Unspecified vulnerabilities
251 vulnerabilities
Known vulnerabilities in Unspecified products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 171 products.
Products
50 of 171- Ffmpeg26 vulnerabilities
- Hindu Matrimonial Script15 vulnerabilities
- Phplist8 vulnerabilities
- Movie Ticket Booking System5 vulnerabilities
- Home Clean Services Management System4 vulnerabilities
- Utorrent4 vulnerabilities
- House Rental System3 vulnerabilities
- Humhub3 vulnerabilities
- Jenkins3 vulnerabilities
- 389 Ds Base2 vulnerabilities
- Atahualpa Theme2 vulnerabilities
- Demokratian2 vulnerabilities
- Exim2 vulnerabilities
- GPAC2 vulnerabilities
- Hospital Management Center2 vulnerabilities
- Laravel2 vulnerabilities
- Libtiff2 vulnerabilities
- Mavlink2 vulnerabilities
- Online Hotel Booking System2 vulnerabilities
- Open5Gs2 vulnerabilities
- Ovirt Engine2 vulnerabilities
- Phpservermon2 vulnerabilities
- School Club Application System2 vulnerabilities
- Simplessus2 vulnerabilities
- Student Attendance Management System2 vulnerabilities
- Studygolang2 vulnerabilities
- WP Ban2 vulnerabilities
- Zoo Management System2 vulnerabilities
- Activity Log Plugin1 vulnerabilities
- Admin Custom Login Plugin1 vulnerabilities
- Adminer Login1 vulnerabilities
- Air Transfer1 vulnerabilities
- Airfield Online1 vulnerabilities
- Ajenti1 vulnerabilities
- Album Lock1 vulnerabilities
- Alpine Phototile For Instagram Plugin1 vulnerabilities
- Analytics Stats Counter Statistics Plugin1 vulnerabilities
- Angular1 vulnerabilities
- Ansible1 vulnerabilities
- As1 vulnerabilities
- Automad1 vulnerabilities
- Automatic Question Paper Generator1 vulnerabilities
- Automatic Question Paper Generator System1 vulnerabilities
- Badminton Center Management System1 vulnerabilities
- Bludit1 vulnerabilities
- Brandbugle1 vulnerabilities
- Calendarxp1 vulnerabilities
- Centreon1 vulnerabilities
- Cltphp1 vulnerabilities
- Collective.Contact.Widget1 vulnerabilities
CVE-2018-1084canonicalubuntu_linux+17
EPSS score3.11%
corosync before version 2.4.4 is vulnerable to an integer overflow in exec/totemcrypto.c.CVE-2018-1079clusterlabspacemaker_command_line_interface+4EPSS score1.06%
pcs before version 0.9.164 and 0.10 is vulnerable to a privilege escalation via authorized user malicious REST call. The REST interface of the pcsd service did not properly sanitize the file name from the /remote/put_file query. If the /etc/booth directory exists, an authenticated attacker with write permissions could create or overwrite arbitrary files with arbitrary data outside of the /etc/booth directory, in the context of the pcsd process.CVE-2018-1115alpinepostgresql+13EPSS score3.90%
postgresql before versions 10.4, 9.6.9 is vulnerable in the adminpack extension, the pg_catalog.pg_logfile_rotate() function doesn't follow the same ACLs than pg_rorate_logfile. If the adminpack is added to a database, an attacker able to connect to it could exploit this to force log rotation.CVE-2018-1130canonicalubuntu_linux+24EPSS score0.49%
Linux kernel before version 4.16-rc7 is vulnerable to a null pointer dereference in dccp_write_xmit() function in net/dccp/output.c in that allows a local user to cause a denial of service by a number of certain crafted system calls.CVE-2018-1112ubuntuglusterfs+18EPSS score2.35%
glusterfs server before versions 3.10.12, 4.0.2 is vulnerable when using 'auth.allow' option which allows any unauthenticated gluster client to connect from any network to mount gluster storage volumes. NOTE: this vulnerability exists because of a CVE-2018-1088 regression.CVE-2018-1089debian389-ds-base+13EPSS score4.01%
389-ds-base before versions 1.4.0.9, 1.3.8.1, 1.3.6.15 did not properly handle long search filters with characters needing escapes, possibly leading to buffer overflows. A remote, unauthenticated attacker could potentially use this flaw to make ns-slapd crash via a specially crafted LDAP request, thus resulting in denial of service.CVE-2018-1074ovirtovirt+22EPSS score1.44%
ovirt-engine API and administration web portal before versions 4.2.2.5, 4.1.11.2 is vulnerable to an exposure of Power Management credentials, including cleartext passwords to Host Administrators. A Host Administrator could use this flaw to gain access to the power management systems of hosts they control.CVE-2018-25042bittorrentutorrent+1EPSS score1.00%
A vulnerability classified as critical has been found in uTorrent. This affects an unknown part. The manipulation leads to memory corruption. It is possible to initiate the attack remotely. It is recommended to upgrade the affected component.CVE-2018-25041unspecifiedutorrent+1EPSS score1.02%
A vulnerability was found in uTorrent. It has been rated as critical. Affected by this issue is some unknown functionality of the component JSON RPC Server. The manipulation leads to privilege escalation. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. It is recommended to upgrade the affected component.CVE-2018-25043bittorrentutorrent+1EPSS score1.16%
A vulnerability classified as critical was found in uTorrent. This vulnerability affects unknown code of the component PRNG. The manipulation leads to weak authentication. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. It is recommended to upgrade the affected component.CVE-2018-25044bittorrentutorrent+1EPSS score0.98%
A vulnerability, which was classified as critical, has been found in uTorrent. This issue affects some unknown processing of the component Guest Account. The manipulation leads to privilege escalation. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. It is recommended to upgrade the affected component.CVE-2018-8021apachesuperset+2EPSS score53.41%
Versions of Superset prior to 0.23 used an unsafe load method from the pickle library to deserialize data leading to possible remote code execution. Note Superset 0.23 was released prior to any Superset release under the Apache Software Foundation.CVE-2021-4258debianwhohas+2EPSS score0.40%
A vulnerability was found in whohas. It has been rated as problematic. This issue affects some unknown processing of the component Package Information Handler. The manipulation leads to cleartext transmission of sensitive information. The attack may be initiated remotely. The real existence of this vulnerability is still doubted at the moment. The name of the patch is 667c3e2e9178f15c23d7918b5db25cd0792c8472. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-216251. NOTE: Most sources redirect to the encrypted site which limits the possibilities of an attack.CVE-2021-4272github.com/studygolangstudygolang+2EPSS score0.40%
A vulnerability classified as problematic has been found in studygolang. This affects an unknown part of the file static/js/topics.js. The manipulation of the argument contentHtml leads to cross site scripting. It is possible to initiate the attack remotely. The name of the patch is 0fb30f9640bd5fa0cae58922eac6c00bb1a94391. It is recommended to apply a patch to fix this issue. The identifier VDB-216477 was assigned to this vulnerability.CVE-2021-4231angularangular+27EPSS score1.18%
A vulnerability was found in Angular up to 11.0.4/11.1.0-next.2. It has been classified as problematic. Affected is the handling of comments. The manipulation leads to cross site scripting. It is possible to launch the attack remotely but it might require an authentication first. Upgrading to version 11.0.5 and 11.1.0-next.3 is able to address this issue. The name of the patch is ba8da742e3b243e8f43d4c63aa842b44e14f2b09. It is recommended to upgrade the affected component.CVE-2021-4249debianhaskell-xml-conduit+4EPSS score0.84%
A vulnerability was found in xml-conduit. It has been classified as problematic. Affected is an unknown function of the file xml-conduit/src/Text/XML/Stream/Parse.hs of the component DOCTYPE Entity Expansion Handler. The manipulation leads to infinite loop. It is possible to launch the attack remotely. Upgrading to version 1.9.1.0 is able to address this issue. The name of the patch is 4be1021791dcdee8b164d239433a2043dc0939ea. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-216204.CVE-2021-4229Npmua-parser-js+2EPSS score1.52%
A vulnerability was found in ua-parser-js 0.7.29/0.8.0/1.0.0. It has been rated as critical. This issue affects the crypto mining component which introduces a backdoor. Upgrading to version 0.7.30, 0.8.1 and 1.0.1 is able to address this issue. It is recommended to upgrade the affected component.CVE-2021-4240phpservermonitorphp_server_monitor+1EPSS score0.86%
A vulnerability, which was classified as problematic, was found in phpservermon. This affects the function generatePasswordResetToken of the file src/psm/Service/User.php. The manipulation leads to use of predictable algorithm in random number generator. The exploit has been disclosed to the public and may be used. The name of the patch is 3daa804d5f56c55b3ae13bfac368bb84ec632193. It is recommended to apply a patch to fix this issue. The identifier VDB-213717 was assigned to this vulnerability.CVE-2021-4230airfield_online_projectairfield_online+1EPSS score0.97%
A vulnerability has been found in Airfield Online and classified as problematic. This vulnerability affects the path /backups/ of the MySQL backup handler. An attacker is able to get access to sensitive data without proper authentication. It is recommended to the change the configuration settings.CVE-2021-4273studygolangstudygolang+1EPSS score0.56%
A vulnerability classified as problematic was found in studygolang. This vulnerability affects the function Search of the file http/controller/search.go. The manipulation of the argument q leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The name of the patch is 97ba556d42fa89dfaa7737e9cd3a8ddaf670bb23. It is recommended to apply a patch to fix this issue. VDB-216478 is the identifier assigned to this vulnerability.