CVE Database and Vulnerability Search

Browse vendorsBrowse ecosystems

Search CVE and GHSA vulnerability records by identifier, title, vendor, product, package, or CWE. Filter by severity, CISA KEV, ransomware association, linked artifacts, and Nuclei templates; sort by publication date, CVSS, or EPSS.

Vulnerabilities
381,276
with PoCs
37,250
CISA KEV
1,665
Ransomware
606
with Nuclei
4,342
Advanced

Showing 25 vulnerabilities on this page

Signals CISA KEV Ransomware Nuclei
VulnerabilityTitle and contextCVSSEPSSPoCsSignals

Improper one time password handling in devise-two-factor

As a result of an incomplete fix for CVE-2015-7225, in versions of devise-two-factor prior to 4.0.2 it is possible to reuse a One-Time-Password (OTP) for one (and only one) immediately trailing interval. CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N)

CWE-254Apr 11, 2022
CVSS5.3v3.1EPSS0.867%PoCs0SignalsSTIX

Vulnerability of design defects in the security algorithm component. Successful exploitation of this vulnerability may affect confidentiality.

CWE-254CWE-326CWE-327Jan 7, 2022
CVSS4.6v3.1EPSS0.144%PoCs0SignalsSTIX

The legacy finger service (TCP port 79) is enabled by default on various older Lexmark devices.

CWE-254Aug 28, 2019
CVSS5.3v3.0EPSS0.871%PoCs0SignalsSTIX

Source code is downloaded over cleartext HTTP in portaudio

An issue was discovered in the portaudio crate through 0.7.0 for Rust. There is a man-in-the-middle issue because the source code is downloaded over cleartext HTTP.

CWE-254CWE-319Aug 26, 2019
CVSS5.9v3.0EPSS1.08%PoCs0SignalsSTIX

HTTPS MitM vulnerability due to lack of hostname verification

An issue was discovered in the hyper crate before 0.9.4 for Rust on Windows. There is an HTTPS man-in-the-middle vulnerability because hostname verification was omitted.

CWE-254CWE-347Aug 26, 2019
CVSS4.8v3.0EPSS0.738%PoCs0SignalsSTIX

The wp-all-import plugin before 3.2.4 for WordPress has no prevention of unauthenticated requests to adminInit.

CWE-254Aug 20, 2019
CVSS7.5v3.0EPSS1.43%PoCs1SignalsSTIX

The awesome-support plugin before 3.1.7 for WordPress has a security issue in which shortcodes are allowed in replies.

CWE-254Aug 20, 2019
CVSS7.5v3.0EPSS1.39%PoCs0SignalsSTIX

Undirectional routing wasn't respected in some cases in Mitogen

core.py in Mitogen before 0.2.8 has a typo that drops the unidirectional-routing protection mechanism in the case of a child that is initiated by another child. The Ansible extension is unaffected. NOTE: the vendor disputes this issue because it is exploitable only in conjunction with hypothetical other factors, i.e., an affected use case within a library caller, and a bug in the message receiver policy code that led to reliance on this extra protection mechanism

CWE-254Aug 18, 2019
CVSS-v4.0EPSS1.65%PoCs0SignalsSTIX

xtrlock through 2.10 does not block multitouch events. Consequently, an attacker at a locked screen can send input to (and thus control) various programs such as Chromium via events such as pan scrolling, "pinch and zoom" gestures, or even regular mouse clicks (by depressing the touchpad once and then clicking with a different finger).

CWE-254Aug 16, 2019
CVSS4.6v3.1EPSS0.364%PoCs0SignalsSTIX

cPanel before 60.0.25 does not enforce feature-list restrictions when calling the multilang adminbin (SEC-168).

CWE-254Aug 5, 2019
CVSS3.3v3.0EPSS0.342%PoCs0SignalsSTIX

cPanel before 62.0.4 does not enforce account ownership for has_mycnf_for_cpuser WHM API calls (SEC-210).

CWE-254Aug 5, 2019
CVSS6.5v3.0EPSS0.875%PoCs0SignalsSTIX

In cPanel before 62.0.4, Exim transports could execute in the context of the nobody account (SEC-206).

CWE-254Aug 5, 2019
CVSS6.5v3.0EPSS0.875%PoCs0SignalsSTIX

Leech Protect in cPanel before 62.0.4 does not protect certain directories (SEC-205).

CWE-254Aug 5, 2019
CVSS7.5v3.0EPSS1.11%PoCs0SignalsSTIX

cPanel before 62.0.17 allows access to restricted resources because of a URL filtering error (SEC-229).

CWE-254Aug 5, 2019
CVSS4.3v3.0EPSS0.709%PoCs0SignalsSTIX

cPanel before 62.0.17 allows a CPHulk one-day ban bypass when IP based protection is enabled (SEC-224).

CWE-254Aug 5, 2019
CVSS7.5v3.0EPSS0.939%PoCs0SignalsSTIX

cPanel before 64.0.21 does not enforce demo restrictions for SSL API calls (SEC-249).

CWE-254Aug 2, 2019
CVSS4.3v3.0EPSS0.633%PoCs0SignalsSTIX

In cPanel before 66.0.2, Apache HTTP Server SSL domain logs can persist on disk after an account termination (SEC-291).

CWE-254Aug 2, 2019
CVSS3.3v3.1EPSS0.318%PoCs0SignalsSTIX

Amcrest IPM-721S V2.420.AC00.16.R.20160909 devices have a timeout policy to wait for 5 minutes in case 30 incorrect password attempts are detected using the Web and HTTP API interface provided by the device. However, if the same brute force attempt is performed using the ONVIF specification (which is supported by the same binary) then there is no account lockout or timeout executed. This can allow an attacker to circumvent the account protection mechanism and brute force the credentials. If the …

CWE-254Jul 3, 2019
CVSS9.8v3.0EPSS4.11%PoCs0SignalsSTIX

In the most recent firmware for Blipcare, the device provides an open Wireless network called "Blip" for communicating with the device. The user connects to this open Wireless network and uses the web management interface of the device to provide the user's Wi-Fi credentials so that the device can connect to it and have Internet access. This device acts as a Wireless Blood pressure monitor and is used to measure blood pressure levels of a person. This allows an attacker who is in vicinity of Wir…

CWE-254Jul 2, 2019
CVSS7.1v3.0EPSS1.56%PoCs0SignalsSTIX

The HTTP API supported by Starry Station (aka Starry Router) allows brute forcing the PIN setup by the user on the device, and this allows an attacker to change the Wi-Fi settings and PIN, as well as port forward and expose any internal device's port to the Internet. It was identified that the device uses custom Python code called "rodman" that allows the mobile appication to interact with the device. The APIs that are a part of this rodman Python file allow the mobile application to interact wi…

CWE-254Jun 10, 2019
CVSS8.0v3.0EPSS2.06%PoCs0SignalsSTIX

OnCommand Unified Manager for VMware vSphere, Linux and Windows prior to 9.5 shipped without certain HTTP Security headers configured which could allow an attacker to obtain sensitive information via unspecified vectors.

CWE-254May 10, 2019
CVSS7.5v3.0EPSS1.43%PoCs0SignalsSTIX

Zcash 2.x allows an inexpensive approach to "fill all transactions of all blocks" and "prevent any real transaction from occurring" via a "Sapling Wood-Chipper" attack.

CWE-254May 1, 2019
CVSS7.5v3.0EPSS2.18%PoCs0SignalsSTIX

uuid.uuid1() is not suitable as an unguessable identifier/token

A vulnerability in generate_filestorage_key of Ubuntu MAAS allows an attacker to brute-force filenames. This issue affects Ubuntu MAAS versions prior to 1.9.2.

CWE-254Apr 22, 2019
CVSS2.0v3.0EPSS0.948%PoCs0SignalsSTIX

mount.ecrpytfs_private sets group owner of /etc/mtab to user's primary group

When mount.ecrpytfs_private before version 87-0ubuntu1.2 calls setreuid() it doesn't also set the effective group id. So when it creates the new version, mtab.tmp, it's created with the group id of the user running mount.ecryptfs_private.

CWE-254Apr 22, 2019
CVSS3.8v3.0EPSS0.98%PoCs0SignalsSTIX

libvirt-domain.c in libvirt before 1.3.1 supports virDomainGetTime API calls by guest agents with an RO connection, even though an RW connection was supposed to be required, a different vulnerability than CVE-2019-3886.

CWE-254Apr 18, 2019
CVSS7.5v3.0EPSS2.05%PoCs0SignalsSTIX