#ExploitObserverAlert

CVE-2023-21716

DESCRIPTION: Exploit Observer has 45 entries related to CVE-2023-21716. Microsoft Word Remote Code Execution Vulnerability

FIRST-EPSS: 0.534690000
NVD-IS: 5.9
NVD-ES: 3.9

#ExploitObserverAlert

CVE-2023-36845

DESCRIPTION: Exploit Observer has 87 entries related to CVE-2023-36845. A PHP External Variable Modification vulnerability in J-Web of Juniper Networks Junos OS on EX Series and SRX Series allows an unauthenticated, network-based attacker to remotely execute code. Using a crafted request which sets the variable PHPRC an attacker is able to modify the PHP execution environment allowing the injection und execution of code. This issue affects Juniper Networks Junos OS on EX Series and SRX Series: * All versions prior to 20.4R3-S9; * 21.1 versions 21.1R1 and later; * 21.2 versions prior to 21.2R3-S7; * 21.3 versions prior to 21.3R3-S5; * 21.4 versions prior to 21.4R3-S5; * 22.1 versions prior to 22.1R3-S4; * 22.2 versions prior to 22.2R3-S2; * 22.3 versions prior to 22.3R2-S2, 22.3R3-S1; * 22.4 versions prior to 22.4R2-S1, 22.4R3; * 23.2 versions prior to 23.2R1-S1, 23.2R2.

FIRST-EPSS: 0.693120000
NVD-IS: 5.9
NVD-ES: 3.9

#ExploitObserverAlert

CVE-2022-1051

DESCRIPTION: Exploit Observer has 5 entries related to CVE-2022-1051. The WPQA Builder Plugin WordPress plugin before 5.2, used as a companion plugin for the Discy and Himer , does not sanitise and escape the city, phone or profile credentials fields when outputting it in the profile page, allowing any authenticated user to perform Cross-Site Scripting attacks.

FIRST-EPSS: 0.000580000
NVD-IS: 2.7
NVD-ES: 2.3

#ExploitObserverAlert

CVE-2020-29028

DESCRIPTION: Exploit Observer has 1 entries related to CVE-2020-29028. Cross-site Scripting (XSS) vulnerability in web GUI of Secomea GateManager allows an attacker to inject arbitrary javascript code. This issue affects: Secomea GateManager all versions prior to 9.4.

FIRST-EPSS: 0.000780000
NVD-IS: 2.7
NVD-ES: 2.8

#ExploitObserverAlert

CVE-2019-3396

DESCRIPTION: Exploit Observer has 109 entries related to CVE-2019-3396. The Widget Connector macro in Atlassian Confluence Server before version 6.6.12 (the fixed version for 6.6.x), from version 6.7.0 before 6.12.3 (the fixed version for 6.12.x), from version 6.13.0 before 6.13.3 (the fixed version for 6.13.x), and from version 6.14.0 before 6.14.2 (the fixed version for 6.14.x), allows remote attackers to achieve path traversal and remote code execution on a Confluence Server or Data Center instance via server-side template injection.

FIRST-EPSS: 0.975070000
NVD-IS: 5.9
NVD-ES: 3.9

#ExploitObserverAlert

CVE-2023-22232

DESCRIPTION: Exploit Observer has 3 entries related to CVE-2023-22232. Adobe Connect versions 11.4.5 (and earlier), 12.1.5 (and earlier) are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to impact the integrity of a minor feature. Exploitation of this issue does not require user interaction.

FIRST-EPSS: 0.096260000
NVD-IS: 1.4
NVD-ES: 3.9

#ExploitObserverAlert

CVE-2023-28771

DESCRIPTION: Exploit Observer has 20 entries related to CVE-2023-28771. Improper error message handling in Zyxel ZyWALL/USG series firmware versions 4.60 through 4.73, VPN series firmware versions 4.60 through 5.35, USG FLEX series firmware versions 4.60 through 5.35, and ATP series firmware versions 4.60 through 5.35, which could allow an unauthenticated attacker to execute some OS commands remotely by sending crafted packets to an affected device.

FIRST-EPSS: 0.923800000
NVD-IS: 5.9
NVD-ES: 3.9

#ExploitObserverAlert

CVE-2022-21661

DESCRIPTION: Exploit Observer has 40 entries related to CVE-2022-21661. WordPress is a free and open-source content management system written in PHP and paired with a MariaDB database. Due to improper sanitization in WP_Query, there can be cases where SQL injection is possible through plugins or themes that use it in a certain way. This has been patched in WordPress version 5.8.3. Older affected versions are also fixed via security release, that go back till 3.7.37. We strongly recommend that you keep auto-updates enabled. There are no known workarounds for this vulnerability.

FIRST-EPSS: 0.937320000
NVD-IS: 3.6
NVD-ES: 3.9

#ExploitObserverAlert

CVE-2023-20052

DESCRIPTION: Exploit Observer has 8 entries related to CVE-2023-20052. On Feb 15, 2023, the following vulnerability in the ClamAV scanning library was disclosed: A vulnerability in the DMG file parser of ClamAV versions 1.0.0 and earlier, 0.105.1 and earlier, and 0.103.7 and earlier could allow an unauthenticated, remote attacker to access sensitive information on an affected device. This vulnerability is due to enabling XML entity substitution that may result in XML external entity injection. An attacker could exploit this vulnerability by submitting a crafted DMG file to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to leak bytes from any file that may be read by the ClamAV scanning process.

FIRST-EPSS: 0.000620000
NVD-IS: 1.4
NVD-ES: 3.9

#ExploitObserverAlert

CVE-2022-3236

DESCRIPTION: Exploit Observer has 17 entries related to CVE-2022-3236. A code injection vulnerability in the User Portal and Webadmin allows a remote attacker to execute code in Sophos Firewall version v19.0 MR1 and older.

FIRST-EPSS: 0.106520000
NVD-IS: 5.9
NVD-ES: 3.9

#ExploitObserverAlert

CVE-2018-6574

DESCRIPTION: Exploit Observer has 123 entries related to CVE-2018-6574. Go before 1.8.7, Go 1.9.x before 1.9.4, and Go 1.10 pre-releases before Go 1.10rc2 allow "go get" remote command execution during source code build, by leveraging the gcc or clang plugin feature, because -fplugin= and -plugin= arguments were not blocked.

FIRST-EPSS: 0.007250000
NVD-IS: 5.9
NVD-ES: 1.8

#ExploitObserverAlert

CVE-2020-0760

DESCRIPTION: Exploit Observer has 1 entries related to CVE-2020-0760. A remote code execution vulnerability exists when Microsoft Office improperly loads arbitrary type libraries, aka 'Microsoft Office Remote Code Execution Vulnerability'. This CVE ID is unique from CVE-2020-0991.

FIRST-EPSS: 0.037990000
NVD-IS: 5.9
NVD-ES: 2.8

#ExploitObserverAlert

CVE-2023-46604

DESCRIPTION: Exploit Observer has 102 entries related to CVE-2023-46604. The Java OpenWire protocol marshaller is vulnerable to Remote Code Execution. This vulnerability may allow a remote attacker with network access to either a Java-based OpenWire broker or client to run arbitrary shell commands by manipulating serialized class types in the OpenWire protocol to cause either the client or the broker (respectively) to instantiate any class on the classpath. Users are recommended to upgrade both brokers and clients to version 5.15.16, 5.16.7, 5.17.6, or 5.18.3 which fixes this issue.

FIRST-EPSS: 0.968050000
NVD-IS: 5.9
NVD-ES: 3.9

#ExploitObserverAlert

CVE-2023-0669

DESCRIPTION: Exploit Observer has 28 entries related to CVE-2023-0669. Fortra (formerly, HelpSystems) GoAnywhere MFT suffers from a pre-authentication command injection vulnerability in the License Response Servlet due to deserializing an arbitrary attacker-controlled object. This issue was patched in version 7.1.2.

FIRST-EPSS: 0.966690000
NVD-IS: 5.9
NVD-ES: 1.2

#ExploitObserverAlert

CVE-2023-26035

DESCRIPTION: Exploit Observer has 1 entries related to CVE-2023-26035. ZoneMinder is a free, open source Closed-circuit television software application for Linux which supports IP, USB and Analog cameras. Versions prior to 1.36.33 and 1.37.33 are vulnerable to Unauthenticated Remote Code Execution via Missing Authorization. There are no permissions check on the snapshot action, which expects an id to fetch an existing monitor but can be passed an object to create a new one instead. TriggerOn ends up calling shell_exec using the supplied Id. This issue is fixed in This issue is fixed in versions 1.36.33 and 1.37.33.

FIRST-EPSS: 0.104040000
NVD-IS: 5.9
NVD-ES: 3.9

#ExploitObserverAlert

CVE-2021-39910

DESCRIPTION: Exploit Observer has 3 entries related to CVE-2021-39910. An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.6 before 14.3.6, all versions starting from 14.4 before 14.4.4, all versions starting from 14.5 before 14.5.2. GitLab was vulnerable to HTML Injection through the Swagger UI feature.

FIRST-EPSS: 0.000890000
NVD-IS: 1.4
NVD-ES: 2.8

#ExploitObserverAlert

CVE-2020-9380

DESCRIPTION: Exploit Observer has 8 entries related to CVE-2020-9380. IPTV Smarters WEB TV PLAYER through 2020-02-22 allows attackers to execute OS commands by uploading a script.

FIRST-EPSS: 0.004190000
NVD-IS: 5.9
NVD-ES: 3.9

#ExploitObserverAlert

CVE-2021-38297

DESCRIPTION: Exploit Observer has 13 entries related to CVE-2021-38297. Go before 1.16.9 and 1.17.x before 1.17.2 has a Buffer Overflow via large arguments in a function invocation from a WASM module, when GOARCH=wasm GOOS=js is used.

FIRST-EPSS: 0.004300000
NVD-IS: 5.9
NVD-ES: 3.9

#ExploitObserverAlert

CVE-2020-8694

DESCRIPTION: Exploit Observer has 6 entries related to CVE-2020-8694. Insufficient access control in the Linux kernel driver for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.

FIRST-EPSS: 0.000450000
NVD-IS: 3.6
NVD-ES: 1.8

#ExploitObserverAlert

CVE-2019-8339

DESCRIPTION: Exploit Observer has 6 entries related to CVE-2019-8339. An issue was discovered in Falco through 0.14.0. A missing indicator for insufficient resources allows local users to bypass the detection engine.

FIRST-EPSS: 0.000420000
NVD-IS: 3.6
NVD-ES: 1.8

#ExploitObserverAlert

CVE-2021-42321

DESCRIPTION: Exploit Observer has 36 entries related to CVE-2021-42321. Microsoft Exchange Server Remote Code Execution Vulnerability

FIRST-EPSS: 0.913120000
NVD-IS: 5.9
NVD-ES: 2.8