Export limit exceeded: 11766 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 11,766

Export CSV
CVE-2021-40387

An issue was discovered in the server software in Kaseya Unitrends Backup Software before 10.5.5-2. There is authenticated remote code execution.

CVSS 3.1 · 8.8 High EPSS 2.4% KEV · Not listed
Vendors
Kaseya
Products
Unitrends Backup Software
CVE-2021-40371

Gridpro Request Management for Windows Azure Pack before 2.0.7912 allows Directory Traversal for remote code execution, as demonstrated by ..\\ in a scriptName JSON value to ServiceManagerTenant/GetVisibilityMap.

CVSS 3.1 · 9.8 Critical EPSS 7.1% KEV · Not listed
Vendors
Gridprosoftware
Products
Request Management
CVE-2021-40323

cobbler: Arbitrary File Disclosure/Template Injection via generate_script RPC method

Cobbler before 3.3.0 allows log poisoning, and resultant Remote Code Execution, via an XMLRPC method that logs to the logfile for template injection.

CVSS 3.1 · 9.8 Critical EPSS 86.8% KEV · Not listed
Vendors
Cobbler Project
Products
Cobbler
CVE-2021-40238

A Cross Site Scriptiong (XSS) vulnerability exists in the admin panel in Webuzo < 2.9.0 via an HTTP request to a non-existent page, which is activated by administrators viewing the "Error Log" page. An attacker can leverage this to achieve Unauthenticated Remote Code Execution via the "Cron Jobs" functionality of Webuzo.

CVSS 3.1 · 6.1 Medium EPSS 1.0% KEV · Not listed
Vendors
Webuzo
Products
Webuzo
CVE-2021-40222

Rittal CMC PU III Web management Version affected: V3.11.00_2. Version fixed: V3.17.10 is affected by a remote code execution vulnerablity. It is possible to introduce shell code to create a reverse shell in the PU-Hostname field of the TCP/IP Configuration dialog. Web application fails to sanitize user input on Network TCP/IP configuration page. This allows the attacker to inject commands as root on the device which will be executed once the data is received.

CVSS 3.1 · 7.2 High EPSS 4.7% KEV · Not listed
Vendors
Rittal
Products
Cmc Pu Iii 7030.000 Cmc Pu Iii 7030.000 Firmware
CVE-2021-40219

Bolt CMS <= 4.2 is vulnerable to Remote Code Execution. Unsafe theme rendering allows an authenticated attacker to edit theme to inject server-side template injection that leads to remote code execution.

CVSS 3.1 · 8.8 High EPSS 3.4% KEV · Not listed
Vendors
Bolt
Products
Bolt Cms
CVE-2021-40189

PHPFusion 9.03.110 is affected by a remote code execution vulnerability. The theme function will extract a file to "webroot/themes/{Theme Folder], where an attacker can access and execute arbitrary code.

CVSS 3.1 · 7.2 High EPSS 1.8% KEV · Not listed
Vendors
Php-fusion
Products
Phpfusion