaV Distributed Control System (DCS) controllers and IO cards through 2022-04-29 misuse passwords. FTP has hardcoded credentials (but may often be disabled in production). This affects S-series, P-series, and CIOC/EIOC nodes. NOTE: this is different from CVE-2014-2350. |
| CVE-2022-29601 | Critical | 2022-07-12 | Not applicable | No public exploit | The seminars (aka Seminar Manager) extension through 4.1.3 for TYPO3 allows SQL Injection. |
| CVE-2021-28509 | Medium | 2022-05-26 | Not applicable | No public exploit | This advisory documents the impact of an internally found vulnerability in Arista EOS state streaming telemetry agent TerminAttr and OpenConfig transport protocols. The impact of this vulnerability is that, in certain conditions, TerminAttr might leak MACsec sensitive data in clear text in CVP to other authorized users, which could cause MACsec traffic to be decrypted or modified by other authorized users on the device. |
| CVE-2021-28508 | Medium | 2022-05-26 | Not applicable | No public exploit | This advisory documents the impact of an internally found vulnerability in Arista EOS state streaming telemetry agent TerminAttr and OpenConfig transport protocols. The impact of this vulnerability is that, in certain conditions, TerminAttr might leak IPsec sensitive data in clear text in CVP to other authorized users, which could cause IPsec traffic to be decrypted or modified by other authorized users on the device. |
| CVE-2022-30770 | Medium | 2022-05-16 | Not applicable | No public exploit | Terminalfour versions 8.3.7, 8.3.x versions prior to version 8.3.8 and r 8.2.x versions prior to version 8.2.18.5 or 8.2.18.2.1 are vulnerable to (XSS) vulnerability that could be exploited by an attacker to mislead an administrator and steal their credentials. |
| CVE-2022-23598 | Medium | 2022-01-28 | Not applicable | No public exploit | laminas-form is a package for validating and displaying simple and complex forms. When rendering validation error messages via the `formElementErrors()` view helper shipped with laminas-form, many messages will contain the submitted value. However, in laminas-form prior to version 3.1.1, the value was not being escaped for HTML contexts, which could potentially lead to a reflected cross-site scripting attack. Versions 3.1.1 and above contain a patch to mitigate the vulnerability. A workaround is available. One may manually place code at the top of a view script where one calls the `formElementErrors()` view helper. More information about this workaround is available on the GitHub Security Advisory. |
| CVE-2021-46307 | Critical | 2022-01-21 | Not applicable | No public exploit | An SQL Injection vulnerability exists in Projectworlds Online Examination System 1.0 via the eid parameter in account.php. |
| CVE-2021-28501 | Critical | 2022-01-14 | Not applicable | No public exploit | An issue has recently been discovered in Arista EOS where the incorrect use of EOS's AAA API’s by the OpenConfig and TerminAttr agents could result in unrestricted access to the device for local users with nopassword configuration. |
| CVE-2021-45917 | Critical | 2022-01-03 | Not applicable | No public exploit | The server-request receiver function of Shockwall system has an improper authentication vulnerability. An authenticated attacker of an agent computer within the local area network can use the local registry information to launch server-side request forgery (SSRF) attack on another agent computer, resulting in arbitrary code execution for controlling the system or disrupting service. |
| CVE-2021-43862 | Medium | 2021-12-30 | Not applicable | No public exploit | jQuery Terminal Emulator is a plugin for creating command line interpreters in your applications. Versions prior to 2.31.1 contain a low impact and limited cross-site scripting (XSS) vulnerability. The code for XSS payload is always visible, but an attacker can use other techniques to hide the code the victim sees. If the application uses the `execHash` option and executes code from URL, the attacker can use this URL to execute their code. The scope is limited because the javascript attribute used is added to span tag, so no automatic execution like with `onerror` on images is possible. This issue is fixed in version 2.31.1. As a workaround, the user can use formatting that wrap whole user input and its no op. The code for this workaround is available in the GitHub Security Advisory. The fix will only work when user of the library is not using different formatters (e.g. to highlight code in different way). |
| CVE-2021-45099 | High | 2021-12-16 | Not applicable | No public exploit | The addon.stdin service in addon-ssh (aka Home Assistant Community Add-on: SSH & Web Terminal) before 10.0.0 has an attack surface that requires social engineering. NOTE: the vendor does not agree that this is a vulnerability; however, addon.stdin was removed as a defense-in-depth measure against complex social engineering situations |
| CVE-2021-24700 | Medium | 2021-11-23 | Not applicable | No public exploit | The Forminator WordPress plugin before 1.15.4 does not sanitize and escape the email field label, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html is disallowed |
| CVE-2021-41973 | Medium | 2021-11-01 | No exploit published | No public exploit | In Apache MINA, a specifically crafted, malformed HTTP request may cause the HTTP Header decoder to loop indefinitely. The decoder assumed that the HTTP Header begins at the beginning of the buffer and loops if there is more data than expected. Please update MINA to 2.1.5 or greater. |
| CVE-2021-41302 | High | 2021-09-30 | Not applicable | No public exploit | ECOA BAS controller stores sensitive data (backup exports) in clear-text, thus the unauthenticated attacker can remotely query user password and obtain user’s privilege. |
| CVE-2021-41301 | Critical | 2021-09-30 | Not applicable | No public exploit | ECOA BAS controller is vulnerable to configuration disclosure when direct object reference is made to the specific files using an HTTP GET request. This will enable the unauthenticated attacker to remotely disclose sensitive information and help her in authentication bypass, privilege escalation and full system access. |
| CVE-2021-41300 | Critical | 2021-09-30 | Not applicable | No public exploit | ECOA BAS controller’s special page displays user account and passwords in plain text, thus unauthenticated attackers can access the page and obtain privilege with full functionality. |
| CVE-2021-41299 | Critical | 2021-09-30 | Not applicable | No public exploit | ECOA BAS controller is vulnerable to hard-coded credentials within its Linux distribution image, thus remote attackers can obtain administrator’s privilege without logging in. |
| CVE-2021-41298 | High | 2021-09-30 | Not applicable | No public exploit | ECOA BAS controller is vulnerable to insecure direct object references that occur when the application provides direct access to objects based on user-supplied input. As a result of this vulnerability, attackers with general user's privilege can remotely bypass authorization and access the hidden resources in the system and execute privileged functionalities. |
| CVE-2021-41297 | High | 2021-09-30 | Not applicable | No public exploit | ECOA BAS controller is vulnerable to weak access control mechanism allowing authenticated user to remotely escalate privileges by disclosing credentials of administrative accounts in plain-text. |
| CVE-2021-41296 | Critical | 2021-09-30 | Not applicable | No public exploit | ECOA BAS controller uses weak set of default administrative credentials that can be easily guessed in remote password attacks and gain full control of the system. |
| CVE-2021-41295 | High | 2021-09-30 | Not applicable | Exploited | ECOA BAS controller has a Cross-Site Request Forgery vulnerability, thus authenticated attacker can remotely place a forged request at a malicious web page and execute CRUD commands (GET, POST, PUT, DELETE) to perform arbitrary operations in the system. |
| CVE-2021-41294 | Critical | 2021-09-30 | Not applicable | No public exploit | ECOA BAS controller suffers from a path traversal vulnerability, causing arbitrary files deletion. Using the specific GET parameter, unauthenticated attackers can remotely delete arbitrary files on the affected device and cause denial of service scenario. |
| CVE-2021-41293 | High | 2021-09-30 | Not applicable | Exploited | ECOA BAS controller suffers from a path traversal vulnerability, causing arbitrary files disclosure. Using the specific POST parameter, unauthenticated attackers can remotely disclose arbitrary files on the affected device and disclose sensitive and system information. |
| CVE-2021-41292 | Critical | 2021-09-30 | Not applicable | No public exploit | ECOA BAS controller suffers from an authentication bypass vulnerability. An unauthenticated attacker through cookie poisoning can remotely bypass authentication and disclose sensitive information and circumvent physical access controls in smart homes and buildings and manipulate HVAC. |
| CVE-2021-41291 | High | 2021-09-30 | Not applicable | Working exploit published | ECOA BAS controller suffers from a path traversal content disclosure vulnerability. Using the GET parameter in File Manager, unauthenticated attackers can remotely disclose directory content on the affected device. |
| CVE-2021-41290 | Critical | 2021-09-30 | Not applicable | No public exploit | ECOA BAS controller suffers from an arbitrary file write and path traversal vulnerability. Using the POST parameters, unauthenticated attackers can remotely set arbitrary values for location and content type and gain the possibility to execute arbitrary code on the affected device. |
| CVE-2021-30129 | Medium | 2021-07-12 | No exploit published | No public exploit | A vulnerability in sshd-core of Apache Mina SSHD allows an attacker to overflow the server causing an OutOfMemory error. This issue affects the SFTP and port forwarding features of Apache Mina SSHD version 2.0.0 and later versions. It was addressed in Apache Mina SSHD 2.7.0 |
| CVE-2020-26006 | Medium | 2021-05-24 | Not applicable | No public exploit | Project Worlds Online Examination System 1.0 is affected by Cross Site Scripting (XSS) via account.php. |
| CVE-2020-25411 | Medium | 2021-05-24 | Not applicable | No public exploit | Projectworlds Online Examination System 1.0 is vulnerable to CSRF, which allows a remote attacker to delete the existing user. |
| CVE-2020-21996 | High | 2021-04-28 | Not applicable | No public exploit | AVE DOMINAplus <=1.10.x suffers from an unauthenticated reboot command execution. Attackers can exploit this issue to cause a denial of service scenario. |
| CVE-2020-21994 | Critical | 2021-04-28 | Not applicable | No public exploit | AVE DOMINAplus <=1.10.x suffers from clear-text credentials disclosure vulnerability that allows an unauthenticated attacker to issue a request to an unprotected directory that hosts an XML file '/xml/authClients.xml' and obtain administrative login information that allows for a successful authentication bypass attack. |
| CVE-2020-21991 | Critical | 2021-04-28 | Not applicable | No public exploit | AVE DOMINAplus <=1.10.x suffers from an authentication bypass vulnerability due to missing control check when directly calling the autologin GET parameter in changeparams.php script. Setting the autologin value to 1 allows an unauthenticated attacker to permanently disable the authentication security control and access the management interface with admin privileges without providing credentials. |
| CVE-2021-27188 | High | 2021-02-12 | Not applicable | No public exploit | The Sovremennye Delovye Tekhnologii FX Aggregator terminal client 1 allows attackers to cause a denial of service (access suspended for five hours) by making five invalid login attempts to a victim's account. |
| CVE-2021-27187 | High | 2021-02-12 | Not applicable | No public exploit | The Sovremennye Delovye Tekhnologii FX Aggregator terminal client 1 stores authentication credentials in cleartext in login.sav when the Save Password box is checked. |
| CVE-2020-28221 | Critical | 2021-01-26 | Not applicable | No public exploit | A CWE-20: Improper Input Validation vulnerability exists in EcoStruxure™ Operator Terminal Expert and Pro-face BLUE (version details in the notification) that could cause arbitrary code execution when the Ethernet Download feature is enable on the HMI. |
| CVE-2021-3007 | Critical | 2021-01-04 | Not applicable | Exploited | Laminas Project laminas-http before 2.14.2, and Zend Framework 3.0.0, has a deserialization vulnerability that can lead to remote code execution if the content is controllable, related to the __destruct method of the Zend\Http\Response\Stream class in Stream.php. NOTE: Zend Framework is no longer supported by the maintainer. NOTE: the laminas-http vendor considers this a "vulnerability in the PHP language itself" but has added certain type checking as a way to prevent exploitation in (unrecommended) use cases where attacker-supplied data can be deserialized |
| CVE-2020-12523 | Critical | 2020-12-17 | Not applicable | No public exploit | On Phoenix Contact mGuard Devices versions before 8.8.3 LAN ports get functional after reboot even if they are disabled in the device configuration. For mGuard devices with integrated switch on the LAN side, single switch ports can be disabled by device configuration. After a reboot these ports get functional independent from their configuration setting: Missing Initialization of Resource |
| CVE-2020-35338 | Critical | 2020-12-14 | Not applicable | Working exploit published | The Web Administrative Interface in Mobile Viewpoint Wireless Multiplex Terminal (WMT) Playout Server 20.2.8 and earlier has a default account with a password of "pokon." |
| CVE-2020-29259 | Medium | 2020-12-09 | Not applicable | No public exploit | Cross-site scripting (XSS) vulnerability in Online Examination System 1.0 via the subject or feedback parameter to feedback.php. |
| CVE-2020-29258 | Medium | 2020-12-09 | Not applicable | No public exploit | Cross-site scripting (XSS) vulnerability in Online Examination System 1.0 via the w parameter to index.php. |
| CVE-2020-29257 | Medium | 2020-12-09 | Not applicable | No public exploit | Cross-site scripting (XSS) vulnerability in Online Examination System 1.0 via the q parameter to feedback.php. |
| CVE-2020-23727 | Medium | 2020-12-03 | Not applicable | No public exploit | There is a local denial of service vulnerability in the Antiy Zhijia Terminal Defense System 5.0.2.10121559 and an attacker can cause a computer crash (BSOD). |
| CVE-2020-7544 | High | 2020-11-19 | Not applicable | No public exploit | A CWE-269 Improper Privilege Management vulnerability exists in EcoStruxureª Operator Terminal Expert runtime (Vijeo XD) that could cause privilege escalation on the workstation when interacting directly with a driver installed by the runtime software of EcoStruxureª Operator Terminal Expert. |
| CVE-2020-14930 | High | 2020-06-19 | Not applicable | Working exploit published | An issue was discovered in BT CTROMS Terminal OS Port Portal CT-464. Account takeover can occur because the password-reset feature discloses the verification token. Upon a getverificationcode.jsp request, this token is transmitted not only to the registered phone number of the user account, but is also transmitted to the unauthenticated HTTP client. |
| CVE-2020-7497 | Critical | 2020-06-16 | Not applicable | No public exploit | A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in EcoStruxure Operator Terminal Expert 3.1 Service Pack 1 and prior (formerly known as Vijeo XD)which could cause arbitrary application execution when the computer starts. |
| CVE-2020-7496 | High | 2020-06-16 | Not applicable | No public exploit | A CWE-88: Argument Injection or Modification vulnerability exists in EcoStruxure Operator Terminal Expert 3.1 Service Pack 1 and prior (formerly known as Vijeo XD)which could cause unauthorized write access when opening the project file. |
| CVE-2020-7495 | Medium | 2020-06-16 | Not applicable | No public exploit | A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability during zip file extraction exists in EcoStruxure Operator Terminal Expert 3.1 Service Pack 1 and prior (formerly known as Vijeo XD) which could cause unauthorized write access outside of expected path folder when opening the project file. |
| CVE-2020-7494 | High | 2020-06-16 | Not applicable | No public exploit | A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in EcoStruxure Operator Terminal Expert 3.1 Service Pack 1 and prior (formerly known as Vijeo XD) which could cause malicious code execution when opening the project file. |
| CVE-2020-7493 | High | 2020-06-16 | Not applicable | No public exploit | A CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability exists in EcoStruxure Operator Terminal Expert 3.1 Service Pack 1 and prior (formerly known as Vijeo XD) which could cause malicious code execution when opening the project file. |
| CVE-2020-11082 | Medium | 2020-05-28 | Not applicable | No public exploit | In Kaminari before 1.2.1, there is a vulnerability that would allow an attacker to inject arbitrary code into pages with pagination links. This has been fixed in 1.2.1. |
| CVE-2019-19148 | Critical | 2020-03-20 | Not applicable | No public exploit | Tellabs Optical Line Terminal (OLT) 1150 devices allow Remote Command Execution via the -l option to TELNET or SSH. Tellabs has addressed this issue in the SR30.1 and SR31.1 release on February 18, 2020. |
| CVE-2019-17596 | High | 2019-10-24 | Not applicable | No public exploit | Go before 1.12.11 and 1.3.x before 1.13.2 can panic upon an attempt to process network traffic containing an invalid DSA public key. There are several attack scenarios, such as traffic from a client to a server that verifies client certificates. |
| CVE-2019-0231 | High | 2019-10-01 | Not applicable | No public exploit | Handling of the close_notify SSL/TLS message does not lead to a connection closure, leading the server to retain the socket opened and to have the client potentially receive clear text messages afterward. Mitigation: 2.0.20 users should migrate to 2.0.21, 2.1.0 users should migrate to 2.1.1. This issue affects: Apache MINA. |
| CVE-2019-5958 | High | 2019-05-17 | Not applicable | No public exploit | Untrusted search path vulnerability in Electronic reception and examination of application for radio licenses Offline 1.0.9.0 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. |
| CVE-2019-5957 | High | 2019-05-17 | Not applicable | No public exploit | Untrusted search path vulnerability in Installer of Electronic reception and examination of application for radio licenses Online 1.0.9.0 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. |
| CVE-2019-9568 | Medium | 2019-03-04 | Not applicable | No public exploit | The "Forminator Contact Form, Poll & Quiz Builder" plugin before 1.6 for WordPress has SQL Injection via the wp-admin/admin.php?page=forminator-entries entry[] parameter if the attacker has the delete permission. |