CVE-2022-27966Xshell v7.0.0099 and below contains a binary hijack vulnerability which allows attackers to execute arbitrary code via a crafted .exe file.
6.5 MOYENNE
CVE-2022-27965Xlpd v7.0.0094 and below contains a binary hijack vulnerability which allows attackers to execute arbitrary code via a crafted .exe file.
6.5 MOYENNE
CVE-2022-27964Xmanager v7.0.0096 and below contains a binary hijack vulnerability which allows attackers to execute arbitrary code via a crafted .exe file.
6.5 MOYENNE
CVE-2022-27963Xftp 7.0.0088p and below contains a binary hijack vulnerability which allows attackers to execute arbitrary code via a crafted .exe file.
6.5 MOYENNE
CVE-2022-24797Pomerium is an identity-aware access proxy. In distributed service mode, Pomerium's Authenticate service exposes pprof debug and prometheus metrics handlers to untrusted traffic. T…
6.5 MOYENNE
CVE-2021-43707Cross Site Scripting (XSS) vulnerability exists in Maccms v10 via link_Name parameter.
6.1 MOYENNE
CVE-2021-43478A vulnerability exists in Hoosk 1.8.0 in /install/index.php, due to a failure to check if config.php already exists in the root directory, which could let a malicious user reinstal…
5.4 MOYENNE
CVE-2022-22311IBM Security Verify Access could allow a user, using man in the middle techniques, to obtain sensitive information or possibly change some information due to improper validiation o…
6.5 MOYENNE
CVE-2021-42946A Cross Site Scripting (XSS) vulnerability exists in htmly.2.8.1 via the Copyright field in the /admin/config page.
4.8 MOYENNE
CVE-2021-42869A Cross Site Scripting (XSS) vulnerability exists in Chikista Patient Management Software 2.0.2 via the last_name parameter in the (1) patient/insert, (2) patient_report, (3) /appo…
4.8 MOYENNE
CVE-2021-42868A Cross Site Scripting (XSS) vulnerability exists in Chikista Patient Management Software 2.0.2 in the first_name parameter in (1) patient/insert, (2) patient_report, (3) appointme…
4.8 MOYENNE
CVE-2021-42867A Cross Site Scripting (XSS) vulnerability exists in DanPros htmly 2.8.1 via the Description field in (1) admin/config, and (2) index.php pages.
4.8 MOYENNE
CVE-2021-42866A Cross Site Scripting vulnerabilty exists in Pixelimity 1.0 via the Site Description field in pixelimity/admin/setting.php
4.8 MOYENNE
CVE-2021-43505Multiple Cross Site Scripting (XSS) vulnerabilities exist in Ssourcecodester Simple Client Management System v1 via (1) Add new Client and (2) Add new invoice.
5.4 MOYENNE
CVE-2022-0350Cross-site Scripting (XSS) - Stored in GitHub repository vanessa219/vditor prior to 3.8.13.
5.4 MOYENNE
CVE-2022-27496Cross-site scripting vulnerability in Zero-channel BBS Plus v0.7.4 and earlier allows a remote attacker to inject an arbitrary script via unspecified vectors.
6.1 MOYENNE
CVE-2022-23183Missing authorization vulnerability in Advanced Custom Fields versions prior to 5.12.1 and Advanced Custom Fields Pro versions prior to 5.12.1 allows a remote authenticated attacke…
6.5 MOYENNE
CVE-2021-20729Cross-site scripting vulnerability in pfSense CE and pfSense Plus (pfSense CE software versions 2.5.2 and earlier, and pfSense Plus software versions 21.05 and earlier) allows a re…
6.1 MOYENNE
CVE-2021-43662totolink EX300_v2, ver V4.0.3c.140_B20210429 and A720R ,ver V4.1.5cu.470_B20200911 have an issue which causes uncontrolled resource consumption.
6.5 MOYENNE
CVE-2021-43661totolink EX300_v2 V4.0.3c.140_B20210429 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the component /home.asp.
6.1 MOYENNE
CVE-2022-26644Online Banking System Protect v1.0 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities via parameters on user profile, system_info and accounts management…
6.1 MOYENNE
CVE-2021-46006In Totolink A3100R V5.9c.4577, "test.asp" contains an API-like function, which is not authenticated. Using this function, an attacker can configure multiple settings without authen…
6.5 MOYENNE
CVE-2021-45900Vivoh Webinar Manager before 3.6.3.0 has improper API authentication. When a user logs in to the administration configuration web portlet, a VIVOH_AUTH cookie is assigned so that t…
6.5 MOYENNE
CVE-2021-38362In RSA Archer 6.x through 6.9 SP3 (6.9.3.0), an authenticated attacker can make a GET request to a REST API endpoint that is vulnerable to an Insecure Direct Object Reference (IDOR…
6.5 MOYENNE
CVE-2021-40645An SQL Injection vulnerability exists in glorylion JFinalOA as of 9/7/2021 in the defkey parameter getHaveDoneTaskDataList method of the FlowTaskController.
6.5 MOYENNE
CVE-2021-40644An SQL Injection vulnerability exists in oasys oa_system as of 9/7/2021 in resources/mappers/notice-mapper.xml.
6.5 MOYENNE
CVE-2022-24135QingScan 1.3.0 is affected by Cross Site Scripting (XSS) vulnerability in all search functions.
6.1 MOYENNE
CVE-2021-44310An issue was discovered in Firmware Analysis and Comparison Tool v3.2. With administrator privileges, the attacker could perform stored XSS attacks by inserting JavaScript and HTML…
4.8 MOYENNE
CVE-2022-27907Sonatype Nexus Repository Manager 3.x before 3.38.0 allows SSRF.
4.3 MOYENNE
CVE-2022-23801An issue was discovered in Joomla! 4.0.0 through 4.1.0. Possible XSS atack vector through SVG embedding in com_media.
6.1 MOYENNE
CVE-2022-23800An issue was discovered in Joomla! 4.0.0 through 4.1.0. Inadequate content filtering leads to XSS vulnerabilities in various components.
6.1 MOYENNE
CVE-2022-23798An issue was discovered in Joomla! 2.5.0 through 3.10.6 & 4.0.0 through 4.1.0. Inadequate validation of URLs could result into an invalid check whether an redirect URL is internal …
6.1 MOYENNE
CVE-2022-23796An issue was discovered in Joomla! 3.7.0 through 3.10.6. Lack of input validation could allow an XSS attack using com_fields.
6.1 MOYENNE
CVE-2022-23794An issue was discovered in Joomla! 3.0.0 through 3.10.6 & 4.0.0 through 4.1.0. Uploading a file name of an excess length causes the error. This error brings up the screen with the …
5.3 MOYENNE
CVE-2022-23136There is a stored XSS vulnerability in ZTE home gateway product. An attacker could modify the gateway name by inserting special characters and trigger an XSS attack when the user v…
5.4 MOYENNE
CVE-2021-39791In WallpaperManagerService, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead…
5.5 MOYENNE
CVE-2021-39788In TelecomManager, there is a possible way to check if a particular self managed phone account was registered on the device due to side channel information disclosure. This could l…
5.5 MOYENNE
CVE-2021-39786In NFC, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User intera…
6.7 MOYENNE
CVE-2021-39779In getCallStateUsingPackage of Telecom Service, there is a missing permission check. This could lead to local information disclosure of the call state with no additional execution …
5.5 MOYENNE
CVE-2021-39778In Telecomm, there is a possible way to determine whether an app is installed, without query permissions, due to improper input validation. This could lead to local information dis…
5.5 MOYENNE
CVE-2021-39777In Telephony, there is a possible way to determine whether an app is installed, without query permissions, due to a missing permission check. This could lead to local information d…
5.5 MOYENNE
CVE-2021-39775In People, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local informa…
5.5 MOYENNE
CVE-2021-39774In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed. User …
5.5 MOYENNE
CVE-2021-39773In VpnManagerService, there is a possible disclosure of installed VPN packages due to side channel information disclosure. This could lead to local information disclosure with no a…
5.5 MOYENNE
CVE-2021-39770In Framework, there is a possible disclosure of the device owner package due to a missing permission check. This could lead to local information disclosure with no additional execu…
5.5 MOYENNE
CVE-2021-39769In Device Policy, there is a possible way to determine whether an app is installed, without query permissions, due to a missing permission check. This could lead to local informati…
5.5 MOYENNE
CVE-2021-39766In Settings, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local infor…
5.5 MOYENNE
CVE-2021-39765In Gallery, there is a possible permission bypass due to a confused deputy. This could lead to local information disclosure with User execution privileges needed. User interaction …
5.5 MOYENNE
CVE-2021-39761In Media, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local informat…
5.5 MOYENNE
CVE-2021-39760In AudioService, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local i…
5.5 MOYENNE