Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
semi vulnerabilities and exploits
(subscribe to this query)
5
CVSSv2
CVE-2010-0123
The database backup implementation in Employee Timeclock Software 0.99 stores sensitive information under the web root with insufficient access control, which allows remote malicious users to download a database via a direct request for a "semi-predictable file name."
Timeclock-software Employee Timeclock Software 0.99
4
CVSSv2
CVE-2021-30121
Semi-authenticated local file inclusion The contents of arbitrary files can be returned by the webserver Example request: `https://x.x.x.x/KLC/js/Kaseya.SB.JS/js.aspx?path=C:\Kaseya\WebPages\dl.asp` A valid sessionId is required but can be easily obtained via CVE-2021-30118
Kaseya Vsa
5.5
CVSSv2
CVE-2021-21908
Specially-crafted command line arguments can lead to arbitrary file deletion. The handle_delete function does not attempt to sanitize or otherwise validate the contents of the [file] parameter (passed to the function as argv[1]), allowing an authenticated malicious user to supply...
Garrett Ic Module Firmware 5.0
6.8
CVSSv2
CVE-2014-3137
Bottle 0.10.x prior to 0.10.12, 0.11.x prior to 0.11.7, and 0.12.x prior to 0.12.6 does not properly limit content types, which allows remote malicious users to bypass intended access restrictions via an accepted Content-Type followed by a ; (semi-colon) and a Content-Type that w...
Bottlepy Bottle 0.10.6
Bottlepy Bottle 0.10.4
Bottlepy Bottle 0.11.5
Bottlepy Bottle 0.11.3
Bottlepy Bottle 0.12.4
Bottlepy Bottle 0.12.2
Bottlepy Bottle 0.12.0
Bottlepy Bottle 0.10.2
Bottlepy Bottle 0.10.1
Bottlepy Bottle 0.10.0
Bottlepy Bottle 0.11.7
Bottlepy Bottle 0.10.11
Bottlepy Bottle 0.10.10
Bottlepy Bottle 0.10.9
Bottlepy Bottle 0.10.8
Bottlepy Bottle 0.10.7
Bottlepy Bottle 0.11.2
Bottlepy Bottle 0.11.1
Bottlepy Bottle 0.11.0
Bottlepy Bottle 0.12.5
Bottlepy Bottle 0.10.5
Bottlepy Bottle 0.10.3
2.7
CVSSv2
CVE-2019-9157
Gemalto DS3 Authentication Server 2.6.1-SP01 allows Local File Disclosure.
Gemalto Ezio Ds3 Server
2.7
CVSSv2
CVE-2019-9158
Gemalto DS3 Authentication Server 2.6.1-SP01 has Broken Access Control.
Gemalto Ezio Ds3 Server
9
CVSSv2
CVE-2020-7357
Cayin CMS suffers from an authenticated OS semi-blind command injection vulnerability using default credentials. This can be exploited to inject and execute arbitrary shell commands as the root user through the 'NTP_Server_IP' HTTP POST parameter in system.cgi page. Thi...
Cayintech Cms-se Firmware 11.0
Cayintech Cms-se-lxc Firmware -
Cayintech Cms-60 Firmware 11.0
Cayintech Cms-40 Firmware 9.0
Cayintech Cms-20 Firmware 9.0
Cayintech Cms 7.5
Cayintech Cms 8.0
Cayintech Cms 8.2
5.2
CVSSv2
CVE-2019-9156
Gemalto DS3 Authentication Server 2.6.1-SP01 allows OS Command Injection.
Gemalto Ezio Ds3 Server
4.3
CVSSv2
CVE-2020-6797
By downloading a file with the .fileloc extension, a semi-privileged extension could launch an arbitrary application on the user's computer. The attacker is restricted as they are unable to download non-quarantined files or supply command line arguments to the application, l...
Mozilla Firefox
Mozilla Firefox Esr
Mozilla Thunderbird
NA
CVE-2023-42798
AutomataCI is a template git repository equipped with a native built-in semi-autonomous CI tools. An issue in versions 1.4.1 and below can let a release job reset the git root repository to the first commit. Version 1.5.0 has a patch for this issue. As a workaround, make sure the...
Hollowaykeanho Automataci
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27322
cross-site request forgery
unauthorized
CVE-2024-33925
reflected XSS
CVE-2023-51580
CVE-2023-51579
CVE-2015-2051
CVE-2023-51609
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
NEXT »