Security Vulnerabilities - CVEs Published In 2021
Cross Site Scripting (XSS) vulnerability exists in DamiCMS v6.0.6 via the title parameter in the doadd function in LabelAction.class.php.
CVSS Score
4.8
EPSS Score
0.005
Published
2021-08-12
Cross Site Request Forgery (CSRF) vulnerability in bycms v1.3 via admin.php/systems/index/module_id/70/group_id/1.html.
CVSS Score
6.8
EPSS Score
0.005
Published
2021-08-12
Cross Site Scripting (XSS) vulnerability exists in bycms v3.0.4 via the title parameter in the edit function in Document.php.
CVSS Score
4.8
EPSS Score
0.005
Published
2021-08-12
Cross Site Scripting (XSS) vulnerability exists in PbootCMS v1.3.7 via the title parameter in the mod function in SingleController.php.
CVSS Score
4.8
EPSS Score
0.005
Published
2021-08-12
Cross Site Request Forgery (CSRF) vulnerability exists in bycms v1.3.0 that can add an admin account via admin.php/ucenter/add.html.
CVSS Score
6.8
EPSS Score
0.005
Published
2021-08-12
.NET Core and Visual Studio Denial of Service Vulnerability
CVSS Score
7.5
EPSS Score
0.039
Published
2021-08-12
Windows TCP/IP Remote Code Execution Vulnerability
CVSS Score
9.9
EPSS Score
0.611
Published
2021-08-12
Windows Event Tracing Elevation of Privilege Vulnerability
CVSS Score
7.8
EPSS Score
0.009
Published
2021-08-12
Windows User Account Profile Picture Elevation of Privilege Vulnerability
CVSS Score
7.0
EPSS Score
0.007
Published
2021-08-12
Azure Sphere Information Disclosure Vulnerability
CVSS Score
4.4
EPSS Score
0.009
Published
2021-08-12