Browse CVEs

HIGH 8.8 CVE-2023-24217 AgileBio Electronic Lab Notebook v4.234 was discovered to contain a local file inclusion vulnerability. Electronic Lab Notebook No fix yet Fix from $1,9502023-03-06 CRITICAL 9.8 CVE-2022-4606EPSS 35% PHP Remote File Inclusion in GitHub repository flatpressblog/flatpress prior to 1.3. Flatpress after 1.2.1 Fix from $2,3002022-12-18 CRITICAL 9.8 CVE-2022-4446 PHP Remote File Inclusion in GitHub repository tsolucio/corebos prior to 8.0. Corebos 8.0+ Fix from $2,3002022-12-13 HIGH 7.5 CVE-2022-44786 An issue was discovered in Appalti & Contratti 9.12.2. The target web applications allow Local File Inclusion in any page relying on the href paramet… Appalti \& Contratti No fix yet Fix from $1,9502022-11-21 HIGH 7.5 CVE-2022-41547 Mobile Security Framework (MobSF) v0.9.2 and below was discovered to contain a local file inclusion (LFI) vulnerability in the StaticAnalyzer/views.p… Mobile Security Framework after 0.9.2 Fix from $1,9502022-10-18 CRITICAL 9.8 CVE-2022-40089 A remote file inclusion (RFI) vulnerability in Simple College Website v1.0 allows attackers to execute arbitrary code via a crafted PHP file. This vu… Simple College Website No fix yet Fix from $2,3002022-09-22 HIGH 7.2 CVE-2021-22968 A bypass of adding remote files in Concrete CMS (previously concrete5) File Manager leads to remote code execution in Concrete CMS (concrete5) versio… Concrete Cms 8.5.7+ Fix from $1,9502021-11-19 CRITICAL 9.8 CVE-2021-21804 A local file inclusion (LFI) vulnerability exists in the options.php script functionality of Advantech R-SeeNet v 2.4.12 (20.10.2020). A specially cr… R Seenet No fix yet Fix from $2,3002021-07-16 HIGH 7.5 CVE-2020-13175 The Management Interface of the Teradici Cloud Access Connector and Cloud Access Connector Legacy for releases prior to April 20, 2020 (v15 and earli… Cloud Access Connector 2020-04-20+ Fix from $1,9502020-08-11 HIGH 7.5 CVE-2019-5479 An unintended require vulnerability in <v0.5.5 larvitbase-api may allow an attacker to load arbitrary non-production code (JavaScript file). Larvitbase 0.5.5+ Fix from $1,9502019-09-03 CRITICAL 9.8 CVE-2014-9186 A file inclusion vulnerability exists in the confd.exe module in Honeywell Experion PKS R40x before R400.6, R41x before R410.6, and R43x before R430.… Experion Process Knowledge System Mitigation only Fix from $2,3002019-04-08 MEDIUM 5.4 CVE-2015-6461 Remote file inclusion allows an attacker to craft a specific URL referencing the Schneider Electric Modicon BMXNOC0401, BMXNOE0100, BMXNOE0110, BMXNO… Bmxnoc0401 Firmware Mitigation only Fix from $1,6002019-03-21 HIGH 7.5 CVE-2016-6565 The Imagely NextGen Gallery plugin for Wordpress prior to version 2.1.57 does not properly validate user input in the cssfile parameter of a HTTP POS… Nextgen Gallery 2.1.57+ Fix from $1,9502018-07-13 HIGH 8.1 CVE-2017-14095EPSS 12% A vulnerability in Trend Micro Smart Protection Server (Standalone) versions 3.2 and below could allow an attacker to perform remote command executio… Smart Protection Server after 3.2 Fix from $1,9502018-01-19