From b3fbb55e5c824c7128eccb06d5c55c0685d00546 Mon Sep 17 00:00:00 2001 From: CVE-BOT Date: Thu, 3 Sep 2026 09:02:28 +0000 Subject: [PATCH] Sync nuclei templates 2026-09-03 :robot: --- index/cve_record_state.json | 2 +- index/nuclei.json | 6778 +++++++++++++++++------------------ 2 files changed, 3390 insertions(+), 3390 deletions(-) diff --git a/index/cve_record_state.json b/index/cve_record_state.json index cbaab26616c..cfa11788c1a 100644 --- a/index/cve_record_state.json +++ b/index/cve_record_state.json @@ -1 +1 @@ -{"CVE-1999-0110":{"checked":"2026-09-01","status":"REJECTED"},"CVE-1999-0335":{"checked":"2026-09-01","status":"REJECTED"},"CVE-1999-0531":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2002-0192":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2002-0828":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2003-0090":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2005-0122":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2005-0153":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2005-1032":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2005-2116":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2005-2303":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2005-4633":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2006-3866":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2006-4216":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2007-1570":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2007-5125":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2008-2737":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2008-4042":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2008-4112":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2008-4189":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2008-4270":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2008-6049":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2008-6628":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2009-0300":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2009-0795":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2009-2259":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2010-0368":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2010-2782":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2010-2972":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2010-3885":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2011-0108":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2011-1656":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2011-2553":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2011-3633":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2011-4779":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2011-5232":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2012-0722":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2012-1300":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2012-1304":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2012-1305":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2012-1309":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2012-1913":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2012-2216":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2012-2344":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2012-2765":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2012-3539":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2012-4748":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2012-4749":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2012-6315":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2012-6679":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2013-1298":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2013-1625":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2013-1805":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2013-2649":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2013-2749":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2013-3130":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2013-4266":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2013-5575":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2013-5581":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2013-5621":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2013-5622":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2013-5623":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2013-5624":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2013-5625":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2013-5627":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2013-5628":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2013-5630":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2013-5631":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2013-5632":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2013-5633":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2013-5689":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2013-5759":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2014-0982":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2014-1004":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2014-1137":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2014-1155":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2014-1470":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2014-2085":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2014-2239":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2014-2923":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2014-2937":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2014-2973":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2014-3212":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2014-3736":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2014-4321":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2014-5469":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2014-62771":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2014-7196":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2014-7227":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2014-8729":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2015-0975":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2015-2231":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2015-4107":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2015-5437":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2016-1000249":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2016-16113":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2016-2534":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2016-3942":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2016-5641":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2016-582384":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2016-6584":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2017-10797":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2017-11735":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2017-12854":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2017-15083":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2017-16245":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2017-2796":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2017-9410":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2017-9411":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2018-1000859":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2018-10818":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2018-12938":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2018-16341":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2018-17255":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2018-17793":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2018-9131":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2018-9546":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2019-10843":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2019-11563":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2019-11631":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2019-13491":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2019-16270":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2019-17591":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2019-19369":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2019-19511":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2019-8627":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2019-89242":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2020-11794":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2020-13457":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2020-15808":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2020-17008":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2020-17558":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2020-18471":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2020-24597":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2020-256480":{"checked":"2026-09-01","status":"UNAVAILABLE"},"CVE-2020-25769":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2020-28148":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2020-28320":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2020-28913":{"checked":"2026-09-01","status":"UNAVAILABLE"},"CVE-2020-3019":{"checked":"2026-09-01","status":"UNAVAILABLE"},"CVE-2020-7897":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2020-8451":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2020-9373":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2021-10086":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2021-26292":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2021-268855":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2021-27748":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2021-28073":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2021-28854":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2021-3157":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2021-3360":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2021-34045":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2021-41703":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2021-41730":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2021-44909":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2021-44910":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2021-4773":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2022-10270":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2022-23361":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2022-24087":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2022-24638":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2022-25063":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2022-25257":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2022-27414":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2022-30507":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2022-31297":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2022-32132":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2022-35543":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2022-36162":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2022-37206":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2022-37210":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2022-43128":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2022-46104":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2023-1434":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2023-24749":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2023-24787":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2023-30033":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2023-30190":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2023-31070":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2023-31711":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2023-34584":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2023-34632":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2023-34804":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2023-38820":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2023-38821":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2023-38822":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2023-39024":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2023-39120":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2023-41533":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2023-41534":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2023-41535":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2023-47400":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2023-49496":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2023-50596":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2023-51119":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2023-52709":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2024-0070":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2024-12537":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2024-22890":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2024-22909":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2024-23700":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2024-23780":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2024-24137":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2024-24138":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2024-25733":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2024-27697":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2024-29410":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2024-30956":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2024-31969":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2024-33352":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2024-37010":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2024-39199":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2024-40080":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2024-41301":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2024-41302":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2024-41312":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2024-415770":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2024-44346":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2024-45427":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2024-48762":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2024-50961":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2024-57366":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2025-0655":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2025-13834":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2025-14269":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2025-25369":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2025-25599":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2025-25964":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2025-25965":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2025-26244":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2025-28269":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2025-29279":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2025-30374":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2025-34085":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2025-4162026":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2025-4162028":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2025-45407":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2025-45955":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2025-46181":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2025-471812":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2025-47810":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2025-48932":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2025-49173":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2025-51820":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2025-52097":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2025-52099":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2025-52100":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2025-52399":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2025-55349":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2025-55616":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2025-55854":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2025-55891":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2025-58440":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2025-59396":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2025-60423":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2025-60655":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2025-60752":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2025-61299":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2025-62639":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2025-63820":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2025-63821":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2025-65852":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2025-65862":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2025-66478":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2025-66849":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2025-67435":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2025-68413":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2025-69457":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2025-69458":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2025-69459":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2025-69460":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2025-71384":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2025-81110":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2025-99999":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2026-0101":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2026-12072":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-12243":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2026-12876":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-16475":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2026-24102":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2026-26898":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2026-26903":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2026-2828":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2026-30502":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2026-30503":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2026-30762":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-31024":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2026-31367":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2026-33864":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-35330":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2026-35333":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2026-36522":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2026-36980":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2026-36981":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2026-37196":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2026-37432":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2026-38053":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2026-39023":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2026-39154":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2026-39200":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2026-39949":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2026-42940":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2026-44179":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-44402":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2026-45262":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-45693":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-45710":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-47132":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-47252":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-47253":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-47256":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-47677":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-48987":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-49259":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-49439":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-49446":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-49836":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-49838":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-49865":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2026-50006":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-50013":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-50018":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-50125":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-50158":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-50553":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-50554":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-51133":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2026-51134":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2026-51302":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2026-51592":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2026-52763":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-52766":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-52767":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-52769":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-52770":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-52771":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-52772":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-52773":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-52774":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-52777":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-52824":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2026-53496":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-53613":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2026-53625":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2026-53629":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2026-53708":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-53710":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-53728":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-53760":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-53769":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-53921":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2026-53957":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-54049":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-54065":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-54155":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-54161":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2026-5432":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2026-54337":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2026-54446":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-54450":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-54451":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-54546":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-54547":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-54549":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-54596":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2026-54597":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2026-54617":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-54628":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-54629":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-54637":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-54640":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-54641":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-54644":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2026-54645":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2026-54646":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2026-54647":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2026-54683":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-54688":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-54689":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-55062":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-55071":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-55072":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-55107":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-55149":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-55156":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-55157":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-55224":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2026-55372":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-55494":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2026-55512":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-55513":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-55591":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-55636":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-55650":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-55691":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-55692":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-55770":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-55775":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-55786":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-55832":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-55837":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-55846":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-55847":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-55863":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-56158":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2026-56840":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-57115":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-57119":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-57120":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-57121":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-57122":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-57123":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-57124":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-57125":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-57127":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-57128":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-57129":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-57130":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-57131":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-57141":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-57143":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-57145":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-57147":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-57148":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-57155":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2026-57168":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-57496":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-57582":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2026-58196":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-59774":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2026-6018":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2026-61699":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-61798":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-61799":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-62958":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2026-63124":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-63202":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-63505":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2026-6789":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2026-69212":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2026-72585":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2026-7275":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2026-77622":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2026-8462":{"checked":"2026-09-03","status":"UNAVAILABLE"}} +{"CVE-1999-0110":{"checked":"2026-09-01","status":"REJECTED"},"CVE-1999-0335":{"checked":"2026-09-01","status":"REJECTED"},"CVE-1999-0531":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2002-0192":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2002-0828":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2003-0090":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2005-0122":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2005-0153":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2005-1032":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2005-2116":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2005-2303":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2005-4633":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2006-3866":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2006-4216":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2007-1570":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2007-5125":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2008-2737":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2008-4042":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2008-4112":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2008-4189":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2008-4270":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2008-6049":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2008-6628":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2009-0300":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2009-0795":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2009-2259":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2010-0368":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2010-2782":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2010-2972":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2010-3885":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2011-0108":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2011-1656":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2011-2553":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2011-3633":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2011-4779":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2011-5232":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2012-0722":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2012-1300":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2012-1304":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2012-1305":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2012-1309":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2012-1913":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2012-2216":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2012-2344":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2012-2765":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2012-3539":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2012-4748":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2012-4749":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2012-6315":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2012-6679":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2013-1298":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2013-1625":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2013-1805":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2013-2649":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2013-2749":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2013-3130":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2013-4266":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2013-5575":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2013-5581":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2013-5621":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2013-5622":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2013-5623":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2013-5624":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2013-5625":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2013-5627":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2013-5628":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2013-5630":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2013-5631":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2013-5632":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2013-5633":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2013-5689":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2013-5759":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2014-0982":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2014-1004":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2014-1137":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2014-1155":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2014-1470":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2014-2085":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2014-2239":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2014-2923":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2014-2937":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2014-2973":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2014-3212":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2014-3736":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2014-4321":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2014-5469":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2014-62771":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2014-7196":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2014-7227":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2014-8729":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2015-0975":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2015-2231":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2015-4107":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2015-5437":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2016-1000249":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2016-16113":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2016-2534":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2016-3942":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2016-5641":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2016-582384":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2016-6584":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2017-10797":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2017-11735":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2017-12854":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2017-15083":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2017-16245":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2017-2796":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2017-9410":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2017-9411":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2018-1000859":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2018-10818":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2018-12938":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2018-16341":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2018-17255":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2018-17793":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2018-9131":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2018-9546":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2019-10843":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2019-11563":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2019-11631":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2019-13491":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2019-16270":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2019-17591":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2019-19369":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2019-19511":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2019-8627":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2019-89242":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2020-11794":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2020-13457":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2020-15808":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2020-17008":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2020-17558":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2020-18471":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2020-24597":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2020-256480":{"checked":"2026-09-01","status":"UNAVAILABLE"},"CVE-2020-25769":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2020-28148":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2020-28320":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2020-28913":{"checked":"2026-09-01","status":"UNAVAILABLE"},"CVE-2020-3019":{"checked":"2026-09-01","status":"UNAVAILABLE"},"CVE-2020-7897":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2020-8451":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2020-9373":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2021-10086":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2021-26292":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2021-268855":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2021-27748":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2021-28073":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2021-28854":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2021-3157":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2021-3360":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2021-34045":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2021-41703":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2021-41730":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2021-44909":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2021-44910":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2021-4773":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2022-10270":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2022-23361":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2022-24087":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2022-24638":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2022-25063":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2022-25257":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2022-27414":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2022-30507":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2022-31297":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2022-32132":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2022-35543":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2022-36162":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2022-37206":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2022-37210":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2022-43128":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2022-46104":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2023-1434":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2023-24749":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2023-24787":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2023-30033":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2023-30190":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2023-31070":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2023-31711":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2023-34584":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2023-34632":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2023-34804":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2023-38820":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2023-38821":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2023-38822":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2023-39024":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2023-39120":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2023-41533":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2023-41534":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2023-41535":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2023-47400":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2023-49496":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2023-50596":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2023-51119":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2023-52709":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2024-0070":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2024-12537":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2024-22890":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2024-22909":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2024-23700":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2024-23780":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2024-24137":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2024-24138":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2024-25733":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2024-27697":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2024-29410":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2024-30956":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2024-31969":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2024-33352":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2024-37010":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2024-39199":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2024-40080":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2024-41301":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2024-41302":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2024-41312":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2024-415770":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2024-44346":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2024-45427":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2024-48762":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2024-50961":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2024-57366":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2025-0655":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2025-13834":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2025-14269":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2025-25369":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2025-25599":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2025-25964":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2025-25965":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2025-26244":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2025-28269":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2025-29279":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2025-30374":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2025-34085":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2025-4162026":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2025-4162028":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2025-45407":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2025-45955":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2025-46181":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2025-471812":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2025-47810":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2025-48932":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2025-49173":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2025-51820":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2025-52097":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2025-52099":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2025-52100":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2025-52399":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2025-55349":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2025-55616":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2025-55854":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2025-55891":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2025-58440":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2025-59396":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2025-60423":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2025-60655":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2025-60752":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2025-61299":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2025-62639":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2025-63820":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2025-63821":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2025-65852":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2025-65862":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2025-66478":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2025-66849":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2025-67435":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2025-68413":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2025-69457":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2025-69458":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2025-69459":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2025-69460":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2025-71384":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2025-81110":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2025-99999":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2026-0101":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2026-12072":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-12243":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2026-12876":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-16475":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2026-24102":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2026-26898":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2026-26903":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2026-2828":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2026-30502":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2026-30503":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2026-30762":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-31024":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2026-31367":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2026-33864":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-35330":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2026-35333":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2026-36522":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2026-36980":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2026-36981":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2026-37196":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2026-37432":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2026-38053":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2026-39023":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2026-39154":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2026-39200":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2026-39949":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2026-42940":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2026-44179":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-44402":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2026-45262":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-45693":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-45710":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-47132":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-47252":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-47253":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-47256":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-47677":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-48987":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-49259":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-49439":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-49446":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-49836":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-49838":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-49865":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2026-50006":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-50013":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-50018":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-50125":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-50158":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-50553":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-50554":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-51133":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2026-51134":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2026-51302":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2026-51592":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2026-52763":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-52766":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-52767":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-52769":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-52770":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-52771":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-52772":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-52773":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-52774":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-52777":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-52824":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-53496":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-53613":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2026-53625":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2026-53629":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-53708":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-53710":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-53728":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-53760":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-53769":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-53921":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2026-53957":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-54049":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-54065":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-54155":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-54161":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2026-5432":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2026-54337":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2026-54446":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-54450":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-54451":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-54546":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-54547":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-54549":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-54596":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2026-54597":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2026-54617":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-54628":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-54629":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-54637":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-54640":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-54641":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-54644":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2026-54645":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2026-54646":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2026-54647":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2026-54683":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-54688":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-54689":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-55062":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-55071":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-55072":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-55107":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-55149":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-55156":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-55157":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-55224":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-55372":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-55494":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2026-55512":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-55513":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-55591":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-55636":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-55650":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-55691":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-55692":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-55770":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-55775":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-55786":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-55832":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-55837":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-55846":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-55847":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-55863":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-56158":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2026-56840":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-57115":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-57119":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-57120":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-57121":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-57122":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-57123":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-57124":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-57125":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-57127":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-57128":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-57129":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-57130":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-57131":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-57141":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-57143":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-57145":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-57147":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-57148":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-57155":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2026-57168":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-57496":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-57582":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-58196":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-59774":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-6018":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2026-61699":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-61798":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-61799":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-62958":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2026-63124":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-63202":{"checked":"2026-09-03","status":"UNAVAILABLE"},"CVE-2026-63505":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2026-6789":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2026-69212":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2026-72585":{"checked":"2026-09-01","status":"REJECTED"},"CVE-2026-7275":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2026-77622":{"checked":"2026-09-02","status":"UNAVAILABLE"},"CVE-2026-8462":{"checked":"2026-09-03","status":"UNAVAILABLE"}} diff --git a/index/nuclei.json b/index/nuclei.json index 83a1064d8ec..8e59ab3b8f0 100644 --- a/index/nuclei.json +++ b/index/nuclei.json @@ -43,7 +43,7 @@ "cvss": 5.3, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "epss": 0.47595, -"epss_pct": 0.98758, +"epss_pct": 0.9876, "name": "Microsoft FrontPage Extensions - Information Disclosure", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2000/CVE-2000-0114.yaml" @@ -52,7 +52,7 @@ "cvss": 6.4, "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:N", "epss": 0.62496, -"epss_pct": 0.99126, +"epss_pct": 0.99128, "name": "Jakarta Tomcat 3.1 and 3.0 - Information Disclosure", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2000/CVE-2000-0760.yaml" @@ -72,7 +72,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P", "cwe": "CWE-310", "epss": 0.06268, -"epss_pct": 0.93073, +"epss_pct": 0.9308, "name": "Deprecated SSHv1 Protocol Detection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2001/CVE-2001-1473.yaml" @@ -82,7 +82,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P", "cwe": "CWE-80", "epss": 0.25562, -"epss_pct": 0.97806, +"epss_pct": 0.97808, "name": "SquirrelMail 1.2.6/1.2.7 - Cross-Site Scripting", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2002/CVE-2002-1131.yaml" @@ -105,7 +105,7 @@ "cvss": 5.0, "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:N/I:N/A:P", "epss": 0.07672, -"epss_pct": 0.94162, +"epss_pct": 0.94169, "name": "Titan FTP Server 3.01 - DoS via LIST Command Disconnection", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2004/CVE-2004-0437.yaml" @@ -114,7 +114,7 @@ "cvss": 6.8, "cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:P", "epss": 0.22528, -"epss_pct": 0.9754, +"epss_pct": 0.97543, "name": "SquirrelMail 1.4.x - Folder Name Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2004/CVE-2004-0519.yaml" @@ -123,7 +123,7 @@ "cvss": 5.0, "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:N/I:N/A:P", "epss": 0.02349, -"epss_pct": 0.82498, +"epss_pct": 0.8252, "name": "Pure-FTPd \u2264 1.0.18 - DoS via Connection Limit Exhaustion", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2004/CVE-2004-0656.yaml" @@ -147,7 +147,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N", "cwe": "CWE-203", "epss": 0.30679, -"epss_pct": 0.98114, +"epss_pct": 0.98116, "name": "ProFTPD 1.2.x - Username Enumeration via Timing Attack", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2004/CVE-2004-1602.yaml" @@ -156,7 +156,7 @@ "cvss": 5.0, "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:N/I:N/A:P", "epss": 0.0824, -"epss_pct": 0.94492, +"epss_pct": 0.94499, "name": "Titan FTP \u2264 3.21 - Heap Overflow via Long Commands", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2004/CVE-2004-1641.yaml" @@ -165,7 +165,7 @@ "cvss": 4.3, "cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:N", "epss": 0.09001, -"epss_pct": 0.94897, +"epss_pct": 0.94903, "name": "Open Bulletin Board (OpenBB) v1.0.6 - Open Redirect/XSS", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2004/CVE-2004-1965.yaml" @@ -185,7 +185,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:N/I:N/A:P", "cwe": "CWE-20", "epss": 0.0219, -"epss_pct": 0.81175, +"epss_pct": 0.81196, "name": "FileZilla Server < 0.9.6 - DoS via MS-DOS Device Names", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2005/CVE-2005-0850.yaml" @@ -195,7 +195,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:N/I:N/A:P", "cwe": "CWE-835", "epss": 0.0219, -"epss_pct": 0.81175, +"epss_pct": 0.81196, "name": "FileZilla Server < 0.9.6 - DoS via MODE Z Infinite Loop", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2005/CVE-2005-0851.yaml" @@ -278,7 +278,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-80", "epss": 0.03436, -"epss_pct": 0.88126, +"epss_pct": 0.8814, "name": "SquirrelMail Address Add 1.4.2 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2005/CVE-2005-3128.yaml" @@ -287,7 +287,7 @@ "cvss": 10.0, "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:C/A:C", "epss": 0.07986, -"epss_pct": 0.94346, +"epss_pct": 0.94354, "name": "Horde Groupware Unauthenticated Admin Access", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2005/CVE-2005-3344.yaml" @@ -296,7 +296,7 @@ "cvss": 5.0, "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:N/I:P/A:N", "epss": 0.17757, -"epss_pct": 0.96945, +"epss_pct": 0.96949, "name": "SAP Web Application Server 6.x/7.0 - Open Redirect", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2005/CVE-2005-3634.yaml" @@ -305,7 +305,7 @@ "cvss": 4.3, "cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:N", "epss": 0.08836, -"epss_pct": 0.94822, +"epss_pct": 0.94828, "name": "Cofax <=2.0RC3 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2005/CVE-2005-4385.yaml" @@ -349,7 +349,7 @@ "cvss": 4.3, "cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:N", "epss": 0.06643, -"epss_pct": 0.93393, +"epss_pct": 0.93401, "name": "Cherokee HTTPD <=0.5 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2006/CVE-2006-1681.yaml" @@ -365,7 +365,7 @@ "cvss": 6.4, "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:N/I:P/A:P", "epss": 0.06499, -"epss_pct": 0.9328, +"epss_pct": 0.93288, "name": "FileZilla FTP Server 2.2.22 - Buffer Overflow", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2006/CVE-2006-2173.yaml" @@ -389,7 +389,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P", "cwe": "CWE-22", "epss": 0.47196, -"epss_pct": 0.9875, +"epss_pct": 0.98753, "name": "Squirrelmail <=1.4.6 - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2006/CVE-2006-2842.yaml" @@ -451,7 +451,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:S/C:N/I:N/A:P", "cwe": "CWE-476", "epss": 0.71504, -"epss_pct": 0.9937, +"epss_pct": 0.99372, "name": "FileZilla Server < 0.9.22 - DoS via Wildcard Commands", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2006/CVE-2006-6565.yaml" @@ -516,7 +516,7 @@ "cvss": 6.8, "cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:P", "epss": 0.05472, -"epss_pct": 0.92198, +"epss_pct": 0.92208, "name": "Jira Rainbow.Zen - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2007/CVE-2007-0885.yaml" @@ -606,7 +606,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:C/A:C", "cwe": "CWE-20", "epss": 0.97407, -"epss_pct": 0.99893, +"epss_pct": 0.99894, "name": "Alcatel-Lucent OmniPCX - Remote Command Execution", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2007/CVE-2007-3010.yaml" @@ -665,7 +665,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N", "cwe": "CWE-22", "epss": 0.09491, -"epss_pct": 0.95085, +"epss_pct": 0.9509, "name": "Joomla! RSfiles <=1.0.2 - Local File Inclusion", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2007/CVE-2007-4504.yaml" @@ -681,7 +681,7 @@ "cvss": 6.8, "cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:P", "epss": 0.25749, -"epss_pct": 0.97818, +"epss_pct": 0.97821, "name": "OpenSymphony XWork/Apache Struts2 - Remote Code Execution", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2007/CVE-2007-4556.yaml" @@ -726,7 +726,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:N", "cwe": "CWE-79", "epss": 0.14639, -"epss_pct": 0.96407, +"epss_pct": 0.96412, "name": "phpPgAdmin <=4.1.1 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2007/CVE-2007-5728.yaml" @@ -785,7 +785,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:C/I:C/A:C", "cwe": "CWE-119", "epss": 0.07707, -"epss_pct": 0.94183, +"epss_pct": 0.9419, "name": "Titan FTP Server 6.03 and 6.0.5.549 - Heap Overflow via Long Commands", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2008/CVE-2008-0702.yaml" @@ -795,7 +795,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P", "cwe": "CWE-94", "epss": 0.48329, -"epss_pct": 0.98775, +"epss_pct": 0.98777, "name": "WordPress Sniplets 1.1.2 - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2008/CVE-2008-1059.yaml" @@ -805,7 +805,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:N", "cwe": "CWE-79", "epss": 0.074, -"epss_pct": 0.93992, +"epss_pct": 0.93999, "name": "WordPress Sniplets <=1.2.2 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2008/CVE-2008-1061.yaml" @@ -822,7 +822,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:N", "cwe": "CWE-601", "epss": 0.48137, -"epss_pct": 0.9877, +"epss_pct": 0.98772, "name": "Microsoft OWA Exchange Server 2003 - 'redir.asp' Open Redirection", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2008/CVE-2008-1547.yaml" @@ -839,7 +839,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-601", "epss": 0.01568, -"epss_pct": 0.73602, +"epss_pct": 0.73633, "name": "Bitrix Site Manager 6.5 - Open Redirect", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2008/CVE-2008-2052.yaml" @@ -870,7 +870,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:N", "cwe": "CWE-79", "epss": 0.06232, -"epss_pct": 0.9304, +"epss_pct": 0.93046, "name": "AppServ Open Project <=2.5.10 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2008/CVE-2008-2398.yaml" @@ -880,7 +880,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:P", "cwe": "CWE-22", "epss": 0.18809, -"epss_pct": 0.97076, +"epss_pct": 0.97079, "name": "CMSimple 3.1 - Local File Inclusion", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2008/CVE-2008-2650.yaml" @@ -918,7 +918,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:P/A:P", "cwe": "CWE-22", "epss": 0.21476, -"epss_pct": 0.97439, +"epss_pct": 0.97442, "name": "Joomla! Image Browser 0.1.5 rc2 - Local File Inclusion", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2008/CVE-2008-4668.yaml" @@ -935,7 +935,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N", "cwe": "CWE-22", "epss": 0.16505, -"epss_pct": 0.96763, +"epss_pct": 0.96767, "name": "Joomla! <=2.0.0 RC2 - Local File Inclusion", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2008/CVE-2008-4764.yaml" @@ -959,7 +959,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:C/A:C", "cwe": "CWE-119", "epss": 0.06401, -"epss_pct": 0.93184, +"epss_pct": 0.9319, "name": "Titan FTP Server 6.05 DELE Command - Heap Overflow", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2008/CVE-2008-5281.yaml" @@ -969,7 +969,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:N/A:N", "cwe": "CWE-22", "epss": 0.12865, -"epss_pct": 0.96019, +"epss_pct": 0.96024, "name": "phpPgAdmin <=4.2.1 - Local File Inclusion", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2008/CVE-2008-5587.yaml" @@ -986,7 +986,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N", "cwe": "CWE-22", "epss": 0.10637, -"epss_pct": 0.95471, +"epss_pct": 0.95478, "name": "Joomla! ionFiles 4.4.2 - Local File Inclusion", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2008/CVE-2008-6080.yaml" @@ -996,7 +996,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:P", "cwe": "CWE-22", "epss": 0.12284, -"epss_pct": 0.95895, +"epss_pct": 0.959, "name": "Joomla! Component RWCards 3.0.11 - Local File Inclusion", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2008/CVE-2008-6172.yaml" @@ -1006,7 +1006,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N", "cwe": "CWE-22", "epss": 0.11497, -"epss_pct": 0.95711, +"epss_pct": 0.95716, "name": "Joomla! ProDesk 1.0/1.2 - Local File Inclusion", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2008/CVE-2008-6222.yaml" @@ -1016,7 +1016,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:N", "cwe": "CWE-79", "epss": 0.05114, -"epss_pct": 0.91785, +"epss_pct": 0.91795, "name": "Parallels H-Sphere 3.0.0 P9/3.1 P1 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2008/CVE-2008-6465.yaml" @@ -1026,7 +1026,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N", "cwe": "CWE-22", "epss": 0.15346, -"epss_pct": 0.96531, +"epss_pct": 0.96535, "name": "nweb2fax <=0.2.7 - Local File Inclusion", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2008/CVE-2008-6668.yaml" @@ -1050,7 +1050,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:N", "cwe": "CWE-79", "epss": 0.05735, -"epss_pct": 0.9252, +"epss_pct": 0.92529, "name": "Devalcms 1.4a - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2008/CVE-2008-6982.yaml" @@ -1060,7 +1060,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:P", "cwe": "CWE-20", "epss": 0.08391, -"epss_pct": 0.94576, +"epss_pct": 0.94583, "name": "UC Gateway Investment SiteEngine v5.0 - Open Redirect", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2008/CVE-2008-7269.yaml" @@ -1070,7 +1070,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:P", "cwe": "CWE-59", "epss": 0.10932, -"epss_pct": 0.95564, +"epss_pct": 0.95569, "name": "Autonomy Ultraseek - Open Redirect", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2009/CVE-2009-0347.yaml" @@ -1090,7 +1090,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:N/A:P", "cwe": "CWE-120", "epss": 0.03421, -"epss_pct": 0.88066, +"epss_pct": 0.88079, "name": "FileZilla Server < 0.9.31 - SSL/TLS Packet Overflow DoS", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2009/CVE-2009-0884.yaml" @@ -1100,7 +1100,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:N", "cwe": "CWE-22", "epss": 0.45764, -"epss_pct": 0.98711, +"epss_pct": 0.98713, "name": "Horde/Horde Groupware - Local File Inclusion", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2009/CVE-2009-0932.yaml" @@ -1127,7 +1127,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N", "cwe": "CWE-22", "epss": 0.07183, -"epss_pct": 0.9385, +"epss_pct": 0.93857, "name": "Joomla! Cmimarketplace 0.1 - Local File Inclusion", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2009/CVE-2009-1496.yaml" @@ -1137,7 +1137,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:N/A:N", "cwe": "CWE-22", "epss": 0.29821, -"epss_pct": 0.98069, +"epss_pct": 0.98071, "name": "Cisco Linksys WVC54GCA 1.00R22/1.00R24 - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2009/CVE-2009-1558.yaml" @@ -1147,7 +1147,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:N", "cwe": "CWE-79", "epss": 0.16083, -"epss_pct": 0.96687, +"epss_pct": 0.96691, "name": "Adobe Coldfusion <=8.0.1 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2009/CVE-2009-1872.yaml" @@ -1157,7 +1157,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P", "cwe": "CWE-22", "epss": 0.06507, -"epss_pct": 0.93285, +"epss_pct": 0.93293, "name": "Joomla! MooFAQ 1.0 - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2009/CVE-2009-2015.yaml" @@ -1167,7 +1167,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N", "cwe": "CWE-22", "epss": 0.08229, -"epss_pct": 0.94487, +"epss_pct": 0.94494, "name": "Joomla! JoomlaPraise Projectfork 2.0.10 - Local File Inclusion", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2009/CVE-2009-2100.yaml" @@ -1240,7 +1240,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:P", "cwe": "CWE-22", "epss": 0.05925, -"epss_pct": 0.9273, +"epss_pct": 0.92739, "name": "Joomla! Agora 3.0.0b - Local File Inclusion", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2009/CVE-2009-3053.yaml" @@ -1250,7 +1250,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P", "cwe": "CWE-22", "epss": 0.06455, -"epss_pct": 0.93243, +"epss_pct": 0.93251, "name": "Joomla! Roland Breedveld Album 1.14 - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2009/CVE-2009-3318.yaml" @@ -1281,7 +1281,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P", "cwe": "CWE-22", "epss": 0.08109, -"epss_pct": 0.94421, +"epss_pct": 0.94428, "name": "Joomla! Omilen Photo Gallery 0.5b - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2009/CVE-2009-4202.yaml" @@ -1301,7 +1301,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P", "cwe": "CWE-22", "epss": 0.07866, -"epss_pct": 0.94276, +"epss_pct": 0.94284, "name": "Joomla! Portfolio Nexus - Remote File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2009/CVE-2009-4679.yaml" @@ -1311,7 +1311,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:P", "cwe": "CWE-20", "epss": 0.03488, -"epss_pct": 0.8831, +"epss_pct": 0.88324, "name": "AWStats < 6.95 - Open Redirect", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2009/CVE-2009-5020.yaml" @@ -1321,7 +1321,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N", "cwe": "CWE-22", "epss": 0.13298, -"epss_pct": 0.96116, +"epss_pct": 0.9612, "name": "WebGlimpse 2.18.7 - Directory Traversal", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2009/CVE-2009-5114.yaml" @@ -1331,7 +1331,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P", "cwe": "CWE-22", "epss": 0.12969, -"epss_pct": 0.96041, +"epss_pct": 0.96045, "name": "Joomla! Component com_biblestudy - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-0157.yaml" @@ -1351,7 +1351,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N", "cwe": "CWE-22", "epss": 0.43296, -"epss_pct": 0.98631, +"epss_pct": 0.98634, "name": "Joomla! Component CCNewsLetter - Local File Inclusion", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-0467.yaml" @@ -1368,7 +1368,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N", "cwe": "CWE-22", "epss": 0.28222, -"epss_pct": 0.97975, +"epss_pct": 0.97977, "name": "Joomla! Component Jw_allVideos - Arbitrary File Retrieval", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-0696.yaml" @@ -1378,7 +1378,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P", "cwe": "CWE-22", "epss": 0.15242, -"epss_pct": 0.96516, +"epss_pct": 0.9652, "name": "Joomla! Plugin Core Design Scriptegrator - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-0759.yaml" @@ -1388,7 +1388,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N", "cwe": "CWE-22", "epss": 0.0724, -"epss_pct": 0.93885, +"epss_pct": 0.93892, "name": "Joomla! Component com_jvideodirect - Directory Traversal", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-0942.yaml" @@ -1398,7 +1398,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N", "cwe": "CWE-22", "epss": 0.16358, -"epss_pct": 0.96735, +"epss_pct": 0.96739, "name": "Joomla! Component com_jashowcase - Directory Traversal", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-0943.yaml" @@ -1408,7 +1408,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N", "cwe": "CWE-22", "epss": 0.14041, -"epss_pct": 0.96291, +"epss_pct": 0.96295, "name": "Joomla! Component com_jcollection - Directory Traversal", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-0944.yaml" @@ -1418,7 +1418,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P", "cwe": "CWE-22", "epss": 0.13257, -"epss_pct": 0.96107, +"epss_pct": 0.96112, "name": "Joomla! Component com_gcalendar Suite 2.1.5 - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-0972.yaml" @@ -1427,8 +1427,8 @@ "cvss": 4.3, "cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:N/A:N", "cwe": "CWE-22", -"epss": 0.06238, -"epss_pct": 0.93045, +"epss": 0.06885, +"epss_pct": 0.93602, "name": "Joomla! Component com_cartweberp - Local File Inclusion", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-0982.yaml" @@ -1438,7 +1438,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P", "cwe": "CWE-22", "epss": 0.13095, -"epss_pct": 0.96077, +"epss_pct": 0.96081, "name": "Joomla! Component com_abbrev - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-0985.yaml" @@ -1448,7 +1448,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:P", "cwe": "CWE-22", "epss": 0.11414, -"epss_pct": 0.95691, +"epss_pct": 0.95696, "name": "Joomla! Component com_rokdownloads - Local File Inclusion", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1056.yaml" @@ -1458,7 +1458,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N", "cwe": "CWE-22", "epss": 0.14597, -"epss_pct": 0.96399, +"epss_pct": 0.96403, "name": "Joomla! Component com_communitypolls 1.5.2 - Local File Inclusion", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1081.yaml" @@ -1468,7 +1468,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:N/A:N", "cwe": "CWE-22", "epss": 0.06429, -"epss_pct": 0.93214, +"epss_pct": 0.93223, "name": "Joomla! Component & Plugin JE Tooltip 1.0 - Local File Inclusion", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1217.yaml" @@ -1478,7 +1478,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:P", "cwe": "CWE-22", "epss": 0.08266, -"epss_pct": 0.9451, +"epss_pct": 0.94517, "name": "Joomla! Component com_janews - Local File Inclusion", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1219.yaml" @@ -1488,7 +1488,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N", "cwe": "CWE-22", "epss": 0.08483, -"epss_pct": 0.94632, +"epss_pct": 0.94639, "name": "Joomla! Component DW Graph - Local File Inclusion", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1302.yaml" @@ -1498,7 +1498,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N", "cwe": "CWE-22", "epss": 0.14041, -"epss_pct": 0.96291, +"epss_pct": 0.96295, "name": "Joomla! Component User Status - Local File Inclusion", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1304.yaml" @@ -1508,7 +1508,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N", "cwe": "CWE-22", "epss": 0.20719, -"epss_pct": 0.97358, +"epss_pct": 0.97361, "name": "Joomla! Component JInventory 1.23.02 - Local File Inclusion", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1305.yaml" @@ -1518,7 +1518,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P", "cwe": "CWE-22", "epss": 0.15722, -"epss_pct": 0.96619, +"epss_pct": 0.96623, "name": "Joomla! Component Picasa 2.0 - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1306.yaml" @@ -1528,7 +1528,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N", "cwe": "CWE-22", "epss": 0.10158, -"epss_pct": 0.9532, +"epss_pct": 0.95326, "name": "Joomla! Component Magic Updater - Local File Inclusion", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1307.yaml" @@ -1538,7 +1538,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N", "cwe": "CWE-22", "epss": 0.13997, -"epss_pct": 0.96284, +"epss_pct": 0.96289, "name": "Joomla! Component SVMap 1.1.1 - Local File Inclusion", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1308.yaml" @@ -1548,7 +1548,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N", "cwe": "CWE-22", "epss": 0.13621, -"epss_pct": 0.962, +"epss_pct": 0.96204, "name": "Joomla! Component News Portal 1.5.x - Local File Inclusion", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1312.yaml" @@ -1558,7 +1558,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:N/A:N", "cwe": "CWE-22", "epss": 0.08684, -"epss_pct": 0.94744, +"epss_pct": 0.9475, "name": "Joomla! Component Saber Cart 1.0.0.12 - Local File Inclusion", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1313.yaml" @@ -1568,7 +1568,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N", "cwe": "CWE-22", "epss": 0.15909, -"epss_pct": 0.96655, +"epss_pct": 0.96658, "name": "Joomla! Component Highslide 1.5 - Local File Inclusion", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1314.yaml" @@ -1578,7 +1578,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N", "cwe": "CWE-22", "epss": 0.08233, -"epss_pct": 0.94489, +"epss_pct": 0.94495, "name": "Joomla! Component webERPcustomer - Local File Inclusion", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1315.yaml" @@ -1588,7 +1588,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N", "cwe": "CWE-22", "epss": 0.13621, -"epss_pct": 0.962, +"epss_pct": 0.96204, "name": "Joomla! Component com_jresearch - 'Controller' Local File Inclusion", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1340.yaml" @@ -1598,7 +1598,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N", "cwe": "CWE-22", "epss": 0.16872, -"epss_pct": 0.96826, +"epss_pct": 0.9683, "name": "Joomla! Component Cookex Agency CKForms - Local File Inclusion", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1345.yaml" @@ -1608,7 +1608,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N", "cwe": "CWE-22", "epss": 0.13598, -"epss_pct": 0.96192, +"epss_pct": 0.96197, "name": "Joomla! Component Juke Box 1.7 - Local File Inclusion", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1352.yaml" @@ -1618,7 +1618,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N", "cwe": "CWE-22", "epss": 0.19192, -"epss_pct": 0.97132, +"epss_pct": 0.97135, "name": "Joomla! Component LoginBox - Local File Inclusion", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1353.yaml" @@ -1628,7 +1628,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N", "cwe": "CWE-22", "epss": 0.15909, -"epss_pct": 0.96654, +"epss_pct": 0.96658, "name": "Joomla! Component VJDEO 1.0 - Local File Inclusion", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1354.yaml" @@ -1648,7 +1648,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N", "cwe": "CWE-22", "epss": 0.08233, -"epss_pct": 0.94489, +"epss_pct": 0.94496, "name": "Joomla! Component Photo Battle 1.0.1 - Local File Inclusion", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1461.yaml" @@ -1658,7 +1658,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:P", "cwe": "CWE-22", "epss": 0.08163, -"epss_pct": 0.94452, +"epss_pct": 0.94459, "name": "Joomla! Component JProject Manager 1.0 - Local File Inclusion", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1469.yaml" @@ -1668,7 +1668,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P", "cwe": "CWE-22", "epss": 0.13351, -"epss_pct": 0.96133, +"epss_pct": 0.96138, "name": "Joomla! Component Web TV 1.0 - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1470.yaml" @@ -1678,7 +1678,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P", "cwe": "CWE-22", "epss": 0.16152, -"epss_pct": 0.96698, +"epss_pct": 0.96702, "name": "Joomla! Component Address Book 1.5.0 - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1471.yaml" @@ -1688,7 +1688,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P", "cwe": "CWE-22", "epss": 0.13351, -"epss_pct": 0.96133, +"epss_pct": 0.96137, "name": "Joomla! Component Horoscope 1.5.0 - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1472.yaml" @@ -1698,7 +1698,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:P", "cwe": "CWE-22", "epss": 0.08163, -"epss_pct": 0.94452, +"epss_pct": 0.94459, "name": "Joomla! Component Advertising 0.25 - Local File Inclusion", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1473.yaml" @@ -1708,7 +1708,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:P", "cwe": "CWE-22", "epss": 0.09471, -"epss_pct": 0.95077, +"epss_pct": 0.95083, "name": "Joomla! Component Sweetykeeper 1.5 - Local File Inclusion", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1474.yaml" @@ -1718,7 +1718,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:P", "cwe": "CWE-22", "epss": 0.09471, -"epss_pct": 0.95077, +"epss_pct": 0.95083, "name": "Joomla! Component Preventive And Reservation 1.0.5 - Local File Inclusion", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1475.yaml" @@ -1728,7 +1728,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:P", "cwe": "CWE-22", "epss": 0.0994, -"epss_pct": 0.95253, +"epss_pct": 0.95259, "name": "Joomla! Component AlphaUserPoints 1.5.5 - Local File Inclusion", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1476.yaml" @@ -1738,7 +1738,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:P", "cwe": "CWE-22", "epss": 0.08163, -"epss_pct": 0.94452, +"epss_pct": 0.94459, "name": "Joomla! Component Jfeedback 1.2 - Local File Inclusion", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1478.yaml" @@ -1748,7 +1748,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N", "cwe": "CWE-22", "epss": 0.13598, -"epss_pct": 0.96192, +"epss_pct": 0.96196, "name": "Joomla! Component MMS Blog 2.3.0 - Local File Inclusion", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1491.yaml" @@ -1758,7 +1758,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N", "cwe": "CWE-22", "epss": 0.167, -"epss_pct": 0.96802, +"epss_pct": 0.96806, "name": "Joomla! Component AWDwall 1.5.4 - Local File Inclusion", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1494.yaml" @@ -1768,7 +1768,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P", "cwe": "CWE-22", "epss": 0.18938, -"epss_pct": 0.97095, +"epss_pct": 0.97098, "name": "Joomla! Component Matamko 1.01 - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1495.yaml" @@ -1778,7 +1778,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P", "cwe": "CWE-22", "epss": 0.16915, -"epss_pct": 0.96834, +"epss_pct": 0.96837, "name": "Joomla! Component redSHOP 1.0 - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1531.yaml" @@ -1788,7 +1788,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N", "cwe": "CWE-22", "epss": 0.1633, -"epss_pct": 0.96732, +"epss_pct": 0.96735, "name": "Joomla! Component PowerMail Pro 1.5.3 - Local File Inclusion", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1532.yaml" @@ -1798,7 +1798,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P", "cwe": "CWE-22", "epss": 0.15088, -"epss_pct": 0.96485, +"epss_pct": 0.96489, "name": "Joomla! Component TweetLA 1.0.1 - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1533.yaml" @@ -1808,7 +1808,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N", "cwe": "CWE-22", "epss": 0.13621, -"epss_pct": 0.96201, +"epss_pct": 0.96205, "name": "Joomla! Component Shoutbox Pro - Local File Inclusion", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1534.yaml" @@ -1818,7 +1818,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P", "cwe": "CWE-22", "epss": 0.15334, -"epss_pct": 0.96529, +"epss_pct": 0.96533, "name": "Joomla! Component TRAVELbook 1.0.1 - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1535.yaml" @@ -1828,7 +1828,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N", "cwe": "CWE-22", "epss": 0.08233, -"epss_pct": 0.94489, +"epss_pct": 0.94496, "name": "Joomla! Component com_blog - Directory Traversal", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1540.yaml" @@ -1838,7 +1838,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:N", "cwe": "CWE-20", "epss": 0.10296, -"epss_pct": 0.95362, +"epss_pct": 0.95368, "name": "HP System Management Homepage (SMH) v2.x.x.x - Open Redirect", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1586.yaml" @@ -1848,7 +1848,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N", "cwe": "CWE-22", "epss": 0.15974, -"epss_pct": 0.96666, +"epss_pct": 0.9667, "name": "Joomla! Component JA Comment - Local File Inclusion", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1601.yaml" @@ -1858,7 +1858,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P", "cwe": "CWE-22", "epss": 0.15695, -"epss_pct": 0.96612, +"epss_pct": 0.96616, "name": "Joomla! Component ZiMB Comment 0.8.1 - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1602.yaml" @@ -1868,7 +1868,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P", "cwe": "CWE-22", "epss": 0.07402, -"epss_pct": 0.93994, +"epss_pct": 0.94001, "name": "Joomla! Component ZiMBCore 0.1 - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1603.yaml" @@ -1878,7 +1878,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:P", "cwe": "CWE-22", "epss": 0.08177, -"epss_pct": 0.94461, +"epss_pct": 0.94468, "name": "Joomla! Component WMI 1.5.0 - Local File Inclusion", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1607.yaml" @@ -1888,7 +1888,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P", "cwe": "CWE-22", "epss": 0.13373, -"epss_pct": 0.9614, +"epss_pct": 0.96145, "name": "Joomla! Component Graphics 1.0.6 - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1653.yaml" @@ -1898,7 +1898,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N", "cwe": "CWE-22", "epss": 0.19192, -"epss_pct": 0.97133, +"epss_pct": 0.97136, "name": "Joomla! Component SmartSite 1.0.0 - Local File Inclusion", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1657.yaml" @@ -1908,7 +1908,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N", "cwe": "CWE-22", "epss": 0.16014, -"epss_pct": 0.96676, +"epss_pct": 0.9668, "name": "Joomla! Component NoticeBoard 1.3 - Local File Inclusion", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1658.yaml" @@ -1918,7 +1918,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N", "cwe": "CWE-22", "epss": 0.13985, -"epss_pct": 0.96282, +"epss_pct": 0.96286, "name": "Joomla! Component Ultimate Portfolio 1.0 - Local File Inclusion", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1659.yaml" @@ -1928,7 +1928,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N", "cwe": "CWE-22", "epss": 0.18703, -"epss_pct": 0.97065, +"epss_pct": 0.97068, "name": "Joomla! Component Arcade Games 1.0 - Local File Inclusion", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1714.yaml" @@ -1938,7 +1938,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:P", "cwe": "CWE-22", "epss": 0.08177, -"epss_pct": 0.94461, +"epss_pct": 0.94468, "name": "Joomla! Component Online Exam 1.5.0 - Local File Inclusion", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1715.yaml" @@ -1948,7 +1948,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P", "cwe": "CWE-22", "epss": 0.22285, -"epss_pct": 0.97511, +"epss_pct": 0.97515, "name": "Joomla! Component iF surfALERT 1.2 - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1717.yaml" @@ -1958,7 +1958,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:P", "cwe": "CWE-22", "epss": 0.09455, -"epss_pct": 0.95071, +"epss_pct": 0.95077, "name": "Joomla! Component Archery Scores 1.0.6 - Local File Inclusion", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1718.yaml" @@ -1968,7 +1968,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:P", "cwe": "CWE-22", "epss": 0.09371, -"epss_pct": 0.95038, +"epss_pct": 0.95044, "name": "Joomla! Component MT Fire Eagle 1.2 - Local File Inclusion", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1719.yaml" @@ -1978,7 +1978,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:P", "cwe": "CWE-22", "epss": 0.09471, -"epss_pct": 0.95077, +"epss_pct": 0.95083, "name": "Joomla! Component Online Market 2.x - Local File Inclusion", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1722.yaml" @@ -1988,7 +1988,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:P", "cwe": "CWE-22", "epss": 0.08408, -"epss_pct": 0.94586, +"epss_pct": 0.94592, "name": "Joomla! Component iNetLanka Contact Us Draw Root Map 1.1 - Local File Inclusion", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1723.yaml" @@ -1998,7 +1998,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N", "cwe": "CWE-22", "epss": 0.13621, -"epss_pct": 0.962, +"epss_pct": 0.96205, "name": "Joomla! Component SMEStorage - Local File Inclusion", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1858.yaml" @@ -2027,7 +2027,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P", "cwe": "CWE-22", "epss": 0.15722, -"epss_pct": 0.9662, +"epss_pct": 0.96624, "name": "Joomla! Component Property - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1875.yaml" @@ -2037,7 +2037,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P", "cwe": "CWE-22", "epss": 0.11429, -"epss_pct": 0.95694, +"epss_pct": 0.957, "name": "Joomla! Component OrgChart 1.0.0 - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1878.yaml" @@ -2047,7 +2047,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P", "cwe": "CWE-22", "epss": 0.12991, -"epss_pct": 0.96045, +"epss_pct": 0.9605, "name": "Joomla! Component BeeHeard 1.0 - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1952.yaml" @@ -2057,7 +2057,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P", "cwe": "CWE-22", "epss": 0.16152, -"epss_pct": 0.96698, +"epss_pct": 0.96702, "name": "Joomla! Component iNetLanka Multiple Map 1.0 - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1953.yaml" @@ -2067,7 +2067,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P", "cwe": "CWE-22", "epss": 0.16152, -"epss_pct": 0.96699, +"epss_pct": 0.96702, "name": "Joomla! Component iNetLanka Multiple root 1.0 - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1954.yaml" @@ -2077,7 +2077,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P", "cwe": "CWE-22", "epss": 0.17938, -"epss_pct": 0.96967, +"epss_pct": 0.9697, "name": "Joomla! Component Deluxe Blog Factory 1.1.2 - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1955.yaml" @@ -2087,7 +2087,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P", "cwe": "CWE-22", "epss": 0.17003, -"epss_pct": 0.96847, +"epss_pct": 0.9685, "name": "Joomla! Component Gadget Factory 1.0.0 - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1956.yaml" @@ -2097,7 +2097,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P", "cwe": "CWE-22", "epss": 0.14847, -"epss_pct": 0.96447, +"epss_pct": 0.96451, "name": "Joomla! Component Love Factory 1.3.4 - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1957.yaml" @@ -2107,7 +2107,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P", "cwe": "CWE-22", "epss": 0.07402, -"epss_pct": 0.93994, +"epss_pct": 0.94, "name": "Joomla! Component J!WHMCS Integrator 1.5.0 - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1977.yaml" @@ -2117,7 +2117,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:P", "cwe": "CWE-22", "epss": 0.1115, -"epss_pct": 0.95628, +"epss_pct": 0.95634, "name": "Joomla! Component Affiliate Datafeeds 880 - Local File Inclusion", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1979.yaml" @@ -2127,7 +2127,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P", "cwe": "CWE-22", "epss": 0.18835, -"epss_pct": 0.9708, +"epss_pct": 0.97084, "name": "Joomla! Component Joomla! Flickr 1.0 - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1980.yaml" @@ -2137,7 +2137,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:P", "cwe": "CWE-22", "epss": 0.11864, -"epss_pct": 0.95797, +"epss_pct": 0.95802, "name": "Joomla! Component Fabrik 2.0 - Local File Inclusion", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1981.yaml" @@ -2147,7 +2147,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N", "cwe": "CWE-22", "epss": 0.08286, -"epss_pct": 0.9452, +"epss_pct": 0.94526, "name": "Joomla! Component JA Voice 2.0 - Local File Inclusion", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1982.yaml" @@ -2157,7 +2157,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P", "cwe": "CWE-22", "epss": 0.18816, -"epss_pct": 0.97077, +"epss_pct": 0.9708, "name": "Joomla! Component redTWITTER 1.0 - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1983.yaml" @@ -2172,7 +2172,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P", "cwe": "CWE-22", "epss": 0.03258, -"epss_pct": 0.87494, +"epss_pct": 0.87509, "name": "Lokomedia CMS - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-2018.yaml" @@ -2182,7 +2182,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P", "cwe": "CWE-22", "epss": 0.15795, -"epss_pct": 0.96632, +"epss_pct": 0.96636, "name": "Joomla! Percha Categories Tree 0.6 - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-2033.yaml" @@ -2192,7 +2192,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P", "cwe": "CWE-22", "epss": 0.11077, -"epss_pct": 0.95608, +"epss_pct": 0.95614, "name": "Joomla! Component Percha Image Attach 1.1 - Directory Traversal", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-2034.yaml" @@ -2202,7 +2202,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P", "cwe": "CWE-22", "epss": 0.15781, -"epss_pct": 0.96629, +"epss_pct": 0.96633, "name": "Joomla! Component Percha Gallery 1.6 Beta - Directory Traversal", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-2035.yaml" @@ -2212,7 +2212,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P", "cwe": "CWE-22", "epss": 0.1321, -"epss_pct": 0.96098, +"epss_pct": 0.96103, "name": "Joomla! Component Percha Fields Attach 1.0 - Directory Traversal", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-2036.yaml" @@ -2222,7 +2222,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P", "cwe": "CWE-22", "epss": 0.11077, -"epss_pct": 0.95608, +"epss_pct": 0.95614, "name": "Joomla! Component Percha Downloads Attach 1.1 - Directory Traversal", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-2037.yaml" @@ -2232,7 +2232,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P", "cwe": "CWE-22", "epss": 0.08931, -"epss_pct": 0.94866, +"epss_pct": 0.94873, "name": "Joomla! Component FDione Form Wizard 1.0.2 - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-2045.yaml" @@ -2242,7 +2242,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P", "cwe": "CWE-22", "epss": 0.13074, -"epss_pct": 0.96072, +"epss_pct": 0.96077, "name": "Joomla! Component MS Comment 0.8.0b - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-2050.yaml" @@ -2252,7 +2252,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:P", "cwe": "CWE-22", "epss": 0.11663, -"epss_pct": 0.95747, +"epss_pct": 0.95752, "name": "Joomla! Component simpledownload <=0.9.5 - Arbitrary File Retrieval", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-2122.yaml" @@ -2262,7 +2262,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P", "cwe": "CWE-22", "epss": 0.15821, -"epss_pct": 0.96638, +"epss_pct": 0.96642, "name": "Joomla! Component JE Quotation Form 1.0b1 - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-2128.yaml" @@ -2272,7 +2272,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P", "cwe": "CWE-22", "epss": 0.18051, -"epss_pct": 0.96982, +"epss_pct": 0.96985, "name": "Joomla! Component com_bfsurvey - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-2259.yaml" @@ -2282,7 +2282,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N", "cwe": "CWE-22", "epss": 0.08604, -"epss_pct": 0.94698, +"epss_pct": 0.94705, "name": "Motorola SBV6120E SURFboard Digital Voice Modem SBV6X2X-1.0.0.5-SCM - Directory Traversal", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-2307.yaml" @@ -2292,7 +2292,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:P", "cwe": "CWE-22", "epss": 0.09432, -"epss_pct": 0.95061, +"epss_pct": 0.95066, "name": "Joomla! Component Picasa2Gallery 1.2.8 - Local File Inclusion", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-2507.yaml" @@ -2302,7 +2302,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:P", "cwe": "CWE-22", "epss": 0.04848, -"epss_pct": 0.91396, +"epss_pct": 0.91407, "name": "Joomla! Component jesectionfinder - Local File Inclusion", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-2680.yaml" @@ -2312,7 +2312,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P", "cwe": "CWE-22", "epss": 0.14311, -"epss_pct": 0.96344, +"epss_pct": 0.96349, "name": "Joomla! Component Realtyna Translator 1.0.15 - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-2682.yaml" @@ -2322,7 +2322,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:P", "cwe": "CWE-22", "epss": 0.04848, -"epss_pct": 0.91396, +"epss_pct": 0.91408, "name": "Joomla! Component Music Manager - Local File Inclusion", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-2857.yaml" @@ -2342,7 +2342,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P", "cwe": "CWE-94", "epss": 0.13704, -"epss_pct": 0.96221, +"epss_pct": 0.96225, "name": "Joomla! Component Visites 1.1 - MosConfig_absolute_path Remote File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-2918.yaml" @@ -2352,7 +2352,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:P", "cwe": "CWE-22", "epss": 0.05688, -"epss_pct": 0.92462, +"epss_pct": 0.92472, "name": "Joomla! Component Foobla Suggestions 1.5.1.2 - Local File Inclusion", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-2920.yaml" @@ -2362,7 +2362,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N", "cwe": "CWE-22", "epss": 0.08523, -"epss_pct": 0.94654, +"epss_pct": 0.94661, "name": "Joomla! Component PicSell 1.0 - Arbitrary File Retrieval", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-3203.yaml" @@ -2372,7 +2372,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P", "cwe": "CWE-22", "epss": 0.1385, -"epss_pct": 0.96253, +"epss_pct": 0.96257, "name": "Joomla! Component Jphone 1.0 Alpha 3 - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-3426.yaml" @@ -2387,7 +2387,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:H/Au:S/C:C/I:C/A:C", "cwe": "CWE-22", "epss": 0.07563, -"epss_pct": 0.94089, +"epss_pct": 0.94095, "name": "ProFTPD < 1.3.3c - Directory Traversal via mod_site_misc", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2010/CVE-2010-3867.yaml" @@ -2397,7 +2397,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:N/A:N", "cwe": "CWE-22", "epss": 0.1633, -"epss_pct": 0.96731, +"epss_pct": 0.96735, "name": "Camtron CMNC-200 IP Camera - Directory Traversal", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-4231.yaml" @@ -2407,7 +2407,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-20", "epss": 0.1343, -"epss_pct": 0.9615, +"epss_pct": 0.96155, "name": "Tiki Wiki CMS Groupware 5.2 - Local File Inclusion", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-4239.yaml" @@ -2424,7 +2424,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P", "cwe": "CWE-22", "epss": 0.19647, -"epss_pct": 0.97202, +"epss_pct": 0.97206, "name": "Pandora Fms < 3.1.1 - Directory Traversal", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-4282.yaml" @@ -2441,7 +2441,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:P", "cwe": "CWE-22", "epss": 0.08571, -"epss_pct": 0.9468, +"epss_pct": 0.94687, "name": "Joomla! Component JotLoader 2.2.1 - Local File Inclusion", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-4617.yaml" @@ -2451,7 +2451,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P", "cwe": "CWE-22", "epss": 0.15786, -"epss_pct": 0.96631, +"epss_pct": 0.96635, "name": "Joomla! Component JRadio - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-4719.yaml" @@ -2461,7 +2461,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P", "cwe": "CWE-22", "epss": 0.07593, -"epss_pct": 0.9411, +"epss_pct": 0.94117, "name": "Joomla! Component Jimtawl 1.0.2 - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-4769.yaml" @@ -2471,7 +2471,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P", "cwe": "CWE-89", "epss": 0.15251, -"epss_pct": 0.96518, +"epss_pct": 0.96521, "name": "Joomla! Component Canteen 1.0 - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-4977.yaml" @@ -2481,7 +2481,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P", "cwe": "CWE-89", "epss": 0.09247, -"epss_pct": 0.94992, +"epss_pct": 0.94998, "name": "Joomla! Component JE Job 1.0 - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-5028.yaml" @@ -2498,7 +2498,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:N/A:N", "cwe": "CWE-22", "epss": 0.18633, -"epss_pct": 0.97056, +"epss_pct": 0.97059, "name": "MODx manager - Local File Inclusion", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-5278.yaml" @@ -2508,7 +2508,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:C/A:C", "cwe": "CWE-22", "epss": 0.11382, -"epss_pct": 0.95684, +"epss_pct": 0.9569, "name": "Joomla! Component Jstore - 'Controller' Local File Inclusion", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-5286.yaml" @@ -2563,7 +2563,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "cwe": "CWE-77", "epss": 0.15833, -"epss_pct": 0.96639, +"epss_pct": 0.96643, "name": "LotusCMS 3.0 - Remote Code Execution", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2011/CVE-2011-0518.yaml" @@ -2597,7 +2597,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N", "cwe": "CWE-22", "epss": 0.22157, -"epss_pct": 0.97501, +"epss_pct": 0.97504, "name": "WP Custom Pages 0.5.0.1 - Local File Inclusion (LFI)", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2011/CVE-2011-1669.yaml" @@ -2624,7 +2624,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:P", "cwe": "CWE-22", "epss": 0.0896, -"epss_pct": 0.94882, +"epss_pct": 0.94888, "name": "Chyrp 2.x - Local File Inclusion", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2011/CVE-2011-2744.yaml" @@ -2634,7 +2634,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N", "cwe": "CWE-22", "epss": 0.12991, -"epss_pct": 0.96046, +"epss_pct": 0.96051, "name": "Chyrp 2.x - Local File Inclusion", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2011/CVE-2011-2780.yaml" @@ -2693,7 +2693,7 @@ "cvss_vector": "CVSS:2.0/AV:L/AC:L/Au:N/C:N/I:P/A:P", "cwe": "CWE-22", "epss": 0.00585, -"epss_pct": 0.45654, +"epss_pct": 0.45704, "name": "Pure-FTPd \u2264 1.0.22 - Directory Traversal", "severity": "low", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2011/CVE-2011-3171.yaml" @@ -2703,7 +2703,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:N/A:N", "cwe": "CWE-22", "epss": 0.26393, -"epss_pct": 0.97858, +"epss_pct": 0.97862, "name": "Cisco CUCM, UCCX, and Unified IP-IVR- Directory Traversal", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2011/CVE-2011-3315.yaml" @@ -2713,7 +2713,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-611", "epss": 0.1591, -"epss_pct": 0.96655, +"epss_pct": 0.96659, "name": "Apache OFBiz - XML External Entity Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2011/CVE-2011-3600.yaml" @@ -2730,7 +2730,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.07652, -"epss_pct": 0.94149, +"epss_pct": 0.94156, "name": "Tiki Wiki CMS Groupware 7.0 Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2011/CVE-2011-4336.yaml" @@ -2740,7 +2740,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:N", "cwe": "CWE-79", "epss": 0.10083, -"epss_pct": 0.95297, +"epss_pct": 0.95303, "name": "Advanced Text Widget < 2.0.2 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2011/CVE-2011-4618.yaml" @@ -2750,7 +2750,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:N", "cwe": "CWE-79", "epss": 0.07062, -"epss_pct": 0.93746, +"epss_pct": 0.93754, "name": "GRAND FlAGallery 1.57 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2011/CVE-2011-4624.yaml" @@ -2760,7 +2760,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:S/C:P/I:N/A:N", "cwe": "CWE-22", "epss": 0.07323, -"epss_pct": 0.93943, +"epss_pct": 0.9395, "name": "WebTitan < 3.60 - Local File Inclusion", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2011/CVE-2011-4640.yaml" @@ -2770,7 +2770,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N", "cwe": "CWE-22", "epss": 0.20981, -"epss_pct": 0.97391, +"epss_pct": 0.97394, "name": "Joomla! Component com_kp - 'Controller' Local File Inclusion", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2011/CVE-2011-4804.yaml" @@ -2780,7 +2780,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:N", "cwe": "CWE-79", "epss": 0.10911, -"epss_pct": 0.95554, +"epss_pct": 0.9556, "name": "Adminimize 1.7.22 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2011/CVE-2011-4926.yaml" @@ -2809,7 +2809,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:N", "cwe": "CWE-79", "epss": 0.10899, -"epss_pct": 0.95551, +"epss_pct": 0.95557, "name": "WordPress Plugin Flexible Custom Post Type < 0.1.7 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2011/CVE-2011-5106.yaml" @@ -2819,7 +2819,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:N", "cwe": "CWE-79", "epss": 0.08772, -"epss_pct": 0.94792, +"epss_pct": 0.94799, "name": "Alert Before Your Post <= 0.1.1 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2011/CVE-2011-5107.yaml" @@ -2829,7 +2829,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:N", "cwe": "CWE-79", "epss": 0.08772, -"epss_pct": 0.94792, +"epss_pct": 0.94799, "name": "Skysa App Bar 1.04 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2011/CVE-2011-5179.yaml" @@ -2839,7 +2839,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:N", "cwe": "CWE-79", "epss": 0.10428, -"epss_pct": 0.95405, +"epss_pct": 0.95411, "name": "ClickDesk Live Support Live Chat 2.0 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2011/CVE-2011-5181.yaml" @@ -2849,7 +2849,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:N", "cwe": "CWE-20", "epss": 0.11927, -"epss_pct": 0.95815, +"epss_pct": 0.9582, "name": "Orchard 'ReturnUrl' Parameter URI - Open Redirect", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2011/CVE-2011-5252.yaml" @@ -2859,7 +2859,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:N", "cwe": "CWE-79", "epss": 0.09964, -"epss_pct": 0.95259, +"epss_pct": 0.95265, "name": "Featurific For WordPress 1.6.2 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2011/CVE-2011-5265.yaml" @@ -2882,7 +2882,7 @@ "cvss": 6.8, "cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:P", "epss": 0.97534, -"epss_pct": 0.99896, +"epss_pct": 0.99897, "name": "Apache Struts2 S2-008 RCE", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2012/CVE-2012-0392.yaml" @@ -2892,7 +2892,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:P", "cwe": "CWE-94", "epss": 0.729, -"epss_pct": 0.9941, +"epss_pct": 0.99411, "name": "Apache Struts <2.3.1.1 - Remote Code Execution", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2012/CVE-2012-0394.yaml" @@ -2902,7 +2902,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N", "cwe": "CWE-22", "epss": 0.25224, -"epss_pct": 0.97779, +"epss_pct": 0.97783, "name": "Count Per Day <= 3.1 - download.php f Parameter Traversal Arbitrary File Access", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2012/CVE-2012-0896.yaml" @@ -2912,7 +2912,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:N", "cwe": "CWE-79", "epss": 0.07676, -"epss_pct": 0.94164, +"epss_pct": 0.94171, "name": "YouSayToo auto-publishing 1.0 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2012/CVE-2012-0901.yaml" @@ -2922,7 +2922,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N", "cwe": "CWE-22", "epss": 0.11059, -"epss_pct": 0.95602, +"epss_pct": 0.95608, "name": "phpShowtime 2.0 - Directory Traversal", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2012/CVE-2012-0981.yaml" @@ -2932,7 +2932,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:S/C:P/I:N/A:N", "cwe": "CWE-22", "epss": 0.11261, -"epss_pct": 0.95657, +"epss_pct": 0.95663, "name": "OpenEMR 4.1 - Local File Inclusion", "severity": "low", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2012/CVE-2012-0991.yaml" @@ -2942,7 +2942,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N", "cwe": "CWE-22", "epss": 0.09794, -"epss_pct": 0.95199, +"epss_pct": 0.95205, "name": "11in1 CMS 1.2.1 - Local File Inclusion (LFI)", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2012/CVE-2012-0996.yaml" @@ -2952,7 +2952,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L", "cwe": "CWE-79", "epss": 0.01181, -"epss_pct": 0.65539, +"epss_pct": 0.65576, "name": "WordPress Mapplic <= 6.1 / Mapplic Lite <= 1.0 - Authenticated Stored XSS via SVG File Upload", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2012/CVE-2012-10018.yaml" @@ -2962,7 +2962,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P", "cwe": "CWE-22", "epss": 0.251, -"epss_pct": 0.97769, +"epss_pct": 0.97772, "name": "Dolibarr ERP/CRM 3.2 Alpha - Multiple Directory Traversal Vulnerabilities", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2012/CVE-2012-1226.yaml" @@ -2982,7 +2982,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:N", "cwe": "CWE-79", "epss": 0.08946, -"epss_pct": 0.94873, +"epss_pct": 0.94879, "name": "WordPress Plugin All-in-One Event Calendar 1.4 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2012/CVE-2012-1835.yaml" @@ -3002,7 +3002,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:N", "cwe": "CWE-79", "epss": 0.12848, -"epss_pct": 0.96014, +"epss_pct": 0.96019, "name": "WP-FaceThumb 0.1 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2012/CVE-2012-2371.yaml" @@ -3091,7 +3091,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:N", "cwe": "CWE-20", "epss": 0.10311, -"epss_pct": 0.95368, +"epss_pct": 0.95374, "name": "WebsitePanel before v1.2.2.1 - Open Redirect", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2012/CVE-2012-4032.yaml" @@ -3101,7 +3101,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:N", "cwe": "CWE-79", "epss": 0.0928, -"epss_pct": 0.95006, +"epss_pct": 0.95011, "name": "WordPress Plugin MF Gig Calendar 0.9.2 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2012/CVE-2012-4242.yaml" @@ -3111,7 +3111,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:N/A:N", "cwe": "CWE-22", "epss": 0.08465, -"epss_pct": 0.94624, +"epss_pct": 0.94631, "name": "MySQLDumper 1.24.4 - Directory Traversal", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2012/CVE-2012-4253.yaml" @@ -3121,7 +3121,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:N", "cwe": "CWE-79", "epss": 0.0578, -"epss_pct": 0.92564, +"epss_pct": 0.92574, "name": "2 Click Socialmedia Buttons < 0.34 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2012/CVE-2012-4273.yaml" @@ -3145,7 +3145,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:N", "cwe": "CWE-79", "epss": 0.05796, -"epss_pct": 0.92591, +"epss_pct": 0.926, "name": "AWStats 6.95/7.0 - 'awredir.pl' Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2012/CVE-2012-4547.yaml" @@ -3155,7 +3155,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:N", "cwe": "CWE-79", "epss": 0.10456, -"epss_pct": 0.95415, +"epss_pct": 0.95421, "name": "WordPress Plugin Download Monitor < 3.3.5.9 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2012/CVE-2012-4768.yaml" @@ -3165,7 +3165,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N", "cwe": "CWE-22", "epss": 0.08761, -"epss_pct": 0.94784, +"epss_pct": 0.94791, "name": "FlatnuX CMS - Directory Traversal", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2012/CVE-2012-4878.yaml" @@ -3175,7 +3175,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:N", "cwe": "CWE-79", "epss": 0.07718, -"epss_pct": 0.94193, +"epss_pct": 0.942, "name": "ManageEngine Firewall Analyzer 7.2 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2012/CVE-2012-4889.yaml" @@ -3195,7 +3195,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:N", "cwe": "CWE-20", "epss": 0.08907, -"epss_pct": 0.9486, +"epss_pct": 0.94867, "name": "Forescout CounterACT 6.3.4.1 - Open Redirect", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2012/CVE-2012-4982.yaml" @@ -3205,7 +3205,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:N", "cwe": "CWE-20", "epss": 0.1375, -"epss_pct": 0.96236, +"epss_pct": 0.9624, "name": "TikiWiki CMS Groupware v8.3 - Open Redirect", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2012/CVE-2012-5321.yaml" @@ -3222,7 +3222,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:N", "cwe": "CWE-79", "epss": 0.08693, -"epss_pct": 0.94747, +"epss_pct": 0.94753, "name": "WordPress Integrator 1.32 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2012/CVE-2012-5913.yaml" @@ -3232,7 +3232,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:N", "cwe": "CWE-20", "epss": 0.10557, -"epss_pct": 0.95449, +"epss_pct": 0.95456, "name": "WordPress Plugin Age Verification v0.4 - Open Redirect", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2012/CVE-2012-6499.yaml" @@ -3357,7 +3357,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:N", "cwe": "CWE-20", "epss": 0.94654, -"epss_pct": 0.99849, +"epss_pct": 0.9985, "name": "Apache Struts - Multiple Open Redirection Vulnerabilities", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2013/CVE-2013-2248.yaml" @@ -3377,7 +3377,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:N", "cwe": "CWE-79", "epss": 0.09239, -"epss_pct": 0.94989, +"epss_pct": 0.94995, "name": "WordPress Plugin Uploader 1.0.4 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2013/CVE-2013-2287.yaml" @@ -3387,7 +3387,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-601", "epss": 0.10692, -"epss_pct": 0.95488, +"epss_pct": 0.95494, "name": "Telaen => v1.3.1 - Open Redirect", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2013/CVE-2013-2621.yaml" @@ -3397,7 +3397,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:N", "cwe": "CWE-79", "epss": 0.13939, -"epss_pct": 0.96273, +"epss_pct": 0.96278, "name": "WordPress Plugin Traffic Analyzer - 'aoid' Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2013/CVE-2013-3526.yaml" @@ -3406,7 +3406,7 @@ "cvss": 5.0, "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N", "epss": 0.32441, -"epss_pct": 0.98209, +"epss_pct": 0.98211, "name": "Javafaces LFI", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2013/CVE-2013-3827.yaml" @@ -3416,7 +3416,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:N", "cwe": "CWE-79", "epss": 0.12974, -"epss_pct": 0.96042, +"epss_pct": 0.96047, "name": "WordPress Plugin Category Grid View Gallery 2.3.1 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2013/CVE-2013-4117.yaml" @@ -3447,7 +3447,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:N", "cwe": "CWE-79", "epss": 0.11102, -"epss_pct": 0.95615, +"epss_pct": 0.95621, "name": "WordPress Plugin Duplicator < 0.4.5 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2013/CVE-2013-4625.yaml" @@ -3465,7 +3465,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N", "cwe": "CWE-287", "epss": 0.13117, -"epss_pct": 0.9608, +"epss_pct": 0.96085, "name": "AVTECH DVR - Login Verification Code Bypass", "severity": "low", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2013/CVE-2013-4982.yaml" @@ -3475,7 +3475,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:S/C:P/I:N/A:N", "cwe": "CWE-22", "epss": 0.23309, -"epss_pct": 0.97612, +"epss_pct": 0.97615, "name": "Cisco Unified Communications Manager 7/8/9 - Directory Traversal", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2013/CVE-2013-5528.yaml" @@ -3499,7 +3499,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N", "cwe": "CWE-22", "epss": 0.18125, -"epss_pct": 0.96991, +"epss_pct": 0.96994, "name": "Xibo 1.2.2/1.4.1 - Directory Traversal", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2013/CVE-2013-5979.yaml" @@ -3509,7 +3509,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:N", "cwe": "CWE-79", "epss": 0.0522, -"epss_pct": 0.91929, +"epss_pct": 0.9194, "name": "WordPress Spreadsheet - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2013/CVE-2013-6281.yaml" @@ -3536,7 +3536,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N", "cwe": "CWE-22", "epss": 0.19641, -"epss_pct": 0.97202, +"epss_pct": 0.97205, "name": "WordPress Plugin Advanced Dewplayer 1.2 - Directory Traversal", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2013/CVE-2013-7240.yaml" @@ -3577,7 +3577,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.02016, -"epss_pct": 0.79538, +"epss_pct": 0.79562, "name": "Sitecore CMS - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-100004.yaml" @@ -3587,7 +3587,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P", "cwe": "CWE-22", "epss": 0.18834, -"epss_pct": 0.9708, +"epss_pct": 0.97083, "name": "DomPHP 0.83 - Directory Traversal", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-10037.yaml" @@ -3597,7 +3597,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-77", "epss": 0.15647, -"epss_pct": 0.96601, +"epss_pct": 0.96605, "name": "Eyou E-Mail <3.6 - Remote Code Execution", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-1203.yaml" @@ -3607,7 +3607,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N", "cwe": "CWE-22", "epss": 0.04851, -"epss_pct": 0.914, +"epss_pct": 0.91412, "name": "Titan FTP Server < 10.40 Move Function - Directory Traversal", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2014/CVE-2014-1841.yaml" @@ -3617,7 +3617,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N", "cwe": "CWE-22", "epss": 0.04787, -"epss_pct": 0.91303, +"epss_pct": 0.91315, "name": "Titan FTP Server Search Function < 10.40 - User Enumeration", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2014/CVE-2014-1842.yaml" @@ -3627,7 +3627,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N", "cwe": "CWE-22", "epss": 0.04667, -"epss_pct": 0.91114, +"epss_pct": 0.91125, "name": "Titan FTP Server < 10.40 - User Properties Traversal", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2014/CVE-2014-1843.yaml" @@ -3644,7 +3644,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:C/A:C", "cwe": "CWE-264", "epss": 0.59259, -"epss_pct": 0.99049, +"epss_pct": 0.99051, "name": "ZTE Cable Modem Web Shell", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-2321.yaml" @@ -3654,7 +3654,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.62752, -"epss_pct": 0.99133, +"epss_pct": 0.99135, "name": "Lighttpd 1.4.34 SQL Injection and Path Traversal", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-2323.yaml" @@ -3664,7 +3664,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:P", "cwe": "CWE-200", "epss": 0.39231, -"epss_pct": 0.98495, +"epss_pct": 0.98497, "name": "Dompdf < v0.6.0 - Local File Inclusion", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-2383.yaml" @@ -3674,7 +3674,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:N", "cwe": "CWE-79", "epss": 0.20862, -"epss_pct": 0.97377, +"epss_pct": 0.9738, "name": "Siemens SIMATIC S7-1200 CPU - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-2908.yaml" @@ -3684,7 +3684,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:N/A:N", "cwe": "CWE-22", "epss": 0.47095, -"epss_pct": 0.98748, +"epss_pct": 0.9875, "name": "Belkin N150 Router 1.00.08/1.00.09 - Path Traversal", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-2962.yaml" @@ -3704,7 +3704,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-20", "epss": 0.51014, -"epss_pct": 0.98846, +"epss_pct": 0.98849, "name": "Seagate BlackArmor NAS - Command Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-3206.yaml" @@ -3724,7 +3724,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.34012, -"epss_pct": 0.98279, +"epss_pct": 0.98282, "name": "Node.js st module Directory Traversal", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-3744.yaml" @@ -3733,7 +3733,7 @@ "cvss": 5.0, "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N", "epss": 0.38152, -"epss_pct": 0.9845, +"epss_pct": 0.98453, "name": "Oracle Weblogic - Server-Side Request Forgery", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-4210.yaml" @@ -3743,7 +3743,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:N", "cwe": "CWE-79", "epss": 0.04573, -"epss_pct": 0.90959, +"epss_pct": 0.90971, "name": "ActiveHelper LiveHelp Server 3.1.0 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-4513.yaml" @@ -3753,7 +3753,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.03983, -"epss_pct": 0.89768, +"epss_pct": 0.89779, "name": "Import Legacy Media <= 0.1 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-4535.yaml" @@ -3763,7 +3763,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.03902, -"epss_pct": 0.89532, +"epss_pct": 0.89545, "name": "Infusionsoft Gravity Forms Add-on < 1.5.7 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-4536.yaml" @@ -3773,7 +3773,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.03983, -"epss_pct": 0.89768, +"epss_pct": 0.89779, "name": "Movies <= 0.6 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-4539.yaml" @@ -3783,7 +3783,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.03779, -"epss_pct": 0.89187, +"epss_pct": 0.892, "name": "Podcast Channels < 0.28 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-4544.yaml" @@ -3793,7 +3793,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.03918, -"epss_pct": 0.89576, +"epss_pct": 0.89589, "name": "Shortcode Ninja <= 1.4 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-4550.yaml" @@ -3803,7 +3803,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.0421, -"epss_pct": 0.90267, +"epss_pct": 0.9028, "name": "WooCommerce Swipe <= 2.7.1 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-4558.yaml" @@ -3813,7 +3813,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.03826, -"epss_pct": 0.89333, +"epss_pct": 0.89347, "name": "Ultimate Weather Plugin <= 1.0 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-4561.yaml" @@ -3823,7 +3823,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N", "cwe": "CWE-22", "epss": 0.03749, -"epss_pct": 0.89097, +"epss_pct": 0.8911, "name": "WP AmASIN \u2013 The Amazon Affiliate Shop - Local File Inclusion", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-4577.yaml" @@ -3833,7 +3833,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.04032, -"epss_pct": 0.89877, +"epss_pct": 0.89889, "name": "WP Planet <= 0.1 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-4592.yaml" @@ -3843,7 +3843,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N", "cwe": "CWE-22", "epss": 0.1927, -"epss_pct": 0.97144, +"epss_pct": 0.97147, "name": "WordPress Plugin Tera Charts - Local File Inclusion", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-4940.yaml" @@ -3853,7 +3853,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N", "cwe": "CWE-22", "epss": 0.04306, -"epss_pct": 0.90459, +"epss_pct": 0.90471, "name": "Cross RSS 1.7 - Local File Inclusion", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-4941.yaml" @@ -3863,7 +3863,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N", "cwe": "CWE-200", "epss": 0.04536, -"epss_pct": 0.90884, +"epss_pct": 0.90896, "name": "WordPress EasyCart <2.0.6 - Information Disclosure", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-4942.yaml" @@ -3873,7 +3873,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N", "cwe": "CWE-22", "epss": 0.21569, -"epss_pct": 0.97448, +"epss_pct": 0.97452, "name": "Fonality trixbox - Local File Inclusion", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-5111.yaml" @@ -3883,7 +3883,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N", "cwe": "CWE-22", "epss": 0.04259, -"epss_pct": 0.9037, +"epss_pct": 0.90382, "name": "Last.fm Rotation 1.0 - Path Traversal", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-5181.yaml" @@ -3893,7 +3893,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N", "cwe": "CWE-22", "epss": 0.04718, -"epss_pct": 0.91192, +"epss_pct": 0.91204, "name": "Tom M8te (tom-m8te) Plugin 1.5.3 - Directory Traversal", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-5187.yaml" @@ -3931,7 +3931,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:S/C:P/I:N/A:N", "cwe": "CWE-22", "epss": 0.20326, -"epss_pct": 0.97297, +"epss_pct": 0.97301, "name": "webEdition 6.3.8.0 - Directory Traversal", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-5258.yaml" @@ -3955,7 +3955,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N", "cwe": "CWE-22", "epss": 0.18817, -"epss_pct": 0.97077, +"epss_pct": 0.9708, "name": "WordPress Plugin WP Content Source Control - Directory Traversal", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-5368.yaml" @@ -3985,7 +3985,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N", "cwe": "CWE-22", "epss": 0.2226, -"epss_pct": 0.9751, +"epss_pct": 0.97514, "name": "Osclass Security Advisory 3.4.1 - Local File Inclusion", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-6308.yaml" @@ -4002,7 +4002,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-22", "epss": 0.40779, -"epss_pct": 0.98552, +"epss_pct": 0.98554, "name": "Simple Online Planning Tool <1.3.2 - Local File Inclusion", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-8676.yaml" @@ -4012,7 +4012,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P", "cwe": "CWE-89", "epss": 0.33391, -"epss_pct": 0.98253, +"epss_pct": 0.98256, "name": "Gogs (Go Git Service) - SQL Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-8682.yaml" @@ -4032,7 +4032,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N", "cwe": "CWE-22", "epss": 0.67631, -"epss_pct": 0.99258, +"epss_pct": 0.9926, "name": "WordPress Plugin DukaPress 2.5.2 - Directory Traversal", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-8799.yaml" @@ -4105,7 +4105,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:N", "cwe": "CWE-79", "epss": 0.07309, -"epss_pct": 0.93933, +"epss_pct": 0.9394, "name": "WordPress DZS-VideoGallery Plugin Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-9094.yaml" @@ -4115,7 +4115,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N", "cwe": "CWE-22", "epss": 0.15652, -"epss_pct": 0.96602, +"epss_pct": 0.96606, "name": "WordPress DB Backup <=4.5 - Local File Inclusion", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-9119.yaml" @@ -4125,7 +4125,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:N/I:P/A:N", "cwe": "CWE-601", "epss": 0.04417, -"epss_pct": 0.90664, +"epss_pct": 0.90676, "name": "Eleanor CMS - Open Redirect", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-9180.yaml" @@ -4135,7 +4135,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:N", "cwe": "CWE-79", "epss": 0.06701, -"epss_pct": 0.9344, +"epss_pct": 0.93449, "name": "Frontend Uploader <= 0.9.2 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-9444.yaml" @@ -4145,7 +4145,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.04121, -"epss_pct": 0.90074, +"epss_pct": 0.90087, "name": "Netsweeper 4.0.8 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-9606.yaml" @@ -4155,7 +4155,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.04749, -"epss_pct": 0.91245, +"epss_pct": 0.91256, "name": "Netsweeper 4.0.4 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-9607.yaml" @@ -4165,7 +4165,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.04663, -"epss_pct": 0.91109, +"epss_pct": 0.9112, "name": "Netsweeper 4.0.3 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-9608.yaml" @@ -4175,7 +4175,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-22", "epss": 0.12631, -"epss_pct": 0.95961, +"epss_pct": 0.95966, "name": "Netsweeper 4.0.8 - Directory Traversal", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-9609.yaml" @@ -4195,7 +4195,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.04121, -"epss_pct": 0.90074, +"epss_pct": 0.90087, "name": "Netsweeper 4.0.4 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-9615.yaml" @@ -4205,7 +4205,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-601", "epss": 0.08013, -"epss_pct": 0.94358, +"epss_pct": 0.94365, "name": "Netsweeper 3.0.6 - Open Redirection", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2014/CVE-2014-9617.yaml" @@ -4235,7 +4235,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:N/A:C", "cwe": "CWE-264", "epss": 0.38932, -"epss_pct": 0.98482, +"epss_pct": 0.98484, "name": "ADB/Pirelli ADSL2/2+ Wireless Router P.DGA4001N - Information Disclosure", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-0554.yaml" @@ -4245,7 +4245,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.08598, -"epss_pct": 0.94694, +"epss_pct": 0.94701, "name": "WordPress Candidate Application Form <= 1.3 - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-1000005.yaml" @@ -4255,7 +4255,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-284", "epss": 0.0685, -"epss_pct": 0.93568, +"epss_pct": 0.93576, "name": "WordPress Simple Image Manipulator < 1.0 - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-1000010.yaml" @@ -4265,7 +4265,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-200", "epss": 0.09325, -"epss_pct": 0.9502, +"epss_pct": 0.95026, "name": "WordPress MyPixs <=0.3 - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-1000012.yaml" @@ -4274,7 +4274,7 @@ "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "cwe": "CWE-78", "epss": 0.05072, -"epss_pct": 0.91726, +"epss_pct": 0.91737, "name": "Xdebug <= 2.5.5 - Command Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-10141.yaml" @@ -4283,7 +4283,7 @@ "cvss": 5.0, "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:N/I:P/A:N", "epss": 0.06732, -"epss_pct": 0.93473, +"epss_pct": 0.93482, "name": "vsftpd <= 3.0.2 - Access Restriction Bypass", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2015/CVE-2015-1419.yaml" @@ -4313,7 +4313,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N", "cwe": "CWE-22", "epss": 0.22055, -"epss_pct": 0.97494, +"epss_pct": 0.97498, "name": "WordPress Slider Revolution - Local File Disclosure", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-1579.yaml" @@ -4333,7 +4333,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:N", "cwe": "CWE-79", "epss": 0.14157, -"epss_pct": 0.96311, +"epss_pct": 0.96316, "name": "Fortinet FortiOS <=5.2.3 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-1880.yaml" @@ -4343,7 +4343,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-862", "epss": 0.07729, -"epss_pct": 0.94198, +"epss_pct": 0.94205, "name": "WP Attachment Export < 0.2.4 - Unrestricted File Download", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-20067.yaml" @@ -4353,7 +4353,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N", "cwe": "CWE-22", "epss": 0.39424, -"epss_pct": 0.98503, +"epss_pct": 0.98506, "name": "Magento Server MAGMI - Directory Traversal", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-2067.yaml" @@ -4363,7 +4363,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:N", "cwe": "CWE-79", "epss": 0.1404, -"epss_pct": 0.9629, +"epss_pct": 0.96295, "name": "Magento Server Mass Importer - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-2068.yaml" @@ -4383,7 +4383,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N", "cwe": "CWE-22", "epss": 0.26774, -"epss_pct": 0.97884, +"epss_pct": 0.97886, "name": "Ericsson Drutt MSDP - Local File Inclusion", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-2166.yaml" @@ -4393,7 +4393,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P", "cwe": "CWE-89", "epss": 0.11182, -"epss_pct": 0.95638, +"epss_pct": 0.95644, "name": "WordPress Spider Calendar <=1.4.9 - SQL Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-2196.yaml" @@ -4414,7 +4414,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:P", "cwe": "CWE-352", "epss": 0.03831, -"epss_pct": 0.89348, +"epss_pct": 0.89362, "name": "WordPress AB Google Map Travel <=3.4 - Stored Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-2755.yaml" @@ -4434,7 +4434,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:N", "cwe": "CWE-79", "epss": 0.07328, -"epss_pct": 0.93946, +"epss_pct": 0.93954, "name": "Navis DocumentCloud <0.1.1 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-2807.yaml" @@ -4444,7 +4444,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:N", "cwe": "CWE-601", "epss": 0.10317, -"epss_pct": 0.9537, +"epss_pct": 0.95376, "name": "Kaseya Virtual System Administrator - Open Redirect", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-2863.yaml" @@ -4454,7 +4454,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:C", "cwe": "CWE-22", "epss": 0.86643, -"epss_pct": 0.99725, +"epss_pct": 0.99726, "name": "SysAid Help Desk <15.2 - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-2996.yaml" @@ -4474,7 +4474,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:N", "cwe": "CWE-284", "epss": 0.44708, -"epss_pct": 0.98679, +"epss_pct": 0.98681, "name": "Ruby on Rails Web Console - Remote Code Execution", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-3224.yaml" @@ -4494,7 +4494,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:N/A:N", "cwe": "CWE-22", "epss": 0.32927, -"epss_pct": 0.98234, +"epss_pct": 0.98238, "name": "Elasticsearch - Local File Inclusion", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-3337.yaml" @@ -4532,7 +4532,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:P", "cwe": "CWE-22", "epss": 0.08083, -"epss_pct": 0.94396, +"epss_pct": 0.94403, "name": "ResourceSpace - Local File inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-3648.yaml" @@ -4542,7 +4542,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N", "cwe": "CWE-22", "epss": 0.17681, -"epss_pct": 0.96936, +"epss_pct": 0.9694, "name": "Bonita BPM Portal <6.5.3 - Local File Inclusion", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-3897.yaml" @@ -4552,7 +4552,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:N", "cwe": "CWE-284", "epss": 0.08269, -"epss_pct": 0.94511, +"epss_pct": 0.94518, "name": "Symfony - Authentication Bypass", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-4050.yaml" @@ -4562,7 +4562,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:S/C:P/I:P/A:P", "cwe": "CWE-89", "epss": 0.09183, -"epss_pct": 0.94963, +"epss_pct": 0.94969, "name": "WordPress NewStatPress 0.9.8 - SQL Injection", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-4062.yaml" @@ -4572,7 +4572,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:S/C:N/I:P/A:N", "cwe": "CWE-79", "epss": 0.06188, -"epss_pct": 0.92995, +"epss_pct": 0.93003, "name": "NewStatPress <0.9.9 - Cross-Site Scripting", "severity": "low", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-4063.yaml" @@ -4592,7 +4592,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:N", "cwe": "CWE-79", "epss": 0.07495, -"epss_pct": 0.94046, +"epss_pct": 0.94053, "name": "WordPress Church Admin <0.810 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-4127.yaml" @@ -4602,7 +4602,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N", "cwe": "CWE-22", "epss": 0.18958, -"epss_pct": 0.97097, +"epss_pct": 0.97101, "name": "WordPress SE HTML5 Album Audio Player 1.1.0 - Directory Traversal", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-4414.yaml" @@ -4612,7 +4612,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-434", "epss": 0.40595, -"epss_pct": 0.98548, +"epss_pct": 0.98551, "name": "WordPress Plugin Aviary Image Editor Addon For Gravity Forms 3.0 Beta - Arbitrary File Upload", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-4455.yaml" @@ -4622,7 +4622,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.51829, -"epss_pct": 0.98867, +"epss_pct": 0.98869, "name": "Koha 3.20.1 - Directory Traversal", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-4632.yaml" @@ -4632,7 +4632,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N", "cwe": "CWE-22", "epss": 0.16235, -"epss_pct": 0.96717, +"epss_pct": 0.9672, "name": "Xceedium Xsuite <=2.4.4.5 - Local File Inclusion", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-4666.yaml" @@ -4642,7 +4642,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-601", "epss": 0.06719, -"epss_pct": 0.93453, +"epss_pct": 0.93461, "name": "Xsuite <=2.4.4.5 - Open Redirect", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-4668.yaml" @@ -4652,7 +4652,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.15646, -"epss_pct": 0.96601, +"epss_pct": 0.96605, "name": "WordPress Zip Attachments <= 1.1.4 - Arbitrary File Retrieval", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-4694.yaml" @@ -4662,7 +4662,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:N", "cwe": "CWE-601", "epss": 0.12523, -"epss_pct": 0.95939, +"epss_pct": 0.95944, "name": "Novius OS 5.0.1-elche - Open Redirect", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-5354.yaml" @@ -4671,7 +4671,7 @@ "cvss": 6.4, "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:P/A:N", "epss": 0.06283, -"epss_pct": 0.93091, +"epss_pct": 0.93097, "name": "WordPress StageShow <5.0.9 - Open Redirect", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-5461.yaml" @@ -4681,7 +4681,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.10148, -"epss_pct": 0.95318, +"epss_pct": 0.95324, "name": "WordPress MDC YouTube Downloader 2.1.0 - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-5469.yaml" @@ -4691,7 +4691,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-22", "epss": 0.32483, -"epss_pct": 0.98211, +"epss_pct": 0.98214, "name": "Swim Team <= v1.44.10777 - Local File Inclusion", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-5471.yaml" @@ -4725,7 +4725,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:L/Au:N/C:P/I:N/A:N", "cwe": "CWE-22", "epss": 0.09385, -"epss_pct": 0.95044, +"epss_pct": 0.9505, "name": "Geddy <13.0.8 - Local File Inclusion", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-5688.yaml" @@ -4784,7 +4784,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:N", "cwe": "CWE-79", "epss": 0.12042, -"epss_pct": 0.95841, +"epss_pct": 0.95846, "name": "Nordex NC2 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-6477.yaml" @@ -4794,7 +4794,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.05375, -"epss_pct": 0.92093, +"epss_pct": 0.92103, "name": "Combodo iTop <2.2.0-2459 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-6544.yaml" @@ -4804,7 +4804,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:N", "cwe": "CWE-79", "epss": 0.0384, -"epss_pct": 0.89372, +"epss_pct": 0.89386, "name": "WordPress sourceAFRICA <=0.1.3 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-6920.yaml" @@ -4814,7 +4814,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.45479, -"epss_pct": 0.98701, +"epss_pct": 0.98704, "name": "D-Link DVG-N5402SP - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-7245.yaml" @@ -4834,7 +4834,7 @@ "cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:N/I:P/A:N", "cwe": "CWE-79", "epss": 0.04405, -"epss_pct": 0.90642, +"epss_pct": 0.90654, "name": "WordPress Pie-Register <2.0.19 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-7377.yaml" @@ -4864,7 +4864,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.10631, -"epss_pct": 0.9547, +"epss_pct": 0.95476, "name": "ManageEngine Firewall Analyzer <8.0 - Local File Inclusion", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-7780.yaml" @@ -4873,7 +4873,7 @@ "cvss": 5.8, "cvss_vector": "CVSS:2.0/AV:N/AC:M/Au:N/C:P/I:P/A:N", "epss": 0.05143, -"epss_pct": 0.91821, +"epss_pct": 0.91831, "name": "Kentico CMS 8.2 - Open Redirect", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-7823.yaml" @@ -4890,7 +4890,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.03263, -"epss_pct": 0.87514, +"epss_pct": 0.87528, "name": "SourceBans <2.0 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-8349.yaml" @@ -4900,7 +4900,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.02645, -"epss_pct": 0.84537, +"epss_pct": 0.84555, "name": "WordPress Calls to Action <=2.4.3 - Authenticated Reflected XSS", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-8350.yaml" @@ -4910,7 +4910,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-200", "epss": 0.60241, -"epss_pct": 0.9907, +"epss_pct": 0.99072, "name": "Atlassian Confluence <5.8.17 - Information Disclosure", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-8399.yaml" @@ -4929,7 +4929,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:N", "cwe": "CWE-918", "epss": 0.11154, -"epss_pct": 0.9563, +"epss_pct": 0.95636, "name": "Umbraco <7.4.0- Server-Side Request Forgery", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-8813.yaml" @@ -4946,7 +4946,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01805, -"epss_pct": 0.77017, +"epss_pct": 0.77044, "name": "NewStatPress <=1.0.4 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-9312.yaml" @@ -4956,7 +4956,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.46125, -"epss_pct": 0.98721, +"epss_pct": 0.98723, "name": "404 to 301 <= 2.0.2 - Authenticated Blind SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-9323.yaml" @@ -4966,7 +4966,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.55008, -"epss_pct": 0.98953, +"epss_pct": 0.98955, "name": "mTheme Unus < 2.3 - Directory Traversal", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-9406.yaml" @@ -4976,7 +4976,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.03605, -"epss_pct": 0.88655, +"epss_pct": 0.88669, "name": "WordPress Symposium <=15.8.1 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-9414.yaml" @@ -4986,7 +4986,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "cwe": "CWE-20", "epss": 0.03399, -"epss_pct": 0.88002, +"epss_pct": 0.88015, "name": "BJ Lazy Load (Timthumb) <= 0.7.5 - Remote File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-9415.yaml" @@ -4996,7 +4996,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.12736, -"epss_pct": 0.95986, +"epss_pct": 0.95991, "name": "WordPress RobotCPA 5 - Directory Traversal", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-9480.yaml" @@ -5006,7 +5006,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-434", "epss": 0.16254, -"epss_pct": 0.96719, +"epss_pct": 0.96723, "name": "WordPress ShowBiz Pro <= 1.7.1 - Authenticated Arbitrary File Upload to RCE", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-9499.yaml" @@ -5015,7 +5015,7 @@ "cvss": 7.5, "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "epss": 0.51989, -"epss_pct": 0.9887, +"epss_pct": 0.98873, "name": "Adobe AEM Dispatcher <4.15 - Rules Bypass", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-0957.yaml" @@ -5025,7 +5025,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.03718, -"epss_pct": 0.89002, +"epss_pct": 0.89016, "name": "WordPress Admin Font Editor <=1.8 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-1000126.yaml" @@ -5035,7 +5035,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.03718, -"epss_pct": 0.89002, +"epss_pct": 0.89015, "name": "WordPress AJAX Random Post <=2.00 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-1000127.yaml" @@ -5045,7 +5045,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.04195, -"epss_pct": 0.90234, +"epss_pct": 0.90246, "name": "WordPress anti-plagiarism <=3.60 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-1000128.yaml" @@ -5055,7 +5055,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.03236, -"epss_pct": 0.87401, +"epss_pct": 0.87416, "name": "WordPress defa-online-image-protector <=3.3 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-1000129.yaml" @@ -5065,7 +5065,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.02897, -"epss_pct": 0.85965, +"epss_pct": 0.85981, "name": "WordPress e-search <=1.0 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-1000130.yaml" @@ -5075,7 +5075,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.0465, -"epss_pct": 0.91088, +"epss_pct": 0.91099, "name": "WordPress e-search <=1.0 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-1000131.yaml" @@ -5085,7 +5085,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.04426, -"epss_pct": 0.9068, +"epss_pct": 0.90692, "name": "WordPress enhanced-tooltipglossary 3.2.8 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-1000132.yaml" @@ -5095,7 +5095,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.03415, -"epss_pct": 0.88054, +"epss_pct": 0.88067, "name": "WordPress forget-about-shortcode-buttons 1.1.1 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-1000133.yaml" @@ -5105,7 +5105,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.0465, -"epss_pct": 0.91088, +"epss_pct": 0.91099, "name": "WordPress HDW Video Gallery <=1.2 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-1000134.yaml" @@ -5115,7 +5115,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.0465, -"epss_pct": 0.91087, +"epss_pct": 0.91099, "name": "WordPress HDW Video Gallery <=1.2 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-1000135.yaml" @@ -5125,7 +5125,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.03415, -"epss_pct": 0.88054, +"epss_pct": 0.88067, "name": "WordPress heat-trackr 1.0 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-1000136.yaml" @@ -5135,7 +5135,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.04448, -"epss_pct": 0.90729, +"epss_pct": 0.90742, "name": "WordPress Hero Maps Pro 2.1.0 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-1000137.yaml" @@ -5145,7 +5145,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.03432, -"epss_pct": 0.88113, +"epss_pct": 0.88127, "name": "WordPress Admin Font Editor <=1.8 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-1000138.yaml" @@ -5155,7 +5155,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.04195, -"epss_pct": 0.90233, +"epss_pct": 0.90246, "name": "WordPress Infusionsoft Gravity Forms <=1.5.11 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-1000139.yaml" @@ -5165,7 +5165,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.03432, -"epss_pct": 0.88113, +"epss_pct": 0.88126, "name": "WordPress New Year Firework <=1.1.9 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-1000140.yaml" @@ -5175,7 +5175,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.03462, -"epss_pct": 0.88218, +"epss_pct": 0.88232, "name": "WordPress Page Layout builder v1.9.3 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-1000141.yaml" @@ -5185,7 +5185,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.04448, -"epss_pct": 0.9073, +"epss_pct": 0.90741, "name": "WordPress MW Font Changer <=4.2.5 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-1000142.yaml" @@ -5195,7 +5195,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.03558, -"epss_pct": 0.88509, +"epss_pct": 0.88523, "name": "WordPress Photoxhibit 2.1.8 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-1000143.yaml" @@ -5205,7 +5205,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.03462, -"epss_pct": 0.88219, +"epss_pct": 0.88232, "name": "WordPress Pondol Form to Mail <=1.1 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-1000146.yaml" @@ -5215,7 +5215,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.03209, -"epss_pct": 0.87285, +"epss_pct": 0.873, "name": "WordPress S3 Video <=0.983 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-1000148.yaml" @@ -5225,7 +5225,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.03977, -"epss_pct": 0.89754, +"epss_pct": 0.89765, "name": "WordPress Simpel Reserveren <=3.5.2 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-1000149.yaml" @@ -5235,7 +5235,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.04173, -"epss_pct": 0.90187, +"epss_pct": 0.902, "name": "WordPress Tidio-form <=1.0 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-1000152.yaml" @@ -5245,7 +5245,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.04486, -"epss_pct": 0.90794, +"epss_pct": 0.90806, "name": "WordPress Tidio Gallery <=1.1 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-1000153.yaml" @@ -5255,7 +5255,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.03432, -"epss_pct": 0.88113, +"epss_pct": 0.88126, "name": "WordPress WHIZZ <=1.0.7 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-1000154.yaml" @@ -5265,7 +5265,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.04486, -"epss_pct": 0.90794, +"epss_pct": 0.90806, "name": "WordPress WPSOLR <=8.6 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-1000155.yaml" @@ -5295,7 +5295,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.83406, -"epss_pct": 0.99659, +"epss_pct": 0.9966, "name": "Zabbix - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-10134.yaml" @@ -5312,7 +5312,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.16109, -"epss_pct": 0.9669, +"epss_pct": 0.96693, "name": "Opsview Monitor Pro - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-10367.yaml" @@ -5322,7 +5322,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-601", "epss": 0.02178, -"epss_pct": 0.81081, +"epss_pct": 0.81103, "name": "Opsview Monitor Pro - Open Redirect", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-10368.yaml" @@ -5332,7 +5332,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.11662, -"epss_pct": 0.95746, +"epss_pct": 0.95752, "name": "Wordpress Zedna eBook download <1.2 - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-10924.yaml" @@ -5342,7 +5342,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.05596, -"epss_pct": 0.92356, +"epss_pct": 0.92366, "name": "WordPress zm-gallery plugin 1.0 SQL Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-10940.yaml" @@ -5352,7 +5352,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-20", "epss": 0.10582, -"epss_pct": 0.95455, +"epss_pct": 0.95461, "name": "WordPress Mail Masta 1.0 - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-10956.yaml" @@ -5362,7 +5362,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-20", "epss": 0.08976, -"epss_pct": 0.94887, +"epss_pct": 0.94894, "name": "WordPress wSecure Lite < 2.4 - Remote Code Execution", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-10960.yaml" @@ -5372,7 +5372,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01703, -"epss_pct": 0.75625, +"epss_pct": 0.7565, "name": "Brafton WordPress Plugin < 3.4.8 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-10973.yaml" @@ -5382,7 +5382,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01506, -"epss_pct": 0.72574, +"epss_pct": 0.72604, "name": "Safe Editor Plugin < 1.2 - CSS/JS-injection", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-10976.yaml" @@ -5392,7 +5392,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.02796, -"epss_pct": 0.8545, +"epss_pct": 0.85466, "name": "ScoreMe Theme - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-10993.yaml" @@ -5407,7 +5407,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-434", "epss": 0.05719, -"epss_pct": 0.92497, +"epss_pct": 0.92507, "name": "WordPress Frontend File Manager < 4.0 & N-Media Post Frontend < 1.1 - Arbitrary File Upload", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-15042.yaml" @@ -5417,7 +5417,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-434", "epss": 0.10032, -"epss_pct": 0.95279, +"epss_pct": 0.95285, "name": "WP Mobile Detector <= 3.5 - Unrestricted File Upload", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-15043.yaml" @@ -5468,7 +5468,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.4145, -"epss_pct": 0.98573, +"epss_pct": 0.98576, "name": "SAP xMII 15.0 for SAP NetWeaver 7.4 - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-2389.yaml" @@ -5508,7 +5508,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.05937, -"epss_pct": 0.92742, +"epss_pct": 0.92751, "name": "Fortinet FortiOS - Open Redirect/Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-3978.yaml" @@ -5549,7 +5549,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-93", "epss": 0.19798, -"epss_pct": 0.97222, +"epss_pct": 0.97226, "name": "Apache mod_userdir CRLF injection", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-4975.yaml" @@ -5559,7 +5559,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-19", "epss": 0.79176, -"epss_pct": 0.99568, +"epss_pct": 0.9957, "name": "Spring Security OAuth2 Remote Command Execution", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-4977.yaml" @@ -5568,7 +5568,7 @@ "cvss": 9.8, "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "epss": 0.24427, -"epss_pct": 0.9771, +"epss_pct": 0.97712, "name": "NETGEAR DGN2200 / DGND3700 - Admin Password Disclosure", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-5649.yaml" @@ -5644,7 +5644,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.68493, -"epss_pct": 0.99283, +"epss_pct": 0.99285, "name": "vBulletin <= 4.2.3 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-6195.yaml" @@ -5724,7 +5724,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-22", "epss": 0.93249, -"epss_pct": 0.99828, +"epss_pct": 0.99829, "name": "Trend Micro Threat Discovery Appliance 2.6.1062r1 - Authentication Bypass", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-7552.yaml" @@ -5734,7 +5734,7 @@ "cvss_vector": "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-200", "epss": 0.03869, -"epss_pct": 0.89451, +"epss_pct": 0.89465, "name": "Sony IPELA Engine IP Camera - Hardcoded Account", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-7834.yaml" @@ -5744,7 +5744,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.08216, -"epss_pct": 0.94481, +"epss_pct": 0.94487, "name": "SPIP <3.1.2 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-7981.yaml" @@ -5754,7 +5754,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.13164, -"epss_pct": 0.96089, +"epss_pct": 0.96094, "name": "Aruba Airwave <8.2.3.1 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2016/CVE-2016-8527.yaml" @@ -5800,7 +5800,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-918", "epss": 0.12543, -"epss_pct": 0.95944, +"epss_pct": 0.95949, "name": "DotNetNuke (DNN) ImageHandler <9.2.0 - Server-Side Request Forgery", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-0929.yaml" @@ -5828,7 +5828,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-200", "epss": 0.08348, -"epss_pct": 0.94551, +"epss_pct": 0.94558, "name": "Oracle GlassFish Server Open Source Edition 3.0.1 - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-1000029.yaml" @@ -5838,7 +5838,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-601", "epss": 0.02377, -"epss_pct": 0.82697, +"epss_pct": 0.82718, "name": "Phoenix Framework - Open Redirect", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-1000163.yaml" @@ -5848,7 +5848,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.59063, -"epss_pct": 0.99044, +"epss_pct": 0.99045, "name": "WordPress Delightful Downloads Jquery File Tree 2.1.5 - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-1000170.yaml" @@ -5868,7 +5868,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-326", "epss": 0.94104, -"epss_pct": 0.9984, +"epss_pct": 0.99841, "name": "Primetek Primefaces 5.x - Remote Code Execution", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-1000486.yaml" @@ -5891,7 +5891,7 @@ "cvss": 8.2, "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N", "epss": 0.17558, -"epss_pct": 0.96919, +"epss_pct": 0.96923, "name": "Oracle Content Server - Cross-Site Scripting", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-10075.yaml" @@ -5920,7 +5920,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.02069, -"epss_pct": 0.80086, +"epss_pct": 0.80108, "name": "phpLDAPadmin <= 1.2.3 - Reflected XSS", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-11107.yaml" @@ -5945,7 +5945,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.13098, -"epss_pct": 0.96077, +"epss_pct": 0.96082, "name": "Subrion CMS <4.1.5.10 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-11444.yaml" @@ -5965,7 +5965,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-601", "epss": 0.02286, -"epss_pct": 0.81981, +"epss_pct": 0.82002, "name": "FineCMS <5.0.9 - Open Redirect", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-11586.yaml" @@ -5975,7 +5975,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-276", "epss": 0.87378, -"epss_pct": 0.99742, +"epss_pct": 0.99743, "name": "XML-RPC Server - Remote Code Execution", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-11610.yaml" @@ -5985,7 +5985,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01937, -"epss_pct": 0.78666, +"epss_pct": 0.7869, "name": "FineCMS <=5.0.10 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-11629.yaml" @@ -5995,7 +5995,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-601", "epss": 0.03406, -"epss_pct": 0.88028, +"epss_pct": 0.88041, "name": "XOOPS Core 2.5.8 - Open Redirect", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-12138.yaml" @@ -6024,7 +6024,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.04515, -"epss_pct": 0.90844, +"epss_pct": 0.90856, "name": "HPE System Management - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-12544.yaml" @@ -6034,7 +6034,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.03253, -"epss_pct": 0.87472, +"epss_pct": 0.87487, "name": "DokuWiki - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-12583.yaml" @@ -6044,7 +6044,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-20", "epss": 0.87123, -"epss_pct": 0.99735, +"epss_pct": 0.99736, "name": "Apache Struts2 S2-053 - Remote Code Execution", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-12611.yaml" @@ -6099,7 +6099,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.95111, -"epss_pct": 0.99857, +"epss_pct": 0.99858, "name": "SAP NetWeaver Application Server Java 7.5 - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-12637.yaml" @@ -6109,7 +6109,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.23566, -"epss_pct": 0.97635, +"epss_pct": 0.97637, "name": "Django Debug Page - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-12794.yaml" @@ -6119,7 +6119,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-78", "epss": 0.21842, -"epss_pct": 0.97472, +"epss_pct": 0.97475, "name": "OpenDreambox 2.0.0 - Remote Code Execution", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-14135.yaml" @@ -6129,7 +6129,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.03718, -"epss_pct": 0.89004, +"epss_pct": 0.89017, "name": "FortiGate FortiOS SSL VPN Web Portal - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-14186.yaml" @@ -6139,7 +6139,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-601", "epss": 0.0294, -"epss_pct": 0.86157, +"epss_pct": 0.86175, "name": "OpenText Documentum Administrator 7.2.0180.0055 - Open Redirect", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-14524.yaml" @@ -6149,7 +6149,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-78", "epss": 0.50069, -"epss_pct": 0.98819, +"epss_pct": 0.98822, "name": "Trixbox - 2.8.0.4 OS Command Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-14535.yaml" @@ -6159,7 +6159,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.39278, -"epss_pct": 0.98497, +"epss_pct": 0.98499, "name": "Trixbox 2.8.0 - Path Traversal", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-14537.yaml" @@ -6169,7 +6169,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.02892, -"epss_pct": 0.8594, +"epss_pct": 0.85955, "name": "WordPress 2kb Amazon Affiliates Store <2.1.1 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-14622.yaml" @@ -6179,7 +6179,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.03836, -"epss_pct": 0.89363, +"epss_pct": 0.89376, "name": "WSO2 Data Analytics Server 3.1.0 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-14651.yaml" @@ -6238,7 +6238,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-601", "epss": 0.02187, -"epss_pct": 0.81156, +"epss_pct": 0.81177, "name": "WordPress < 4.8.2 - Authenticated Open Redirect", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-14725.yaml" @@ -6265,7 +6265,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-552", "epss": 0.60857, -"epss_pct": 0.99088, +"epss_pct": 0.99089, "name": "Intelbras WRN 150 - Authentication Bypass", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-14942.yaml" @@ -6282,7 +6282,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.06147, -"epss_pct": 0.92955, +"epss_pct": 0.92964, "name": "Dreambox WebControl 2.0.0 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-15287.yaml" @@ -6292,7 +6292,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.15333, -"epss_pct": 0.96529, +"epss_pct": 0.96532, "name": "Luracast Restler 3.0.1 via TYPO3 Restler 1.7.1 - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-15363.yaml" @@ -6302,7 +6302,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.26619, -"epss_pct": 0.97872, +"epss_pct": 0.97874, "name": "FiberHome Routers - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-15647.yaml" @@ -6348,7 +6348,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.14104, -"epss_pct": 0.96299, +"epss_pct": 0.96304, "name": "Nextjs <2.4.1 - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-16877.yaml" @@ -6368,7 +6368,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.05096, -"epss_pct": 0.91764, +"epss_pct": 0.91775, "name": "WordPress Emag Marketplace Connector 1.0 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-17043.yaml" @@ -6378,7 +6378,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.03419, -"epss_pct": 0.88063, +"epss_pct": 0.88076, "name": "WordPress amtyThumb Posts 8.1.3 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-17059.yaml" @@ -6395,7 +6395,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.03473, -"epss_pct": 0.88256, +"epss_pct": 0.8827, "name": "WordPress < 4.9.1 - Authenticated JavaScript File Upload", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-17092.yaml" @@ -6419,7 +6419,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.05088, -"epss_pct": 0.91754, +"epss_pct": 0.91765, "name": "WordPress Mailster <=1.5.4 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-17451.yaml" @@ -6439,7 +6439,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.13194, -"epss_pct": 0.96094, +"epss_pct": 0.96099, "name": "DedeCMS 5.7 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-17731.yaml" @@ -6459,7 +6459,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-611", "epss": 0.04648, -"epss_pct": 0.91086, +"epss_pct": 0.91098, "name": "Episerver 7 - Blind XML External Entity Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-17762.yaml" @@ -6469,7 +6469,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.04531, -"epss_pct": 0.90877, +"epss_pct": 0.90888, "name": "AvantFAX 3.3.3 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-18024.yaml" @@ -6479,7 +6479,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-20", "epss": 0.3897, -"epss_pct": 0.98484, +"epss_pct": 0.98486, "name": "Fastjson Insecure Deserialization - Remote Code Execution", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-18349.yaml" @@ -6499,7 +6499,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01458, -"epss_pct": 0.71675, +"epss_pct": 0.71705, "name": "AdPush < 1.44 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-18487.yaml" @@ -6509,7 +6509,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01458, -"epss_pct": 0.71675, +"epss_pct": 0.71705, "name": "Contact Form Multi by BestWebSoft < 1.2.1 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-18490.yaml" @@ -6519,7 +6519,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01458, -"epss_pct": 0.71675, +"epss_pct": 0.71705, "name": "Contact Form by BestWebSoft < 4.0.6 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-18491.yaml" @@ -6529,7 +6529,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01458, -"epss_pct": 0.71675, +"epss_pct": 0.71706, "name": "Contact Form to DB by BestWebSoft < 1.5.7 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-18492.yaml" @@ -6539,7 +6539,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.014, -"epss_pct": 0.70597, +"epss_pct": 0.70628, "name": "Custom Admin Page by BestWebSoft < 0.1.2 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-18493.yaml" @@ -6549,7 +6549,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.014, -"epss_pct": 0.70597, +"epss_pct": 0.70627, "name": "Custom Search by BestWebSoft < 1.36 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-18494.yaml" @@ -6559,7 +6559,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.014, -"epss_pct": 0.70597, +"epss_pct": 0.70628, "name": "Htaccess by BestWebSoft < 1.7.6 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-18496.yaml" @@ -6569,7 +6569,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.0141, -"epss_pct": 0.70786, +"epss_pct": 0.70816, "name": "Social Buttons Pack by BestWebSof < 1.1.1 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-18500.yaml" @@ -6579,7 +6579,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.0141, -"epss_pct": 0.70786, +"epss_pct": 0.70816, "name": "Social Login by BestWebSoft < 0.2 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-18501.yaml" @@ -6589,7 +6589,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01652, -"epss_pct": 0.74868, +"epss_pct": 0.74898, "name": "Subscriber by BestWebSoft < 1.3.5 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-18502.yaml" @@ -6599,7 +6599,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01652, -"epss_pct": 0.74868, +"epss_pct": 0.74898, "name": "BestWebSoft's Twitter < 2.55 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-18505.yaml" @@ -6609,7 +6609,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01688, -"epss_pct": 0.75427, +"epss_pct": 0.75453, "name": "LinkedIn by BestWebSoft < 1.0.5 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-18516.yaml" @@ -6619,7 +6619,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01621, -"epss_pct": 0.74397, +"epss_pct": 0.74428, "name": "Pinterest by BestWebSoft < 1.0.5 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-18517.yaml" @@ -6629,7 +6629,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01621, -"epss_pct": 0.74397, +"epss_pct": 0.74427, "name": "SMTP by BestWebSoft < 1.1.0 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-18518.yaml" @@ -6639,7 +6639,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01688, -"epss_pct": 0.75427, +"epss_pct": 0.75454, "name": "Pagination by BestWebSoft < 1.0.7 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-18527.yaml" @@ -6649,7 +6649,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01757, -"epss_pct": 0.76384, +"epss_pct": 0.76411, "name": "PDF & Print by BestWebSoft < 1.9.4 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-18528.yaml" @@ -6659,7 +6659,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01621, -"epss_pct": 0.74397, +"epss_pct": 0.74427, "name": "PromoBar by BestWebSoft < 1.1.1 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-18529.yaml" @@ -6669,7 +6669,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01384, -"epss_pct": 0.70277, +"epss_pct": 0.70306, "name": "Rating by BestWebSoft < 0.2 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-18530.yaml" @@ -6679,7 +6679,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01441, -"epss_pct": 0.71359, +"epss_pct": 0.71387, "name": "Realty by BestWebSoft < 1.1.0 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-18532.yaml" @@ -6689,7 +6689,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.0203, -"epss_pct": 0.7968, +"epss_pct": 0.79702, "name": "WordPress Stop User Enumeration <=1.3.7 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-18536.yaml" @@ -6699,7 +6699,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01621, -"epss_pct": 0.74397, +"epss_pct": 0.74427, "name": "Visitors Online by BestWebSoft < 1.0.0 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-18537.yaml" @@ -6709,7 +6709,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01388, -"epss_pct": 0.70349, +"epss_pct": 0.7038, "name": "Zendesk Help Center by BestWebSoft < 1.0.5 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-18542.yaml" @@ -6719,7 +6719,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01384, -"epss_pct": 0.70276, +"epss_pct": 0.70306, "name": "Google Analytics by BestWebSoft < 1.7.1 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-18556.yaml" @@ -6729,7 +6729,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01384, -"epss_pct": 0.70276, +"epss_pct": 0.70307, "name": "Google Maps by BestWebSoft < 1.3.6 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-18557.yaml" @@ -6739,7 +6739,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01384, -"epss_pct": 0.70277, +"epss_pct": 0.70307, "name": "Testimonials by BestWebSoft < 0.1.9 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-18558.yaml" @@ -6749,7 +6749,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01384, -"epss_pct": 0.70276, +"epss_pct": 0.70306, "name": "Error Log Viewer by BestWebSoft < 1.0.6 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-18562.yaml" @@ -6759,7 +6759,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.0139, -"epss_pct": 0.70414, +"epss_pct": 0.70444, "name": "Sender by BestWebSoft < 1.2.1 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-18564.yaml" @@ -6769,7 +6769,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.0139, -"epss_pct": 0.70414, +"epss_pct": 0.70444, "name": "Updater by BestWebSoft < 1.35 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-18565.yaml" @@ -6779,7 +6779,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.0139, -"epss_pct": 0.70414, +"epss_pct": 0.70444, "name": "User Role by BestWebSoft < 1.5.6 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-18566.yaml" @@ -6789,7 +6789,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-94", "epss": 0.12092, -"epss_pct": 0.9585, +"epss_pct": 0.95855, "name": "WordPress Shortcodes Ultimate <= 5.0.0 - Authenticated Remote Code Execution", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-18580.yaml" @@ -6799,7 +6799,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01404, -"epss_pct": 0.70682, +"epss_pct": 0.70714, "name": "Timesheet Plugin < 0.1.5 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-18590.yaml" @@ -6809,7 +6809,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01933, -"epss_pct": 0.78611, +"epss_pct": 0.78636, "name": "WordPress Qards - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-18598.yaml" @@ -6819,7 +6819,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-918", "epss": 0.15301, -"epss_pct": 0.96525, +"epss_pct": 0.96528, "name": "Graphite <=1.1.5 - Server-Side Request Forgery", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-18638.yaml" @@ -6829,7 +6829,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01026, -"epss_pct": 0.61194, +"epss_pct": 0.61234, "name": "Formidable Forms < 2.05.02 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-20192.yaml" @@ -6839,7 +6839,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-200", "epss": 0.01128, -"epss_pct": 0.64075, +"epss_pct": 0.64113, "name": "Formidable Form Builder < 2.05.03 - Unauthenticated Information Disclosure", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-20194.yaml" @@ -6849,7 +6849,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.07681, -"epss_pct": 0.94167, +"epss_pct": 0.94174, "name": "FortiOS 5.4.0 to 5.6.0 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-3131.yaml" @@ -6859,7 +6859,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.08112, -"epss_pct": 0.94422, +"epss_pct": 0.94429, "name": "Fortinet FortiOS < 5.6.0 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-3132.yaml" @@ -6869,7 +6869,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.10677, -"epss_pct": 0.95485, +"epss_pct": 0.95491, "name": "Fortinet FortiOS < 5.6.0 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-3133.yaml" @@ -6888,7 +6888,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N", "cwe": "CWE-601", "epss": 0.14622, -"epss_pct": 0.96404, +"epss_pct": 0.96408, "name": "Oracle E-Business Suite 12.1.3/12.2.x - Open Redirect", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-3528.yaml" @@ -6908,7 +6908,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.03271, -"epss_pct": 0.87539, +"epss_pct": 0.87554, "name": "McAfee Network Data Loss Prevention 9.3.x - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-4011.yaml" @@ -6998,7 +6998,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.04487, -"epss_pct": 0.90797, +"epss_pct": 0.90809, "name": "KMCIS CaseAware - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-5631.yaml" @@ -7037,7 +7037,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-93", "epss": 0.04622, -"epss_pct": 0.91043, +"epss_pct": 0.91054, "name": "OpenVPN Access Server 2.1.4 - CRLF Injection", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-5868.yaml" @@ -7047,7 +7047,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N", "cwe": "CWE-601", "epss": 0.02676, -"epss_pct": 0.84745, +"epss_pct": 0.84763, "name": "Odoo <= 8.0-20160726 & 9.0 - Open Redirect", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-5871.yaml" @@ -7067,7 +7067,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-502", "epss": 0.16373, -"epss_pct": 0.96738, +"epss_pct": 0.96742, "name": "JIRA Workflow Designer Plugin in Atlassian JIRA Server > 6.3.0 - Remote Code Execution (XXE)", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-5983.yaml" @@ -7096,7 +7096,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.02574, -"epss_pct": 0.84086, +"epss_pct": 0.84105, "name": "MaNGOSWebV4 < 4.0.8 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-6478.yaml" @@ -7165,7 +7165,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.08242, -"epss_pct": 0.94493, +"epss_pct": 0.945, "name": "Magmi 0.7.22 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-7391.yaml" @@ -7175,7 +7175,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-502", "epss": 0.41019, -"epss_pct": 0.98558, +"epss_pct": 0.98561, "name": "JBossMQ HTTP Invocation Layer (HTTPServerILServlet) - Unauthenticated Java Deserialization", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-7504.yaml" @@ -7200,7 +7200,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.0201, -"epss_pct": 0.79492, +"epss_pct": 0.79517, "name": "IceWarp WebMail 11.3.1.5 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-7855.yaml" @@ -7219,7 +7219,7 @@ "cvss": 9.8, "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "epss": 0.51418, -"epss_pct": 0.98858, +"epss_pct": 0.9886, "name": "Dahua Security - Configuration File Disclosure", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-7925.yaml" @@ -7229,7 +7229,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-20", "epss": 0.7453, -"epss_pct": 0.99458, +"epss_pct": 0.9946, "name": "Spring Data REST < 2.6.9 (Ingalls SR9) / 3.0.1 (Kay SR1) - PATCH Request Remote Code Execution", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-8046.yaml" @@ -7238,7 +7238,7 @@ "cvss": 9.8, "cwe": "CWE-200", "epss": 0.35359, -"epss_pct": 0.98331, +"epss_pct": 0.98334, "name": "GoAhead Camera - Credential Disclosure", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-8225.yaml" @@ -7247,8 +7247,8 @@ "cvss": 9.8, "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-255", -"epss": 0.73959, -"epss_pct": 0.99441, +"epss": 0.74243, +"epss_pct": 0.9945, "name": "Amcrest IP Camera Web Management - Data Exposure", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-8229.yaml" @@ -7317,7 +7317,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.09724, -"epss_pct": 0.9517, +"epss_pct": 0.95176, "name": "Reflected XSS - Telerik Reporting Module", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-9140.yaml" @@ -7335,7 +7335,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.04018, -"epss_pct": 0.89846, +"epss_pct": 0.89858, "name": "WordPress Raygun4WP <=1.8.0 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-9288.yaml" @@ -7345,7 +7345,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.05651, -"epss_pct": 0.92427, +"epss_pct": 0.92437, "name": "Odoo 8.0/9.0/10.0 - Local File Inclusion", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-9416.yaml" @@ -7355,7 +7355,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-918", "epss": 0.71601, -"epss_pct": 0.99372, +"epss_pct": 0.99374, "name": "Atlassian Jira IconURIServlet - Cross-Site Scripting/Server-Side Request Forgery", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-9506.yaml" @@ -7385,7 +7385,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-20", "epss": 0.94789, -"epss_pct": 0.99852, +"epss_pct": 0.99853, "name": "DotNetNuke 5.0.0 - 9.3.0 - Cookie Deserialization Remote Code Execution", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-9822.yaml" @@ -7415,7 +7415,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N", "cwe": "CWE-22", "epss": 0.04612, -"epss_pct": 0.91026, +"epss_pct": 0.91038, "name": "Schneider Electric Pelco VideoXpert Enterprise 2.0 - Path Traversal", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2017/CVE-2017-9965.yaml" @@ -7457,7 +7457,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.24674, -"epss_pct": 0.97729, +"epss_pct": 0.97733, "name": "Jolokia 1.3.7 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-1000129.yaml" @@ -7477,7 +7477,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-732", "epss": 0.12484, -"epss_pct": 0.95933, +"epss_pct": 0.95937, "name": "Cobbler - Authentication Bypass", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-1000226.yaml" @@ -7507,7 +7507,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-601", "epss": 0.03982, -"epss_pct": 0.89765, +"epss_pct": 0.89777, "name": "Sympa version =>6.2.16 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-1000671.yaml" @@ -7524,7 +7524,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01424, -"epss_pct": 0.71052, +"epss_pct": 0.7108, "name": "DomainMOD 4.11.01 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-1000856.yaml" @@ -7544,7 +7544,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-119", "epss": 0.39715, -"epss_pct": 0.98516, +"epss_pct": 0.98519, "name": "XiongMai uc-httpd 1.0.0 - Buffer Overflow", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-10088.yaml" @@ -7595,7 +7595,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.03883, -"epss_pct": 0.89487, +"epss_pct": 0.895, "name": "Palo Alto Networks PAN-OS GlobalProtect <8.1.4 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-10141.yaml" @@ -7605,7 +7605,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.44417, -"epss_pct": 0.98668, +"epss_pct": 0.98671, "name": "Ncomputing vSPace Pro 10 and 11 - Directory Traversal", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-10201.yaml" @@ -7615,7 +7615,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.02663, -"epss_pct": 0.84654, +"epss_pct": 0.84673, "name": "Zend Server <9.13 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-10230.yaml" @@ -7633,7 +7633,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01912, -"epss_pct": 0.78363, +"epss_pct": 0.78388, "name": "Lantronix SecureLinx Spider (SLS) 2.2+ - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-10383.yaml" @@ -7653,7 +7653,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.42556, -"epss_pct": 0.98609, +"epss_pct": 0.98611, "name": "NagiosXI <= 5.4.12 `commandline.php` SQL injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-10735.yaml" @@ -7663,7 +7663,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.42556, -"epss_pct": 0.98609, +"epss_pct": 0.98611, "name": "NagiosXI <= 5.4.12 - SQL injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-10736.yaml" @@ -7673,7 +7673,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.42556, -"epss_pct": 0.98609, +"epss_pct": 0.98611, "name": "NagiosXI <= 5.4.12 logbook.php SQL injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-10737.yaml" @@ -7698,7 +7698,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.39268, -"epss_pct": 0.98495, +"epss_pct": 0.98498, "name": "D-Link Routers - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-10822.yaml" @@ -7718,7 +7718,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-434", "epss": 0.12744, -"epss_pct": 0.95987, +"epss_pct": 0.95992, "name": "Prestashop AttributeWizardPro Module - Arbitrary File Upload", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-10942.yaml" @@ -7738,7 +7738,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.08743, -"epss_pct": 0.94775, +"epss_pct": 0.94782, "name": "Quest KACE SMA /common/run_cross_report.php 'fmt' XSS", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-11133.yaml" @@ -7758,7 +7758,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-20", "epss": 0.06534, -"epss_pct": 0.9331, +"epss_pct": 0.93318, "name": "Pandora FMS <=7.0NG.722 - Remote Code Execution", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-11222.yaml" @@ -7768,7 +7768,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.04733, -"epss_pct": 0.91216, +"epss_pct": 0.91227, "name": "Monstra CMS <=3.0.4 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-11227.yaml" @@ -7778,7 +7778,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.09054, -"epss_pct": 0.94916, +"epss_pct": 0.94922, "name": "Opencart Divido - Sql Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-11231.yaml" @@ -7798,7 +7798,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.02273, -"epss_pct": 0.81867, +"epss_pct": 0.81887, "name": "Monstra CMS 3.0.4 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-11473.yaml" @@ -7813,7 +7813,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.11176, -"epss_pct": 0.95635, +"epss_pct": 0.95641, "name": "ASUSTOR ADM 3.1.0.RFQ3 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-11511.yaml" @@ -7823,7 +7823,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-20", "epss": 0.52542, -"epss_pct": 0.98882, +"epss_pct": 0.98884, "name": "FlexPaper/FlowPaper 2.3.6 - Remote Code Execution", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-11686.yaml" @@ -7833,7 +7833,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.036, -"epss_pct": 0.88642, +"epss_pct": 0.88655, "name": "WordPress wpForo Forum <= 1.4.11 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-11709.yaml" @@ -7873,7 +7873,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-22", "epss": 0.17313, -"epss_pct": 0.96887, +"epss_pct": 0.96891, "name": "Eaton Intelligent Power Manager 1.6 - Directory Traversal", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-12031.yaml" @@ -7883,7 +7883,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.38988, -"epss_pct": 0.98484, +"epss_pct": 0.98486, "name": "Schools Alert Management Script - Arbitrary File Read", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-12054.yaml" @@ -7903,7 +7903,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.05634, -"epss_pct": 0.92409, +"epss_pct": 0.92419, "name": "OEcms 3.1 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-12095.yaml" @@ -7913,7 +7913,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-862", "epss": 0.45957, -"epss_pct": 0.98716, +"epss_pct": 0.98718, "name": "Dell EMC Avamar and Integrated Data Protection Appliance Installation Manager - Invalid Access Control", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-1217.yaml" @@ -7923,7 +7923,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-732", "epss": 0.10905, -"epss_pct": 0.95553, +"epss_pct": 0.95559, "name": "Seagate NAS OS 4.3.15.1 - Server Information Disclosure", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-12296.yaml" @@ -7933,7 +7933,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-601", "epss": 0.03127, -"epss_pct": 0.86948, +"epss_pct": 0.86962, "name": "Seagate NAS OS 4.3.15.1 - Open Redirect", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-12300.yaml" @@ -7943,7 +7943,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-287", "epss": 0.05867, -"epss_pct": 0.92681, +"epss_pct": 0.9269, "name": "Intelbras NPLUG 1.0.0.14 - Authentication Bypass", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-12455.yaml" @@ -7978,7 +7978,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-601", "epss": 0.0315, -"epss_pct": 0.87039, +"epss_pct": 0.87053, "name": "SV3C HD Camera L Series - Open Redirect", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-12675.yaml" @@ -7988,7 +7988,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.34505, -"epss_pct": 0.98299, +"epss_pct": 0.98301, "name": "Spring MVC Framework - Local File Inclusion", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-1271.yaml" @@ -8014,7 +8014,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.16118, -"epss_pct": 0.96693, +"epss_pct": 0.96696, "name": "Webgrind <= 1.5 - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-12909.yaml" @@ -8034,7 +8034,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.00991, -"epss_pct": 0.60116, +"epss_pct": 0.60158, "name": "TOTOLINK A3002RU 1.0.8 - Information Disclosure", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-13317.yaml" @@ -8063,7 +8063,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.62474, -"epss_pct": 0.99125, +"epss_pct": 0.99126, "name": "Fortinet FortiOS - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-13380.yaml" @@ -8078,7 +8078,7 @@ "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.06902, -"epss_pct": 0.93609, +"epss_pct": 0.93617, "name": "Zeta Producer Desktop CMS <14.2.1 - Local File Inclusion", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-13980.yaml" @@ -8088,7 +8088,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.07436, -"epss_pct": 0.94011, +"epss_pct": 0.94018, "name": "Synacor Zimbra Collaboration Suite Collaboration <8.8.11 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-14013.yaml" @@ -8105,7 +8105,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-22", "epss": 0.3757, -"epss_pct": 0.98426, +"epss_pct": 0.98429, "name": "VelotiSmart Wifi - Directory Traversal", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-14064.yaml" @@ -8115,7 +8115,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-601", "epss": 0.02257, -"epss_pct": 0.81745, +"epss_pct": 0.81766, "name": "Orange Forum 1.4.0 - Open Redirect", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-14474.yaml" @@ -8125,7 +8125,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-601", "epss": 0.2549, -"epss_pct": 0.97801, +"epss_pct": 0.97804, "name": "Django - Open Redirect", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-14574.yaml" @@ -8135,7 +8135,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-918", "epss": 0.76511, -"epss_pct": 0.99502, +"epss_pct": 0.99504, "name": "Responsive filemanager 9.13.1 Server-Side Request Forgery", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-14728.yaml" @@ -8145,7 +8145,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.9288, -"epss_pct": 0.99823, +"epss_pct": 0.99824, "name": "cgit < 1.2.1 - Directory Traversal", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-14912.yaml" @@ -8155,7 +8155,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H", "cwe": "CWE-732", "epss": 0.17195, -"epss_pct": 0.96873, +"epss_pct": 0.96877, "name": "Loytec LGATE-902 <6.4.2 - Local File Inclusion", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-14916.yaml" @@ -8165,7 +8165,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.17982, -"epss_pct": 0.96975, +"epss_pct": 0.96978, "name": "LOYTEC LGATE-902 6.3.2 - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-14918.yaml" @@ -8175,7 +8175,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-601", "epss": 0.02398, -"epss_pct": 0.82853, +"epss_pct": 0.82874, "name": "Polarisft Intellect Core Banking Software Version 9.7.1 - Open Redirect", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-14931.yaml" @@ -8195,7 +8195,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.12851, -"epss_pct": 0.96015, +"epss_pct": 0.9602, "name": "LG-Ericsson iPECS NMS 30M - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-15138.yaml" @@ -8213,7 +8213,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N", "cwe": "CWE-918", "epss": 0.44101, -"epss_pct": 0.9866, +"epss_pct": 0.98662, "name": "D-Link Central WifiManager - Server-Side Request Forgery", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-15517.yaml" @@ -8228,7 +8228,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.45242, -"epss_pct": 0.98695, +"epss_pct": 0.98698, "name": "Responsive FileManager <9.13.4 - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-15535.yaml" @@ -8271,7 +8271,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.06483, -"epss_pct": 0.93266, +"epss_pct": 0.93275, "name": "Jorani Leave Management System 0.6.5 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-15917.yaml" @@ -8291,7 +8291,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-22", "epss": 0.29816, -"epss_pct": 0.98067, +"epss_pct": 0.9807, "name": "WirelessHART Fieldgate SWG70 3.0 - Local File Inclusion", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-16059.yaml" @@ -8301,7 +8301,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-22", "epss": 0.39279, -"epss_pct": 0.98497, +"epss_pct": 0.98499, "name": "Cybrotech CyBroHttpServer 1.0.3 - Local File Inclusion", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-16133.yaml" @@ -8311,7 +8311,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.02285, -"epss_pct": 0.81962, +"epss_pct": 0.81983, "name": "BIBLIOsoft BIBLIOpac 2008 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-16139.yaml" @@ -8321,7 +8321,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.49918, -"epss_pct": 0.98814, +"epss_pct": 0.98817, "name": "WordPress Gift Voucher <4.1.8 - Blind SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-16159.yaml" @@ -8341,7 +8341,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-22", "epss": 0.6307, -"epss_pct": 0.99139, +"epss_pct": 0.99142, "name": "WordPress Plugin Wechat Broadcast 1.2.0 - Local File Inclusion", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-16283.yaml" @@ -8351,7 +8351,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N", "cwe": "CWE-200", "epss": 0.35828, -"epss_pct": 0.98351, +"epss_pct": 0.98354, "name": "LG SuperSign EZ CMS 2.5 - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-16288.yaml" @@ -8361,7 +8361,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.44358, -"epss_pct": 0.98667, +"epss_pct": 0.98669, "name": "WordPress Localize My Post 1.0 - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-16299.yaml" @@ -8381,7 +8381,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-287", "epss": 0.09512, -"epss_pct": 0.95093, +"epss_pct": 0.95099, "name": "CirCarLife <4.3 - Improper Authentication", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-16668.yaml" @@ -8391,7 +8391,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-287", "epss": 0.24568, -"epss_pct": 0.97721, +"epss_pct": 0.97724, "name": "CirCarLife <4.3 - Improper Authentication", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-16670.yaml" @@ -8401,7 +8401,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-200", "epss": 0.08851, -"epss_pct": 0.94832, +"epss_pct": 0.94838, "name": "CirCarLife <4.3 - Improper Authentication", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-16671.yaml" @@ -8411,7 +8411,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "cwe": "CWE-22", "epss": 0.0857, -"epss_pct": 0.94679, +"epss_pct": 0.94686, "name": "NCBI ToolBox - Directory Traversal", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-16716.yaml" @@ -8421,7 +8421,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-601", "epss": 0.02201, -"epss_pct": 0.81295, +"epss_pct": 0.81316, "name": "Eventum <3.4.0 - Open Redirect", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-16761.yaml" @@ -8431,7 +8431,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-74", "epss": 0.82937, -"epss_pct": 0.99649, +"epss_pct": 0.9965, "name": "FUEL CMS 1.4.1 - Remote Code Execution", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-16763.yaml" @@ -8451,7 +8451,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-113", "epss": 0.0302, -"epss_pct": 0.86508, +"epss_pct": 0.86523, "name": "Monstra CMS 3.0.4 - HTTP Header Injection", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-16979.yaml" @@ -8461,7 +8461,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.04103, -"epss_pct": 0.90039, +"epss_pct": 0.9005, "name": "Apache2 - Transfer-Encoding Chunked XSS", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-17082.yaml" @@ -8481,7 +8481,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-94", "epss": 0.56237, -"epss_pct": 0.98977, +"epss_pct": 0.98979, "name": "LG Supersign EZ CMS - Remote Code Execution", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-17173.yaml" @@ -8491,7 +8491,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-94", "epss": 0.60086, -"epss_pct": 0.99067, +"epss_pct": 0.99069, "name": "WordPress Duplicator Plugin < 1.2.42 - Arbitrary Code Execution", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-17207.yaml" @@ -8520,7 +8520,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-89", "epss": 0.66347, -"epss_pct": 0.99222, +"epss_pct": 0.99224, "name": "Zoho ManageEngine OpManager - SQL Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-17283.yaml" @@ -8530,7 +8530,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-601", "epss": 0.03717, -"epss_pct": 0.89, +"epss_pct": 0.89014, "name": "DotCMS < 5.0.2 - Open Redirect", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-17422.yaml" @@ -8550,7 +8550,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.13207, -"epss_pct": 0.96097, +"epss_pct": 0.96102, "name": "WordPress sitepress-multilingual-cms 3.6.3 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-18069.yaml" @@ -8560,7 +8560,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-306", "epss": 0.70372, -"epss_pct": 0.99336, +"epss_pct": 0.99338, "name": "Kubernetes Dashboard <1.10.1 - Authentication Bypass", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-18264.yaml" @@ -8570,7 +8570,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.70736, -"epss_pct": 0.99348, +"epss_pct": 0.9935, "name": "Centos Web Panel 0.9.8.480 - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2018/CVE-2018-18323.yaml" @@ -8594,7 +8594,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.02465, -"epss_pct": 0.83345, +"epss_pct": 0.83365, "name": "Planon 1.1.3 - 'ctl_getitem' Out-of-Bounds Read", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2019/CVE-2019-6443.yaml" @@ -11500,7 +11500,7 @@ "cvss": 9.8, "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "epss": 0.26076, -"epss_pct": 0.9784, +"epss_pct": 0.97842, "name": "Total Donations Plugin for WordPress < 2.0.6 - Arbitrary Options Update", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-6703.yaml" @@ -11509,7 +11509,7 @@ "cvss": 7.5, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "epss": 0.19396, -"epss_pct": 0.97164, +"epss_pct": 0.97167, "name": "W3 Total Cache 0.9.2.6-0.9.3 - Unauthenticated File Read / Directory Traversal", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-6715.yaml" @@ -11519,7 +11519,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:L", "cwe": "CWE-918", "epss": 0.03506, -"epss_pct": 0.88361, +"epss_pct": 0.88376, "name": "GitLab Enterprise Edition - Server-Side Request Forgery", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-6793.yaml" @@ -11528,7 +11528,7 @@ "cvss": 5.9, "cvss_vector": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "epss": 0.14829, -"epss_pct": 0.96442, +"epss_pct": 0.96446, "name": "phpMyAdmin <4.8.5 - Local File Inclusion", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-6799.yaml" @@ -11538,7 +11538,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-74", "epss": 0.03802, -"epss_pct": 0.89261, +"epss_pct": 0.89274, "name": "Pypiserver <1.2.5 - Carriage Return Line Feed Injection", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-6802.yaml" @@ -11548,7 +11548,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.17657, -"epss_pct": 0.96934, +"epss_pct": 0.96938, "name": "Magento - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-7139.yaml" @@ -11568,7 +11568,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-22", "epss": 0.83124, -"epss_pct": 0.99652, +"epss_pct": 0.99653, "name": "QNAP Photo Station < 6.0.3 - Remote Code Execution", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-7194.yaml" @@ -11588,7 +11588,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.05038, -"epss_pct": 0.91673, +"epss_pct": 0.91684, "name": "Zarafa WebApp <=2.0.1.47791 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-7219.yaml" @@ -11637,7 +11637,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-601", "epss": 0.09087, -"epss_pct": 0.94931, +"epss_pct": 0.94936, "name": "Optergy Proton/Enterprise Building Management System - Open Redirect", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-7275.yaml" @@ -11656,7 +11656,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.11198, -"epss_pct": 0.95641, +"epss_pct": 0.95647, "name": "Genie Access WIP3BVAF IP Camera - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-7315.yaml" @@ -11676,7 +11676,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.03161, -"epss_pct": 0.87089, +"epss_pct": 0.87103, "name": "KindEditor 4.1.11 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-7543.yaml" @@ -11696,7 +11696,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-611", "epss": 0.22541, -"epss_pct": 0.9754, +"epss_pct": 0.97545, "name": "Adobe Experience Manager - XML External Entity Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-8086.yaml" @@ -11706,7 +11706,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.09836, -"epss_pct": 0.95212, +"epss_pct": 0.95219, "name": "qdPM 9.1 - Cross-site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-8390.yaml" @@ -11715,7 +11715,7 @@ "cvss": 7.5, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "epss": 0.59832, -"epss_pct": 0.99063, +"epss_pct": 0.99065, "name": "Jira - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-8442.yaml" @@ -11725,7 +11725,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-863", "epss": 0.1755, -"epss_pct": 0.96919, +"epss_pct": 0.96923, "name": "Jira Improper Authorization", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-8446.yaml" @@ -11735,7 +11735,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-306", "epss": 0.84771, -"epss_pct": 0.99691, +"epss_pct": 0.99692, "name": "Jira <8.4.0 - Information Disclosure", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-8449.yaml" @@ -11745,7 +11745,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "cwe": "CWE-918", "epss": 0.94453, -"epss_pct": 0.99845, +"epss_pct": 0.99846, "name": "Jira <8.4.0 - Server-Side Request Forgery", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-8451.yaml" @@ -11755,7 +11755,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.72058, -"epss_pct": 0.99385, +"epss_pct": 0.99387, "name": "Totaljs <3.2.3 - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-8903.yaml" @@ -11765,7 +11765,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.10633, -"epss_pct": 0.9547, +"epss_pct": 0.95477, "name": "HotelDruid 2.3.0 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-8937.yaml" @@ -11792,7 +11792,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "cwe": "CWE-918", "epss": 0.27963, -"epss_pct": 0.97959, +"epss_pct": 0.97961, "name": "Wavemaker Studio 6.6 - Local File Inclusion/Server-Side Request Forgery", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-8982.yaml" @@ -11802,7 +11802,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-917", "epss": 0.31421, -"epss_pct": 0.98153, +"epss_pct": 0.98156, "name": "ZZZCMS 1.6.1 - Remote Code Execution", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-9041.yaml" @@ -11829,7 +11829,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-78", "epss": 0.9673, -"epss_pct": 0.99881, +"epss_pct": 0.99882, "name": "elFinder <= 2.1.47 - Command Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-9194.yaml" @@ -11839,7 +11839,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-22", "epss": 0.43796, -"epss_pct": 0.9865, +"epss_pct": 0.98652, "name": "WordPress GraceMedia Media Player 1.0 - Local File Inclusion", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-9618.yaml" @@ -11858,7 +11858,7 @@ "cvss": 7.5, "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "epss": 0.39885, -"epss_pct": 0.98521, +"epss_pct": 0.98523, "name": "ESAFENET CDG - Arbitrary File Download", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-9632.yaml" @@ -11878,7 +11878,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.16342, -"epss_pct": 0.96733, +"epss_pct": 0.96737, "name": "Homematic CCU3 - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-9726.yaml" @@ -11897,7 +11897,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-611", "epss": 0.37336, -"epss_pct": 0.98418, +"epss_pct": 0.98421, "name": "LabKey Server 19.1.0 - XML External Entity (XXE)", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-9757.yaml" @@ -11907,7 +11907,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.06041, -"epss_pct": 0.92853, +"epss_pct": 0.92862, "name": "PHPSHE 1.7 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-9762.yaml" @@ -11924,7 +11924,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-502", "epss": 0.83736, -"epss_pct": 0.99669, +"epss_pct": 0.9967, "name": "Sitecore Experience Platform - Deserialization of Untrusted Data", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-9874.yaml" @@ -11944,7 +11944,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "cwe": "CWE-306", "epss": 0.34761, -"epss_pct": 0.98308, +"epss_pct": 0.9831, "name": "WPEngine WPGraphQL 0.2.3 - Unauthenticated User Information Disclosure", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-9880.yaml" @@ -11954,7 +11954,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "cwe": "CWE-306", "epss": 0.18832, -"epss_pct": 0.97079, +"epss_pct": 0.97083, "name": "WPEngine WPGraphQL 0.2.3 - Unauthenticated Comment Posting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-9881.yaml" @@ -11964,7 +11964,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.03151, -"epss_pct": 0.87043, +"epss_pct": 0.87057, "name": "WP Google Maps < 7.10.43 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-9912.yaml" @@ -11974,7 +11974,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-601", "epss": 0.03626, -"epss_pct": 0.88712, +"epss_pct": 0.88726, "name": "GetSimple CMS 3.3.13 - Open Redirect", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-9915.yaml" @@ -11984,7 +11984,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.1059, -"epss_pct": 0.95456, +"epss_pct": 0.95463, "name": "Joomla! Harmis Messenger 1.2.2 - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-9922.yaml" @@ -11994,7 +11994,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.2118, -"epss_pct": 0.97412, +"epss_pct": 0.97415, "name": "Zyxel - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-9955.yaml" @@ -12078,7 +12078,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-20", "epss": 0.38166, -"epss_pct": 0.98452, +"epss_pct": 0.98454, "name": "Sonatype Nexus Repository Manager 3 - Remote Code Execution", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-10204.yaml" @@ -12087,8 +12087,8 @@ "cvss": 9.8, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", -"epss": 0.99683, -"epss_pct": 0.99949, +"epss": 0.99697, +"epss_pct": 0.9995, "name": "rConfig 3.9 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-10220.yaml" @@ -12108,7 +12108,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-94", "epss": 0.08877, -"epss_pct": 0.94845, +"epss_pct": 0.94851, "name": "ThemeREX Addons - Remote Code Execution", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-10257.yaml" @@ -12118,7 +12118,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "cwe": "CWE-288", "epss": 0.02785, -"epss_pct": 0.85395, +"epss_pct": 0.85412, "name": "WatchGuard Fireware AD Helper Component - Credentials Disclosure", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-10532.yaml" @@ -12137,8 +12137,8 @@ "cvss": 9.8, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", -"epss": 0.33266, -"epss_pct": 0.98246, +"epss": 0.36563, +"epss_pct": 0.98385, "name": "rConfig 3.9.4 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-10547.yaml" @@ -12147,8 +12147,8 @@ "cvss": 9.8, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", -"epss": 0.37732, -"epss_pct": 0.98436, +"epss": 0.36513, +"epss_pct": 0.98383, "name": "rConfig 3.9.4 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-10548.yaml" @@ -12158,7 +12158,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.32124, -"epss_pct": 0.98189, +"epss_pct": 0.98193, "name": "rConfig <=3.9.4 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-10549.yaml" @@ -12168,7 +12168,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "cwe": "CWE-918", "epss": 0.69724, -"epss_pct": 0.99318, +"epss_pct": 0.99319, "name": "Keycloak <= 12.0.1 - request_uri Blind Server-Side Request Forgery (SSRF)", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-10770.yaml" @@ -12178,7 +12178,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-306", "epss": 0.07552, -"epss_pct": 0.94082, +"epss_pct": 0.94089, "name": "WAVLINK - Access Control", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-10973.yaml" @@ -12239,7 +12239,7 @@ "cvss": 6.1, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "epss": 0.07574, -"epss_pct": 0.94096, +"epss_pct": 0.94102, "name": "GLPI <9.4.6 - Open Redirect", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-11034.yaml" @@ -12249,7 +12249,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.09619, -"epss_pct": 0.95134, +"epss_pct": 0.95141, "name": "Grafana <= 6.7.1 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-11110.yaml" @@ -12259,7 +12259,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-93", "epss": 0.02406, -"epss_pct": 0.82914, +"epss_pct": 0.82935, "name": "phpMyAdmin 5.0.2 - CRLF Injection", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-11441.yaml" @@ -12268,7 +12268,7 @@ "cvss": 7.5, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "epss": 0.17841, -"epss_pct": 0.96955, +"epss_pct": 0.96958, "name": "MicroStrategy Web 10.4 - Information Disclosure", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-11450.yaml" @@ -12293,7 +12293,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-862", "epss": 0.09106, -"epss_pct": 0.94937, +"epss_pct": 0.94943, "name": "Rank Math SEO <= 1.0.40.2 - Privilege Escalation via Unprotected REST API Endpoint", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-11514.yaml" @@ -12303,7 +12303,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-601", "epss": 0.02072, -"epss_pct": 0.80116, +"epss_pct": 0.80137, "name": "Rank Math SEO <= 1.0.40.2 - Redirect Creation via Unprotected REST API Endpoint", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-11515.yaml" @@ -12313,7 +12313,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-601", "epss": 0.10879, -"epss_pct": 0.95545, +"epss_pct": 0.95551, "name": "Grav < 1.7 - Open Redirect", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-11529.yaml" @@ -12333,7 +12333,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-94", "epss": 0.32841, -"epss_pct": 0.98231, +"epss_pct": 0.98233, "name": "SuperWebmailer 7.21.0.01526 - Remote Code Execution", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-11546.yaml" @@ -12343,7 +12343,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-306", "epss": 0.52059, -"epss_pct": 0.98874, +"epss_pct": 0.98875, "name": "PRTG Network Monitor <20.1.57.1745 - Information Disclosure", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-11547.yaml" @@ -12357,7 +12357,7 @@ "cvss": 9.8, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "epss": 0.33127, -"epss_pct": 0.98241, +"epss_pct": 0.98245, "name": "Kong Admin <=2.03 - Admin API Access", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-11710.yaml" @@ -12366,7 +12366,7 @@ "cvss": 7.5, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "epss": 0.04917, -"epss_pct": 0.91498, +"epss_pct": 0.91509, "name": "Media Library Assistant < 2.82 - Unauthenticated Limited Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-11732.yaml" @@ -12386,7 +12386,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-22", "epss": 0.48771, -"epss_pct": 0.98789, +"epss_pct": 0.98791, "name": "Mitel MiCollab AWV 8.1.2.4 and 9.1.3 - Directory Traversal", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-11798.yaml" @@ -12415,7 +12415,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.04457, -"epss_pct": 0.90748, +"epss_pct": 0.9076, "name": "WordPress GTranslate <2.8.52 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-11930.yaml" @@ -12425,7 +12425,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-94", "epss": 0.29885, -"epss_pct": 0.98072, +"epss_pct": 0.98074, "name": "Apache Unomi - Remote Code Execution", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-11975.yaml" @@ -12445,7 +12445,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-78", "epss": 0.36537, -"epss_pct": 0.98382, +"epss_pct": 0.98384, "name": "Apache Airflow <=1.10.10 - Command Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2020/CVE-2020-11981.yaml" @@ -12475,7 +12475,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.03611, -"epss_pct": 0.8867, +"epss_pct": 0.88684, "name": "WordPress Catch Breadcrumb <1.5.4 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-12054.yaml" @@ -12505,7 +12505,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-306", "epss": 0.07401, -"epss_pct": 0.93993, +"epss_pct": 0.94, "name": "WAVLINK WN530H4 M30H4.V5030.190403 - Information Disclosure", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-12127.yaml" @@ -12539,7 +12539,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01711, -"epss_pct": 0.75747, +"epss_pct": 0.75773, "name": "Intelbras TIP200/TIP200LITE/TIP300 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-12262.yaml" @@ -12554,7 +12554,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.13704, -"epss_pct": 0.96221, +"epss_pct": 0.96225, "name": "Onkyo TX-NR585 Web Interface - Directory Traversal", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-12447.yaml" @@ -12564,7 +12564,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-306", "epss": 0.08392, -"epss_pct": 0.94577, +"epss_pct": 0.94584, "name": "TeamPass 2.1.27.36 - Improper Authentication", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-12478.yaml" @@ -12594,7 +12594,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-434", "epss": 0.78751, -"epss_pct": 0.99559, +"epss_pct": 0.9956, "name": "WordPress Contact Form 7 <1.3.3.3 - Remote Code Execution", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-12800.yaml" @@ -12604,7 +12604,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-22", "epss": 0.07131, -"epss_pct": 0.93802, +"epss_pct": 0.9381, "name": "WordPress Simple File List - Path Traversal", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-12832.yaml" @@ -12614,7 +12614,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-77", "epss": 0.68794, -"epss_pct": 0.99292, +"epss_pct": 0.99294, "name": "Wavlink Multiple AP - Remote Command Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-13117.yaml" @@ -12624,7 +12624,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-601", "epss": 0.02956, -"epss_pct": 0.86223, +"epss_pct": 0.8624, "name": "Submitty <= 20.04.01 - Open Redirect", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-13121.yaml" @@ -12633,7 +12633,7 @@ "cvss": 7.2, "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N", "epss": 0.02307, -"epss_pct": 0.82157, +"epss_pct": 0.82177, "name": "Ultimate Addons for Elementor <= 1.24.1 - Registration Bypass", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-13125.yaml" @@ -12663,7 +12663,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.02063, -"epss_pct": 0.80023, +"epss_pct": 0.80045, "name": "Contentful <=2020-05-21 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-13258.yaml" @@ -12683,7 +12683,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-306", "epss": 0.13614, -"epss_pct": 0.96196, +"epss_pct": 0.962, "name": "Microweber <1.1.20 - Information Disclosure", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-13405.yaml" @@ -12693,7 +12693,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.04511, -"epss_pct": 0.9084, +"epss_pct": 0.90852, "name": "Bitrix24 <=20.0.0 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-13483.yaml" @@ -12713,7 +12713,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.12605, -"epss_pct": 0.95956, +"epss_pct": 0.9596, "name": "wpDiscuz <= 5.3.5 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-13640.yaml" @@ -12723,7 +12723,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-639", "epss": 0.13463, -"epss_pct": 0.96161, +"epss_pct": 0.96166, "name": "WordPress acf-to-rest-api <=3.1.0 - Insecure Direct Object Reference", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-13700.yaml" @@ -12733,7 +12733,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.04178, -"epss_pct": 0.902, +"epss_pct": 0.90212, "name": "Extreme Management Center 8.4.1.24 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-13820.yaml" @@ -12753,7 +12753,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.05198, -"epss_pct": 0.91894, +"epss_pct": 0.91904, "name": "Intelbras TIP 200/200 LITE/300 - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-13886.yaml" @@ -12782,7 +12782,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-922", "epss": 0.78331, -"epss_pct": 0.99547, +"epss_pct": 0.99548, "name": "Apache Kylin - Exposed Configuration File", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-13937.yaml" @@ -12791,7 +12791,7 @@ "cvss": 9.8, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "epss": 0.68398, -"epss_pct": 0.9928, +"epss_pct": 0.99282, "name": "Apache Unomi <1.5.2 - Remote Code Execution", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-13942.yaml" @@ -12801,7 +12801,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-522", "epss": 0.72976, -"epss_pct": 0.99412, +"epss_pct": 0.99414, "name": "Apache APISIX - Insufficiently Protected Credentials", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-13945.yaml" @@ -12830,7 +12830,7 @@ "cvss": 5.3, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "epss": 0.76042, -"epss_pct": 0.99493, +"epss_pct": 0.99494, "name": "Atlassian Jira Server/Data Center <8.5.8/8.6.0 - 8.11.1 - Information Disclosure", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-14179.yaml" @@ -12840,7 +12840,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-200", "epss": 0.99603, -"epss_pct": 0.99945, +"epss_pct": 0.99946, "name": "Jira Server and Data Center - Information Disclosure", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-14181.yaml" @@ -12858,7 +12858,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.03003, -"epss_pct": 0.8644, +"epss_pct": 0.86456, "name": "Agentejo Cockpit 0.10.2 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-14408.yaml" @@ -12868,7 +12868,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.03442, -"epss_pct": 0.88153, +"epss_pct": 0.88166, "name": "NeDi 1.9C - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-14413.yaml" @@ -12935,7 +12935,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.50734, -"epss_pct": 0.98839, +"epss_pct": 0.98842, "name": "Suprema BioStar <2.8.2 - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-15050.yaml" @@ -12955,7 +12955,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-548", "epss": 0.01648, -"epss_pct": 0.74817, +"epss_pct": 0.74847, "name": "PrestaShop < 1.7.6.6 - Information Exposure via Upload Directory", "severity": "low", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-15081.yaml" @@ -12965,7 +12965,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-601", "epss": 0.08011, -"epss_pct": 0.94355, +"epss_pct": 0.94363, "name": "Traefik - Open Redirect", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-15129.yaml" @@ -12984,7 +12984,7 @@ "cvss": 9.8, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "epss": 0.34424, -"epss_pct": 0.98295, +"epss_pct": 0.98298, "name": "Nette Framework - Remote Code Execution", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-15227.yaml" @@ -13004,7 +13004,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.12224, -"epss_pct": 0.95879, +"epss_pct": 0.95884, "name": "TileServer GL <=3.0.0 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-15500.yaml" @@ -13024,7 +13024,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-913", "epss": 0.28984, -"epss_pct": 0.98023, +"epss_pct": 0.98025, "name": "TerraMaster TOS <.1.29 - Remote Code Execution", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-15568.yaml" @@ -13034,7 +13034,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.06354, -"epss_pct": 0.93151, +"epss_pct": 0.93158, "name": "RosarioSIS 6.7.2 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-15718.yaml" @@ -13053,7 +13053,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.02848, -"epss_pct": 0.85725, +"epss_pct": 0.85741, "name": "D-Link DIR-816L 2.x - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-15895.yaml" @@ -13063,7 +13063,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-307", "epss": 0.2716, -"epss_pct": 0.97909, +"epss_pct": 0.97912, "name": "Tiki Wiki CMS GroupWare - Authentication Bypass", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-15906.yaml" @@ -13092,7 +13092,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N", "cwe": "CWE-918", "epss": 0.02698, -"epss_pct": 0.84873, +"epss_pct": 0.84892, "name": "Prometheus Blackbox Exporter - Server-Side Request Forgery (SSRF)", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-16248.yaml" @@ -13132,7 +13132,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.02873, -"epss_pct": 0.85845, +"epss_pct": 0.85861, "name": "Nova Lite < 1.3.9 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-17362.yaml" @@ -13142,7 +13142,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.26225, -"epss_pct": 0.9785, +"epss_pct": 0.97852, "name": "WSO2 Carbon Management Console <=5.10 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-17453.yaml" @@ -13201,7 +13201,7 @@ "cvss": 7.5, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "epss": 0.50038, -"epss_pct": 0.98819, +"epss_pct": 0.98821, "name": "Apache Flink 1.5.1 - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-17518.yaml" @@ -13221,7 +13221,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N", "cwe": "CWE-287", "epss": 0.23336, -"epss_pct": 0.97615, +"epss_pct": 0.97618, "name": "Apache Airflow <1.10.14 - Authentication Bypass", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-17526.yaml" @@ -13231,7 +13231,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-917", "epss": 0.95931, -"epss_pct": 0.99869, +"epss_pct": 0.9987, "name": "Apache Struts 2.0.0-2.5.25 - Remote Code Execution", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-17530.yaml" @@ -13246,7 +13246,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-601", "epss": 0.02687, -"epss_pct": 0.8481, +"epss_pct": 0.84828, "name": "Z-Blog <=1.5.2 - Open Redirect", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-18268.yaml" @@ -13256,7 +13256,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.03162, -"epss_pct": 0.87094, +"epss_pct": 0.87108, "name": "Jeesns 1.4.2 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-19282.yaml" @@ -13266,7 +13266,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.02633, -"epss_pct": 0.84474, +"epss_pct": 0.84491, "name": "Jeesns 1.4.2 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-19283.yaml" @@ -13276,7 +13276,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.03509, -"epss_pct": 0.88371, +"epss_pct": 0.88386, "name": "Jeesns 1.4.2 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-19295.yaml" @@ -13286,7 +13286,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.17278, -"epss_pct": 0.96883, +"epss_pct": 0.96886, "name": "FHEM 6.0 - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-19360.yaml" @@ -13296,7 +13296,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-200", "epss": 0.03613, -"epss_pct": 0.88677, +"epss_pct": 0.8869, "name": "Vtiger CRM v7.2.0 - Directory Listing", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-19363.yaml" @@ -13316,7 +13316,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.97309, -"epss_pct": 0.99891, +"epss_pct": 0.99892, "name": "Apache OFBiz <=16.11.07 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-1943.yaml" @@ -13326,7 +13326,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01789, -"epss_pct": 0.76792, +"epss_pct": 0.76818, "name": "qdPM 9.1 - Cross-site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-19515.yaml" @@ -13350,7 +13350,7 @@ "cvss": 9.8, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "epss": 0.13143, -"epss_pct": 0.96086, +"epss_pct": 0.9609, "name": "Gridx 1.3 - Remote Code Execution", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-19625.yaml" @@ -13365,7 +13365,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01407, -"epss_pct": 0.70738, +"epss_pct": 0.7077, "name": "ZZcms - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-20285.yaml" @@ -13375,7 +13375,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.08752, -"epss_pct": 0.9478, +"epss_pct": 0.94787, "name": "WeiPHP 5.0 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-20300.yaml" @@ -13385,7 +13385,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "cwe": "CWE-79", "epss": 0.2389, -"epss_pct": 0.97665, +"epss_pct": 0.97668, "name": "Palo Alto Networks PAN-OS Web Interface - Cross Site-Scripting", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-2036.yaml" @@ -13395,7 +13395,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-94", "epss": 0.07598, -"epss_pct": 0.94116, +"epss_pct": 0.94123, "name": "ThinkCMF X2.2.2 - Remote Code Execution", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-20601.yaml" @@ -13405,7 +13405,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "cwe": "CWE-306", "epss": 0.01881, -"epss_pct": 0.77994, +"epss_pct": 0.7802, "name": "GiveWP - Missing Authorization to Settings Update", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-20627.yaml" @@ -13425,7 +13425,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "cwe": "CWE-79", "epss": 0.06191, -"epss_pct": 0.92997, +"epss_pct": 0.93005, "name": "shadoweb wdja v1.5.1 - Cross-Site Scripting", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-20982.yaml" @@ -13435,7 +13435,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01331, -"epss_pct": 0.6912, +"epss_pct": 0.69155, "name": "DomainMOD 4.13.0 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-20988.yaml" @@ -13453,7 +13453,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-200", "epss": 0.07044, -"epss_pct": 0.93733, +"epss_pct": 0.9374, "name": "Jenkins <=2.218 - Information Disclosure", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-2103.yaml" @@ -13488,7 +13488,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-601", "epss": 0.01319, -"epss_pct": 0.68841, +"epss_pct": 0.68877, "name": "HomeAutomation 3.3.2 - Open Redirect", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-21998.yaml" @@ -13498,7 +13498,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-89", "epss": 0.06348, -"epss_pct": 0.93148, +"epss_pct": 0.93155, "name": "PHPGurukul Hospital Management System 4.0 - SQL Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-22165.yaml" @@ -13508,7 +13508,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.10017, -"epss_pct": 0.95276, +"epss_pct": 0.95282, "name": "74cms - ajax_street.php 'x' SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-22208.yaml" @@ -13518,7 +13518,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.08579, -"epss_pct": 0.94684, +"epss_pct": 0.94691, "name": "74cms - ajax_common.php SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-22209.yaml" @@ -13528,7 +13528,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.08579, -"epss_pct": 0.94684, +"epss_pct": 0.94691, "name": "74cms - ajax_officebuilding.php SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-22210.yaml" @@ -13538,7 +13538,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.0794, -"epss_pct": 0.94323, +"epss_pct": 0.94331, "name": "74cms - ajax_street.php 'key' SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-22211.yaml" @@ -13548,7 +13548,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-601", "epss": 0.13817, -"epss_pct": 0.96246, +"epss_pct": 0.9625, "name": "b2evolution CMS <6.11.6 - Open Redirect", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-22840.yaml" @@ -13558,7 +13558,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-601", "epss": 0.02689, -"epss_pct": 0.8482, +"epss_pct": 0.84839, "name": "OPNsense <=20.1.5 - Open Redirect", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-23015.yaml" @@ -13568,7 +13568,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.07051, -"epss_pct": 0.93738, +"epss_pct": 0.93745, "name": "Aryanic HighMail (High CMS) - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-23517.yaml" @@ -13578,7 +13578,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.36765, -"epss_pct": 0.98391, +"epss_pct": 0.98393, "name": "Kyocera Printer d-COPIA253MF - Directory Traversal", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-23575.yaml" @@ -13588,7 +13588,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01885, -"epss_pct": 0.78048, +"epss_pct": 0.78074, "name": "Monstra CMS 3.0.4 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-23697.yaml" @@ -13598,7 +13598,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01188, -"epss_pct": 0.6571, +"epss_pct": 0.65747, "name": "XXL-JOB v2.2.0 \u2014 Stored Cross Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-23814.yaml" @@ -13608,7 +13608,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "cwe": "CWE-434", "epss": 0.31444, -"epss_pct": 0.98155, +"epss_pct": 0.98158, "name": "Joomla! Component GMapFP 3.5 - Arbitrary File Upload", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-23972.yaml" @@ -13618,7 +13618,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "cwe": "CWE-918", "epss": 0.14745, -"epss_pct": 0.96429, +"epss_pct": 0.96433, "name": "Import XML & RSS Feeds WordPress Plugin <= 2.0.1 Server-Side Request Forgery", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-24148.yaml" @@ -13638,7 +13638,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.14552, -"epss_pct": 0.9639, +"epss_pct": 0.96394, "name": "Mara CMS 7.5 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-24223.yaml" @@ -13648,7 +13648,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-200", "epss": 0.04412, -"epss_pct": 0.90652, +"epss_pct": 0.90664, "name": "INTELBRAS TELEFONE IP TIP200 60.61.75.22 - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-24285.yaml" @@ -13658,7 +13658,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-552", "epss": 0.15906, -"epss_pct": 0.96654, +"epss_pct": 0.96657, "name": "WordPress Plugin File Manager (wp-file-manager) Backup Disclosure", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-24312.yaml" @@ -13677,7 +13677,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-601", "epss": 0.04719, -"epss_pct": 0.91193, +"epss_pct": 0.91204, "name": "EpiServer Find <13.2.7 - Open Redirect", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-24550.yaml" @@ -13687,7 +13687,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.17959, -"epss_pct": 0.9697, +"epss_pct": 0.96973, "name": "NexusDB <4.50.23 - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-24571.yaml" @@ -13697,7 +13697,7 @@ "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-287", "epss": 0.09997, -"epss_pct": 0.9527, +"epss_pct": 0.95276, "name": "D-Link DSL 2888a - Authentication Bypass/Remote Command Execution", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-24579.yaml" @@ -13707,7 +13707,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "cwe": "CWE-611", "epss": 0.26282, -"epss_pct": 0.97852, +"epss_pct": 0.97854, "name": "WSO2 API Manager <=3.1.0 - Blind XML External Entity Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-24589.yaml" @@ -13727,7 +13727,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.06788, -"epss_pct": 0.93519, +"epss_pct": 0.93527, "name": "OX Appsuite - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-24701.yaml" @@ -13752,7 +13752,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.02852, -"epss_pct": 0.85744, +"epss_pct": 0.8576, "name": "Quixplorer <=2.4.1 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-24902.yaml" @@ -13762,7 +13762,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.02932, -"epss_pct": 0.86123, +"epss_pct": 0.8614, "name": "Cute Editor for ASP.NET 6.4 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-24903.yaml" @@ -13772,7 +13772,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.0634, -"epss_pct": 0.93141, +"epss_pct": 0.93148, "name": "QCube Cross-Site-Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-24912.yaml" @@ -13782,7 +13782,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-77", "epss": 0.67516, -"epss_pct": 0.99255, +"epss_pct": 0.99257, "name": "PHP-Fusion 9.03.50 - Remote Code Execution", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-24949.yaml" @@ -13801,7 +13801,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-203", "epss": 0.0747, -"epss_pct": 0.9403, +"epss_pct": 0.94038, "name": "Pritunl VPN Server 1.29.2145.25 - Username Enumeration", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-25200.yaml" @@ -13838,7 +13838,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.08981, -"epss_pct": 0.94891, +"epss_pct": 0.94897, "name": "Xinuo Openserver 5/6 - Cross-Site scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-25495.yaml" @@ -13848,7 +13848,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-78", "epss": 0.99968, -"epss_pct": 0.99977, +"epss_pct": 0.99976, "name": "D-Link DNS-320 - Unauthenticated Remote Code Execution", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-25506.yaml" @@ -13882,7 +13882,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.09884, -"epss_pct": 0.95229, +"epss_pct": 0.95235, "name": "Commvault CommCell - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-25780.yaml" @@ -13892,14 +13892,14 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.06085, -"epss_pct": 0.92904, +"epss_pct": 0.92913, "name": "HashiCorp Consul/Consul Enterprise <=1.9.4 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-25864.yaml" }, "CVE-2020-26073": { "epss": 0.12583, -"epss_pct": 0.9595, +"epss_pct": 0.95955, "name": "Cisco SD-WAN vManage Software - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-26073.yaml" @@ -13909,7 +13909,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.04378, -"epss_pct": 0.90598, +"epss_pct": 0.9061, "name": "Event Espresso Core-Reg 4.10.7.p - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-26153.yaml" @@ -13929,7 +13929,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-78", "epss": 0.85001, -"epss_pct": 0.99696, +"epss_pct": 0.99697, "name": "XStream <1.4.14 - Remote Code Execution", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-26217.yaml" @@ -13939,7 +13939,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H", "cwe": "CWE-89", "epss": 0.12388, -"epss_pct": 0.95914, +"epss_pct": 0.95918, "name": "PrestaShop Product Comments <4.2.0 - SQL Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-26248.yaml" @@ -13959,7 +13959,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-200", "epss": 0.34931, -"epss_pct": 0.98316, +"epss_pct": 0.98319, "name": "Gitlab CE/EE 13.4 - 13.6.2 - Information Disclosure", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-26413.yaml" @@ -13969,7 +13969,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-601", "epss": 0.02338, -"epss_pct": 0.82417, +"epss_pct": 0.82438, "name": "SAP Solution Manager - Open Redirect", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-26836.yaml" @@ -13979,7 +13979,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-306", "epss": 0.10551, -"epss_pct": 0.95447, +"epss_pct": 0.95453, "name": "WordPress WP Courses Plugin Information Disclosure", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-26876.yaml" @@ -13998,7 +13998,7 @@ "cvss": 9.8, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "epss": 0.57195, -"epss_pct": 0.99002, +"epss_pct": 0.99004, "name": "NETGEAR ProSAFE Plus - Unauthenticated Remote Code Execution", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-26919.yaml" @@ -14008,7 +14008,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.67081, -"epss_pct": 0.99243, +"epss_pct": 0.99245, "name": "phpMyAdmin < 5.0.3 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-26935.yaml" @@ -14028,7 +14028,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.09595, -"epss_pct": 0.95127, +"epss_pct": 0.95134, "name": "LionWiki <3.2.12 - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-27191.yaml" @@ -14037,7 +14037,7 @@ "cvss": 9.8, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "epss": 0.18645, -"epss_pct": 0.97057, +"epss_pct": 0.9706, "name": "JD Edwards EnterpriseOne Tools 9.2 - Information Disclosure", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-2733.yaml" @@ -14047,7 +14047,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-668", "epss": 0.06769, -"epss_pct": 0.93509, +"epss_pct": 0.93518, "name": "Akkadian Provisioning Manager 4.50.02 - Sensitive Information Disclosure", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-27361.yaml" @@ -14057,7 +14057,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.15737, -"epss_pct": 0.96622, +"epss_pct": 0.96626, "name": "Processwire CMS <2.7.1 - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-27467.yaml" @@ -14067,7 +14067,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.10027, -"epss_pct": 0.95278, +"epss_pct": 0.95284, "name": "Good Layers LMS Plugin <= 2.1.4 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-27481.yaml" @@ -14077,7 +14077,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.52261, -"epss_pct": 0.98877, +"epss_pct": 0.98879, "name": "WordPress Loginizer < 1.6.4 \u2013 Unauthenticated SQL Injection via `log` Parameter", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-27615.yaml" @@ -14087,7 +14087,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.0579, -"epss_pct": 0.92578, +"epss_pct": 0.92587, "name": "Wing FTP 6.4.4 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-27735.yaml" @@ -14097,7 +14097,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "cwe": "CWE-287", "epss": 0.17943, -"epss_pct": 0.96968, +"epss_pct": 0.96971, "name": "KeyCloak - Information Exposure", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-27838.yaml" @@ -14106,7 +14106,7 @@ "cvss": 8.8, "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "epss": 0.08656, -"epss_pct": 0.94726, +"epss_pct": 0.94733, "name": "NETGEAR - Authentication Bypass", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-27866.yaml" @@ -14116,7 +14116,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.05342, -"epss_pct": 0.92055, +"epss_pct": 0.92065, "name": "IceWarp WebMail 11.4.5.0 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-27982.yaml" @@ -14126,7 +14126,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-306", "epss": 0.15966, -"epss_pct": 0.96664, +"epss_pct": 0.96667, "name": "SonarQube - Authentication Bypass", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-27986.yaml" @@ -14198,7 +14198,7 @@ "cvss": 5.3, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "epss": 0.18253, -"epss_pct": 0.97009, +"epss_pct": 0.97013, "name": "TerraMaster TOS < 4.2.06 - User Enumeration", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-28185.yaml" @@ -14222,7 +14222,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-203", "epss": 0.10817, -"epss_pct": 0.95531, +"epss_pct": 0.95537, "name": "Rocket.Chat <3.9.1 - Information Disclosure", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-28208.yaml" @@ -14232,7 +14232,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.15987, -"epss_pct": 0.96668, +"epss_pct": 0.96671, "name": "Mitel ShoreTel 19.46.1802.0 Devices - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-28351.yaml" @@ -14242,7 +14242,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-78", "epss": 0.63305, -"epss_pct": 0.99146, +"epss_pct": 0.99148, "name": "geojson2kml - Command Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-28429.yaml" @@ -14281,7 +14281,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-918", "epss": 0.27771, -"epss_pct": 0.97948, +"epss_pct": 0.97951, "name": "WordPress Canto 1.3.0 - Blind Server-Side Request Forgery", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-28976.yaml" @@ -14291,7 +14291,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-502", "epss": 0.16017, -"epss_pct": 0.96677, +"epss_pct": 0.96681, "name": "WP Hotel Booking < 1.10.4 - PHP Object Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-29047.yaml" @@ -14301,7 +14301,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.06198, -"epss_pct": 0.93005, +"epss_pct": 0.93013, "name": "PacsOne Server <7.1.1 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-29164.yaml" @@ -14311,7 +14311,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.04499, -"epss_pct": 0.90819, +"epss_pct": 0.9083, "name": "Alumni Management System 1.0 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-29214.yaml" @@ -14320,7 +14320,7 @@ "cvss": 9.8, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "epss": 0.16822, -"epss_pct": 0.96819, +"epss_pct": 0.96823, "name": "Car Rental Management System 1.0 - Local File Inclusion", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-29227.yaml" @@ -14329,7 +14329,7 @@ "cvss": 9.8, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "epss": 0.52881, -"epss_pct": 0.98894, +"epss_pct": 0.98896, "name": "74CMS - Remote File Inclusion", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-29279.yaml" @@ -14347,7 +14347,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-78", "epss": 0.39565, -"epss_pct": 0.98509, +"epss_pct": 0.98511, "name": "Zeroshell 3.9.3 - Command Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-29390.yaml" @@ -14357,7 +14357,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.12883, -"epss_pct": 0.96023, +"epss_pct": 0.96028, "name": "Wordpress EventON Calendar 3.0.5 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-29395.yaml" @@ -14367,7 +14367,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-22", "epss": 0.23948, -"epss_pct": 0.9767, +"epss_pct": 0.97674, "name": "Jira Server Pre-Auth - Arbitrary File Retrieval (WEB-INF, META-INF)", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-29453.yaml" @@ -14387,7 +14387,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-434", "epss": 0.71006, -"epss_pct": 0.99356, +"epss_pct": 0.99358, "name": "IncomCMS 2.0 - Arbitrary File Upload", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-29597.yaml" @@ -14416,7 +14416,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-94", "epss": 0.51299, -"epss_pct": 0.98855, +"epss_pct": 0.98857, "name": "Cockpit CMS 0.6.1 - Remote Code Execution", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-35131.yaml" @@ -14436,7 +14436,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-798", "epss": 0.12111, -"epss_pct": 0.95855, +"epss_pct": 0.9586, "name": "Wireless Multiplex Terminal Playout Server <=20.2.8 - Default Credential Detection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-35338.yaml" @@ -14446,7 +14446,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "cwe": "CWE-770", "epss": 0.04744, -"epss_pct": 0.91236, +"epss_pct": 0.91247, "name": "Pure-FTPd 1.0.48 - Denial of Service", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2020/CVE-2020-35359.yaml" @@ -14479,7 +14479,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.13975, -"epss_pct": 0.96279, +"epss_pct": 0.96283, "name": "SearchBlox <9.2.2 - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-35580.yaml" @@ -14489,7 +14489,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.21, -"epss_pct": 0.97393, +"epss_pct": 0.97397, "name": "Advanced Comment System 1.0 - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-35598.yaml" @@ -14507,7 +14507,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-78", "epss": 0.32704, -"epss_pct": 0.98221, +"epss_pct": 0.98224, "name": "Belkin Linksys RE6500 <1.0.012.001 - Remote Command Execution", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-35713.yaml" @@ -14527,7 +14527,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.15402, -"epss_pct": 0.96541, +"epss_pct": 0.96545, "name": "GateOne 1.1 - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-35736.yaml" @@ -14537,7 +14537,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.30479, -"epss_pct": 0.98104, +"epss_pct": 0.98106, "name": "WordPress Simple Job Board <2.9.4 - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-35749.yaml" @@ -14607,7 +14607,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01104, -"epss_pct": 0.63463, +"epss_pct": 0.63502, "name": "Rukovoditel <= 2.7.2 - Cross Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-35984.yaml" @@ -14617,7 +14617,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01111, -"epss_pct": 0.63659, +"epss_pct": 0.63697, "name": "Rukovoditel <= 2.7.2 - Cross Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-35985.yaml" @@ -14627,7 +14627,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01109, -"epss_pct": 0.63598, +"epss_pct": 0.63635, "name": "Rukovoditel <= 2.7.2 - Cross Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-35986.yaml" @@ -14637,7 +14637,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01109, -"epss_pct": 0.63597, +"epss_pct": 0.63635, "name": "Rukovoditel <= 2.7.2 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-35987.yaml" @@ -14647,7 +14647,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.18052, -"epss_pct": 0.96982, +"epss_pct": 0.96985, "name": "CSE Bookstore 1.0 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-36112.yaml" @@ -14657,7 +14657,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "cwe": "CWE-269", "epss": 0.08975, -"epss_pct": 0.94887, +"epss_pct": 0.94893, "name": "Ultimate Member < 2.1.12 - Unauthenticated Privilege Escalation via User Meta", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-36155.yaml" @@ -14682,7 +14682,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H", "cwe": "CWE-285", "epss": 0.04105, -"epss_pct": 0.90045, +"epss_pct": 0.90057, "name": "ThemeGrill Demo Importer < 1.6.2 - Database Reset", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-36333.yaml" @@ -14692,7 +14692,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-601", "epss": 0.02985, -"epss_pct": 0.86357, +"epss_pct": 0.86373, "name": "Smartstore <4.1.0 - Open Redirect", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-36365.yaml" @@ -14702,7 +14702,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.0259, -"epss_pct": 0.84202, +"epss_pct": 0.84219, "name": "WordPress 15Zine <3.3.0 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-36510.yaml" @@ -14711,7 +14711,7 @@ "cvss": 9.8, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "epss": 0.06944, -"epss_pct": 0.93646, +"epss_pct": 0.93654, "name": "Adning Advertising <= 1.5.5 - Arbitrary File Upload", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-36705.yaml" @@ -14721,7 +14721,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-94", "epss": 0.65342, -"epss_pct": 0.99199, +"epss_pct": 0.99201, "name": "WordPress Epsilon Framework Themes <=2.4.8 - Remote Code Execution", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-36708.yaml" @@ -14731,7 +14731,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-200", "epss": 0.01608, -"epss_pct": 0.74195, +"epss_pct": 0.74226, "name": "ListingPro < 2.6.1 - Sensitive Data Disclosure", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-36723.yaml" @@ -14740,7 +14740,7 @@ "cvss": 6.5, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "epss": 0.03159, -"epss_pct": 0.8708, +"epss_pct": 0.87094, "name": "WordPress Plugin Adning Advertising < 1.5.6 - Arbitrary File Upload", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-36728.yaml" @@ -14750,7 +14750,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01342, -"epss_pct": 0.69365, +"epss_pct": 0.69399, "name": "Flexible Checkout Fields for WooCommerce <= 2.3.1 - Unauthenticated Arbitrary Plugin Settings Update", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-36731.yaml" @@ -14760,7 +14760,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H", "cwe": "CWE-862", "epss": 0.01407, -"epss_pct": 0.70724, +"epss_pct": 0.70755, "name": "WordPress WP Fastest Cache <= 0.9.0.2 - Authenticated Arbitrary File Deletion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-36836.yaml" @@ -14768,7 +14768,7 @@ "CVE-2020-36884": { "cwe": "CWE-918", "epss": 0.01135, -"epss_pct": 0.64264, +"epss_pct": 0.64304, "name": "BrightSign Digital Signage 8.2.26 - Server-Side Request Forgery", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-36884.yaml" @@ -14778,7 +14778,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-78", "epss": 0.03135, -"epss_pct": 0.86978, +"epss_pct": 0.86992, "name": "Pinger 1.0 - Remote Code Execution", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-37123.yaml" @@ -14847,7 +14847,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-798", "epss": 0.71363, -"epss_pct": 0.99365, +"epss_pct": 0.99367, "name": "IBM Data Risk Manager - Hardcoded Credentials", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2020/CVE-2020-4429.yaml" @@ -14857,7 +14857,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L", "cwe": "CWE-611", "epss": 0.3159, -"epss_pct": 0.98162, +"epss_pct": 0.98164, "name": "IBM Maximo Asset Management Information Disclosure - XML External Entity Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-4463.yaml" @@ -14867,7 +14867,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.0552, -"epss_pct": 0.92252, +"epss_pct": 0.92262, "name": "PHPGurukul Hospital Management System - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-5191.yaml" @@ -14877,7 +14877,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.1681, -"epss_pct": 0.96817, +"epss_pct": 0.96821, "name": "Hospital Management System 4.0 - SQL Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-5192.yaml" @@ -14886,7 +14886,7 @@ "cvss": 4.3, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "epss": 0.44334, -"epss_pct": 0.98665, +"epss_pct": 0.98668, "name": "Next.js <9.3.2 - Local File Inclusion", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-5284.yaml" @@ -14896,7 +14896,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.15652, -"epss_pct": 0.96602, +"epss_pct": 0.96606, "name": "PHPGurukul Dairy Farm Shop Management System 1.0 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-5307.yaml" @@ -14914,7 +14914,7 @@ "cvss": 6.5, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "epss": 0.6876, -"epss_pct": 0.9929, +"epss_pct": 0.99292, "name": "Spring Cloud Config - Local File Inclusion", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-5405.yaml" @@ -14923,7 +14923,7 @@ "cvss": 7.5, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "epss": 0.95586, -"epss_pct": 0.99864, +"epss_pct": 0.99865, "name": "Spring Cloud Config Server - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-5410.yaml" @@ -14932,7 +14932,7 @@ "cvss": 6.5, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "epss": 0.10214, -"epss_pct": 0.95337, +"epss_pct": 0.95344, "name": "Spring Cloud Netflix - Server-Side Request Forgery", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-5412.yaml" @@ -14956,7 +14956,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-89", "epss": 0.07233, -"epss_pct": 0.9388, +"epss_pct": 0.93887, "name": "SRS Simple Hits Counter 1.0.3-1.0.4 - Unauthenticated Blind SQL Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-5766.yaml" @@ -14966,7 +14966,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N", "cwe": "CWE-918", "epss": 0.06531, -"epss_pct": 0.93305, +"epss_pct": 0.93313, "name": "Canvas LMS v2020-07-29 - Blind Server-Side Request Forgery", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-5775.yaml" @@ -14976,7 +14976,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "cwe": "CWE-352", "epss": 0.14725, -"epss_pct": 0.96426, +"epss_pct": 0.9643, "name": "MAGMI - Cross-Site Request Forgery", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-5776.yaml" @@ -14986,7 +14986,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-287", "epss": 0.23303, -"epss_pct": 0.97611, +"epss_pct": 0.97614, "name": "Magento Mass Importer <0.7.24 - Remote Auth Bypass", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-5777.yaml" @@ -15022,7 +15022,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.04798, -"epss_pct": 0.91318, +"epss_pct": 0.91329, "name": "CLink Office 2.0 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-6171.yaml" @@ -15052,7 +15052,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-918", "epss": 0.61736, -"epss_pct": 0.99109, +"epss_pct": 0.99111, "name": "SAP BusinessObjects Business Intelligence Platform - Blind Server-Side Request Forgery", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-6308.yaml" @@ -15062,7 +15062,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.20058, -"epss_pct": 0.97256, +"epss_pct": 0.9726, "name": "OpenSIS 7.3 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-6637.yaml" @@ -15072,7 +15072,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.10124, -"epss_pct": 0.95312, +"epss_pct": 0.95318, "name": "Eclipse Mojarra - Local File Read", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-6950.yaml" @@ -15087,7 +15087,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.02195, -"epss_pct": 0.81242, +"epss_pct": 0.81262, "name": "WordPress Ultimate FAQ <1.8.30 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-7107.yaml" @@ -15138,7 +15138,7 @@ "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01024, -"epss_pct": 0.61166, +"epss_pct": 0.61206, "name": "McAfee ePolicy Orchestrator <5.10.9 Update 9 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-7318.yaml" @@ -15162,7 +15162,7 @@ "cvss": 7.5, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "epss": 0.07884, -"epss_pct": 0.94295, +"epss_pct": 0.94303, "name": "Puppet Server/PuppetDB - Sensitive Information Disclosure", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-7943.yaml" @@ -15200,7 +15200,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.07055, -"epss_pct": 0.93741, +"epss_pct": 0.93748, "name": "Revive Adserver <=5.0.3 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-8115.yaml" @@ -15220,7 +15220,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.26136, -"epss_pct": 0.97843, +"epss_pct": 0.97846, "name": "Citrix ADC/Gateway - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-8191.yaml" @@ -15239,7 +15239,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "cwe": "CWE-94", "epss": 0.10695, -"epss_pct": 0.9549, +"epss_pct": 0.95496, "name": "Citrix ADC and Citrix NetScaler Gateway - Remote Code Injection", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-8194.yaml" @@ -15256,7 +15256,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.48656, -"epss_pct": 0.98784, +"epss_pct": 0.98786, "name": "Citrix XenMobile Server - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-8209.yaml" @@ -15271,7 +15271,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-306", "epss": 0.05275, -"epss_pct": 0.91988, +"epss_pct": 0.91998, "name": "Artica Pandora FMS <=7.42 - Arbitrary File Read", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-8497.yaml" @@ -15281,7 +15281,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.14834, -"epss_pct": 0.96444, +"epss_pct": 0.96448, "name": "IceWarp WebMail Server <=11.4.4.1 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-8512.yaml" @@ -15301,7 +15301,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "cwe": "CWE-352", "epss": 0.0883, -"epss_pct": 0.94819, +"epss_pct": 0.94825, "name": "Wordpress Plugin Tutor LMS 1.5.3 - Cross-Site Request Forgery", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-8615.yaml" @@ -15311,7 +15311,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-22", "epss": 0.10808, -"epss_pct": 0.95526, +"epss_pct": 0.95532, "name": "Lotus Core CMS 1.0.1 - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-8641.yaml" @@ -15341,7 +15341,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-798", "epss": 0.846, -"epss_pct": 0.99686, +"epss_pct": 0.99687, "name": "EyesOfNetwork - Hardcoded API Key & SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-8656.yaml" @@ -15361,7 +15361,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-287", "epss": 0.46454, -"epss_pct": 0.98731, +"epss_pct": 0.98733, "name": "WordPress Time Capsule < 1.21.16 - Authentication Bypass", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-8771.yaml" @@ -15381,7 +15381,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-78", "epss": 0.73779, -"epss_pct": 0.99436, +"epss_pct": 0.99438, "name": "Cacti v1.2.8 - Remote Code Execution", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-8813.yaml" @@ -15391,7 +15391,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.27149, -"epss_pct": 0.97909, +"epss_pct": 0.97911, "name": "Citrix ShareFile StorageZones <=5.10.x - Arbitrary File Read", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-8982.yaml" @@ -15401,7 +15401,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.03587, -"epss_pct": 0.88599, +"epss_pct": 0.88613, "name": "Jeedom <=4.0.38 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-9036.yaml" @@ -15416,7 +15416,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-200", "epss": 0.08173, -"epss_pct": 0.94459, +"epss_pct": 0.94466, "name": "WordPress wpCentral <1.5.1 - Information Disclosure", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-9043.yaml" @@ -15426,7 +15426,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-347", "epss": 0.0777, -"epss_pct": 0.9422, +"epss_pct": 0.94227, "name": "exacqVision Web Service - Remote Code Execution", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-9047.yaml" @@ -15446,7 +15446,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-824", "epss": 0.05957, -"epss_pct": 0.92767, +"epss_pct": 0.92776, "name": "Pure-FTPd \u2264 1.0.49 - DoS via Uninitialized Pointer", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2020/CVE-2020-9274.yaml" @@ -15456,7 +15456,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01282, -"epss_pct": 0.68061, +"epss_pct": 0.68096, "name": "Oracle iPlanet Web Server 7.0.x - Image Injection", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-9314.yaml" @@ -15476,7 +15476,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.05198, -"epss_pct": 0.91894, +"epss_pct": 0.91905, "name": "Jira Subversion ALM for Enterprise <8.8.2 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-9344.yaml" @@ -15491,7 +15491,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-74", "epss": 0.16586, -"epss_pct": 0.96783, +"epss_pct": 0.96787, "name": "D-Link DIR-610 Devices - Information Disclosure", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-9376.yaml" @@ -15501,7 +15501,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.22513, -"epss_pct": 0.97538, +"epss_pct": 0.97542, "name": "Django SQL Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/dast/cves/2020/CVE-2020-9402.yaml" @@ -15511,7 +15511,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-670", "epss": 0.19037, -"epss_pct": 0.97106, +"epss_pct": 0.97109, "name": "rConfig <3.9.4 - Sensitive Information Disclosure", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-9425.yaml" @@ -15521,7 +15521,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-306", "epss": 0.2937, -"epss_pct": 0.98045, +"epss_pct": 0.98047, "name": "Apache Spark - Authentication Bypass", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-9480.yaml" @@ -15531,7 +15531,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-89", "epss": 0.34613, -"epss_pct": 0.98303, +"epss_pct": 0.98306, "name": "SkyWalking SQLI", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-9483.yaml" @@ -15569,7 +15569,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-502", "epss": 0.18383, -"epss_pct": 0.97023, +"epss_pct": 0.97026, "name": "FasterXML jackson-databind - Deserialization Remote Code Execution", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-9547.yaml" @@ -15579,7 +15579,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-502", "epss": 0.18345, -"epss_pct": 0.97021, +"epss_pct": 0.97024, "name": "FasterXML Jackson Databind <=2.9.10.4 - Remote Code Execution", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-9548.yaml" @@ -15589,7 +15589,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-74", "epss": 0.72821, -"epss_pct": 0.99408, +"epss_pct": 0.99409, "name": "Craft CMS < 3.3.0 - Server-Side Template Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-9757.yaml" @@ -15628,7 +15628,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "cwe": "CWE-306", "epss": 0.80426, -"epss_pct": 0.99591, +"epss_pct": 0.99592, "name": "Cisco HyperFlex HX Data Platform - Arbitrary File Upload", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-1499.yaml" @@ -15638,7 +15638,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-269", "epss": 0.83425, -"epss_pct": 0.99659, +"epss_pct": 0.9966, "name": "SonicWall Email Security <= 10.0.9.x - Unauthenticated Admin Account Creation", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-20021.yaml" @@ -15648,7 +15648,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-601", "epss": 0.13041, -"epss_pct": 0.96065, +"epss_pct": 0.96069, "name": "SonicWall SonicOS 7.0 - Open Redirect", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-20031.yaml" @@ -15674,7 +15674,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-1321", "epss": 0.06104, -"epss_pct": 0.9292, +"epss_pct": 0.92929, "name": "Odoo Apps - Cross-Site Scripting via Prototype Pollution", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-20086.yaml" @@ -15693,7 +15693,7 @@ "cvss": 8.8, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "epss": 0.08796, -"epss_pct": 0.94804, +"epss_pct": 0.9481, "name": "Buffalo WSR-2533DHPL2 - Configuration File Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-20091.yaml" @@ -15703,7 +15703,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-287", "epss": 0.0817, -"epss_pct": 0.94456, +"epss_pct": 0.94463, "name": "Buffalo WSR-2533DHPL2 - Improper Access Control", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-20092.yaml" @@ -15713,7 +15713,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-425", "epss": 0.05973, -"epss_pct": 0.92781, +"epss_pct": 0.9279, "name": "TCExam <= 14.8.1 - Sensitive Information Exposure", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-20114.yaml" @@ -15743,7 +15743,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.02557, -"epss_pct": 0.8397, +"epss_pct": 0.83989, "name": "Gryphon Tower - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-20137.yaml" @@ -15753,7 +15753,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-306", "epss": 0.4006, -"epss_pct": 0.98528, +"epss_pct": 0.9853, "name": "Trendnet AC2600 TEW-827DRU - Credentials Disclosure", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-20150.yaml" @@ -15763,7 +15763,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-306", "epss": 0.10861, -"epss_pct": 0.95542, +"epss_pct": 0.95548, "name": "Trendnet AC2600 TEW-827DRU 2.08B01 - Admin Password Change", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-20158.yaml" @@ -15773,7 +15773,7 @@ "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-77", "epss": 0.07783, -"epss_pct": 0.94226, +"epss_pct": 0.94233, "name": "Netgear RAX43 1.0.3.96 - Command Injection/Authentication Bypass Buffer Overrun", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-20167.yaml" @@ -15783,7 +15783,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.37246, -"epss_pct": 0.98416, +"epss_pct": 0.98418, "name": "Keycloak 10.0.0 - 18.0.0 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-20323.yaml" @@ -15792,7 +15792,7 @@ "cvss": 9.8, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "epss": 0.07871, -"epss_pct": 0.94281, +"epss_pct": 0.94288, "name": "Acmailer - Improper Access Control to OS Command Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-20617.yaml" @@ -15802,7 +15802,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.03378, -"epss_pct": 0.8793, +"epss_pct": 0.87943, "name": "WordPress Quiz and Survey Master <7.1.14 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-20792.yaml" @@ -15822,7 +15822,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.37095, -"epss_pct": 0.98409, +"epss_pct": 0.98412, "name": "Adobe ColdFusion - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-21087.yaml" @@ -15832,7 +15832,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.21173, -"epss_pct": 0.9741, +"epss_pct": 0.97414, "name": "Spring Boot Actuator Logview Directory Traversal", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-21234.yaml" @@ -15842,7 +15842,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N", "cwe": "CWE-862", "epss": 0.49051, -"epss_pct": 0.98796, +"epss_pct": 0.98797, "name": "OneDev < 4.0.3 - User Access Token Leak", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-21246.yaml" @@ -15852,7 +15852,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N", "cwe": "CWE-918", "epss": 0.24784, -"epss_pct": 0.9774, +"epss_pct": 0.97744, "name": "MinIO Browser API - Server-Side Request Forgery", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-21287.yaml" @@ -15901,7 +15901,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-502", "epss": 0.0837, -"epss_pct": 0.94563, +"epss_pct": 0.94569, "name": "Oracle WebLogic Server - Remote Code Execution", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-2135.yaml" @@ -15911,7 +15911,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H", "cwe": "CWE-434", "epss": 0.82136, -"epss_pct": 0.9963, +"epss_pct": 0.99631, "name": "XStream <1.4.16 - Remote Code Execution", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-21351.yaml" @@ -15921,7 +15921,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-863", "epss": 0.13521, -"epss_pct": 0.96174, +"epss_pct": 0.96179, "name": "BuddyPress REST API <7.2.1 - Privilege Escalation/Remote Code Execution", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-21389.yaml" @@ -15941,7 +15941,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H", "cwe": "CWE-74", "epss": 0.10116, -"epss_pct": 0.95308, +"epss_pct": 0.95314, "name": "SCIMono <0.0.19 - Remote Code Execution", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-21479.yaml" @@ -15961,7 +15961,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.12293, -"epss_pct": 0.95897, +"epss_pct": 0.95902, "name": "Advantech R-SeeNet 2.4.12 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-21799.yaml" @@ -15971,7 +15971,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.14115, -"epss_pct": 0.96302, +"epss_pct": 0.96307, "name": "Advantech R-SeeNet 2.4.12 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-21800.yaml" @@ -15981,7 +15981,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.63415, -"epss_pct": 0.99148, +"epss_pct": 0.99151, "name": "Advantech R-SeeNet - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-21801.yaml" @@ -15991,7 +15991,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.099, -"epss_pct": 0.95233, +"epss_pct": 0.9524, "name": "Advantech R-SeeNet - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-21802.yaml" @@ -16001,7 +16001,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.07902, -"epss_pct": 0.94301, +"epss_pct": 0.94308, "name": "Advantech R-SeeNet - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-21803.yaml" @@ -16021,7 +16021,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N", "cwe": "CWE-200", "epss": 0.32385, -"epss_pct": 0.98204, +"epss_pct": 0.98208, "name": "D-Link DIR-3040 1.13B03 - Information Disclosure", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-21816.yaml" @@ -16031,7 +16031,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "cwe": "CWE-78", "epss": 0.36234, -"epss_pct": 0.98365, +"epss_pct": 0.98368, "name": "Lantronix PremierWave 2050 8.9.0.0R4 - Remote Command Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-21881.yaml" @@ -16100,7 +16100,7 @@ "cvss": 5.3, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "epss": 0.49177, -"epss_pct": 0.98797, +"epss_pct": 0.988, "name": "vCenter Server - Improper Access Control", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-22017.yaml" @@ -16110,7 +16110,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-94", "epss": 0.13035, -"epss_pct": 0.96064, +"epss_pct": 0.96069, "name": "Spring Cloud Netflix Hystrix Dashboard <2.2.10 - Remote Code Execution", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-22053.yaml" @@ -16130,7 +16130,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.1052, -"epss_pct": 0.95436, +"epss_pct": 0.95442, "name": "FortiWeb - Cross Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-22122.yaml" @@ -16175,7 +16175,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N", "cwe": "CWE-918", "epss": 0.27806, -"epss_pct": 0.9795, +"epss_pct": 0.97954, "name": "Gitlab CE/EE 10.5 - Server-Side Request Forgery", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-22214.yaml" @@ -16205,7 +16205,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-601", "epss": 0.69561, -"epss_pct": 0.99312, +"epss_pct": 0.99314, "name": "Revive Adserver <5.1.0 - Open Redirect", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-22873.yaml" @@ -16244,7 +16244,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-22", "epss": 0.13436, -"epss_pct": 0.96151, +"epss_pct": 0.96156, "name": "MERCUSYS Mercury X18G 1.0.5 Router - Local File Inclusion", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-23241.yaml" @@ -16254,7 +16254,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-94", "epss": 0.21333, -"epss_pct": 0.97426, +"epss_pct": 0.97429, "name": "Lodash Template - Server-Side Template Injection (RCE)", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-23337.yaml" @@ -16264,7 +16264,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-434", "epss": 0.19083, -"epss_pct": 0.97116, +"epss_pct": 0.97119, "name": "elFinder < 2.1.58 - Remote Code Execution", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-23394.yaml" @@ -16274,7 +16274,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.05547, -"epss_pct": 0.92287, +"epss_pct": 0.92297, "name": "10Web Photo Gallery < 1.5.55 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24139.yaml" @@ -16293,7 +16293,7 @@ "cvss": 7.5, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "epss": 0.31043, -"epss_pct": 0.98134, +"epss_pct": 0.98136, "name": "WordPress Modern Events Calendar Lite <5.16.5 - Sensitive Information Disclosure", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24146.yaml" @@ -16303,7 +16303,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-918", "epss": 0.04337, -"epss_pct": 0.90514, +"epss_pct": 0.90526, "name": "WordPress Like Button Rating <2.6.32 - Server-Side Request Forgery", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24150.yaml" @@ -16323,7 +16323,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-601", "epss": 0.01643, -"epss_pct": 0.74742, +"epss_pct": 0.74772, "name": "WordPress Ninja Forms <3.4.34 - Open Redirect", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24165.yaml" @@ -16333,7 +16333,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.10348, -"epss_pct": 0.95381, +"epss_pct": 0.95387, "name": "WordPress Advanced Order Export For WooCommerce <3.1.8 - Authenticated Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24169.yaml" @@ -16343,7 +16343,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-200", "epss": 0.04788, -"epss_pct": 0.91304, +"epss_pct": 0.91315, "name": "User Profile Picture < 2.5.0 - Sensitive Information Disclosure", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24170.yaml" @@ -16358,7 +16358,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-601", "epss": 0.03066, -"epss_pct": 0.86701, +"epss_pct": 0.86718, "name": "WordPress PhastPress <1.111 - Open Redirect", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24210.yaml" @@ -16368,7 +16368,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-434", "epss": 0.07908, -"epss_pct": 0.94303, +"epss_pct": 0.94311, "name": "WooCommerce Help Scout - Arbitrary File Upload", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24212.yaml" @@ -16378,7 +16378,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.0137, -"epss_pct": 0.7, +"epss_pct": 0.70031, "name": "GiveWP <= 2.9.7 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24213.yaml" @@ -16388,7 +16388,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.0163, -"epss_pct": 0.7453, +"epss_pct": 0.7456, "name": "WordPress OpenID Connect Generic Client 3.8.0-3.8.1 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24214.yaml" @@ -16397,7 +16397,7 @@ "cvss": 9.8, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "epss": 0.09733, -"epss_pct": 0.95174, +"epss_pct": 0.95181, "name": "Controlled Admin Access WordPress Plugin <= 1.4.0 - Improper Access Control & Privilege Escalation", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24215.yaml" @@ -16406,7 +16406,7 @@ "cvss": 5.3, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "epss": 0.02059, -"epss_pct": 0.79977, +"epss_pct": 0.79999, "name": "All Thrive Themes and Plugins - Unauthenticated Option Update", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24219.yaml" @@ -16416,7 +16416,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H", "cwe": "CWE-434", "epss": 0.03946, -"epss_pct": 0.8967, +"epss_pct": 0.89683, "name": "Multiple Thrive Themes < 2.0.0 - Arbitrary File Upload", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24220.yaml" @@ -16426,7 +16426,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-200", "epss": 0.05404, -"epss_pct": 0.92124, +"epss_pct": 0.92134, "name": "AccessAlly <3.5.7 - Sensitive Information Leakage", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24226.yaml" @@ -16436,7 +16436,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-200", "epss": 0.05927, -"epss_pct": 0.92733, +"epss_pct": 0.92742, "name": "Patreon WordPress <1.7.0 - Unauthenticated Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24227.yaml" @@ -16446,7 +16446,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.02927, -"epss_pct": 0.86102, +"epss_pct": 0.86119, "name": "WordPress Goto Tour & Travel Theme <2.0 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24235.yaml" @@ -16456,7 +16456,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-434", "epss": 0.0714, -"epss_pct": 0.93813, +"epss_pct": 0.9382, "name": "WordPress Imagements <=1.2.5 - Arbitrary File Upload", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24236.yaml" @@ -16466,7 +16466,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.06275, -"epss_pct": 0.9308, +"epss_pct": 0.93088, "name": "WordPress Realteo <=1.2.3 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24237.yaml" @@ -16476,7 +16476,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01602, -"epss_pct": 0.74102, +"epss_pct": 0.74132, "name": "WordPress Pie Register <3.7.0.1 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24239.yaml" @@ -16486,7 +16486,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.05721, -"epss_pct": 0.92503, +"epss_pct": 0.92513, "name": "WordPress Stop Spammers <2021.9 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24245.yaml" @@ -16496,7 +16496,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.17638, -"epss_pct": 0.96931, +"epss_pct": 0.96935, "name": "WordPress Supsystic Ultimate Maps <1.2.5 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24274.yaml" @@ -16506,7 +16506,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.18165, -"epss_pct": 0.96994, +"epss_pct": 0.96997, "name": "Popup by Supsystic <1.10.5 - Cross-Site scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24275.yaml" @@ -16516,7 +16516,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.16044, -"epss_pct": 0.96682, +"epss_pct": 0.96685, "name": "WordPress Supsystic Contact Form <1.7.15 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24276.yaml" @@ -16526,7 +16526,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-863", "epss": 0.07359, -"epss_pct": 0.93964, +"epss_pct": 0.93971, "name": "WordPress Contact Form 7 <2.3.4 - Arbitrary Nonce Generation", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24278.yaml" @@ -16536,7 +16536,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-434", "epss": 0.4214, -"epss_pct": 0.98594, +"epss_pct": 0.98597, "name": "WordPress Kaswara Modern VC Addons <=3.0.1 - Arbitrary File Upload", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24284.yaml" @@ -16546,7 +16546,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.14697, -"epss_pct": 0.96421, +"epss_pct": 0.96425, "name": "WordPress Car Seller - Auto Classifieds Script - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24285.yaml" @@ -16556,7 +16556,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.13942, -"epss_pct": 0.96274, +"epss_pct": 0.96278, "name": "WordPress Plugin Redirect 404 to Parent 1.3.0 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24286.yaml" @@ -16566,7 +16566,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.10358, -"epss_pct": 0.95387, +"epss_pct": 0.95393, "name": "WordPress Select All Categories and Taxonomies <1.3.2 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24287.yaml" @@ -16576,7 +16576,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-601", "epss": 0.01939, -"epss_pct": 0.78686, +"epss_pct": 0.78711, "name": "WordPress AcyMailing <7.5.0 - Open Redirect", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24288.yaml" @@ -16586,7 +16586,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.1445, -"epss_pct": 0.96371, +"epss_pct": 0.96375, "name": "WordPress Photo Gallery by 10Web <1.5.69 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24291.yaml" @@ -16596,7 +16596,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-89", "epss": 0.04691, -"epss_pct": 0.91151, +"epss_pct": 0.91162, "name": "Spam protection, AntiSpam, FireWall by CleanTalk < 5.153.4 - Unauthenticated Blind SQL Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24295.yaml" @@ -16606,7 +16606,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.03451, -"epss_pct": 0.88179, +"epss_pct": 0.88192, "name": "WordPress Simple Giveaways <2.36.2 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24298.yaml" @@ -16616,7 +16616,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.10587, -"epss_pct": 0.95456, +"epss_pct": 0.95462, "name": "WordPress WooCommerce <1.13.22 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24300.yaml" @@ -16626,7 +16626,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.06442, -"epss_pct": 0.93234, +"epss_pct": 0.93242, "name": "WordPress Mediumish Theme <=1.0.47 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24316.yaml" @@ -16636,7 +16636,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.10769, -"epss_pct": 0.95513, +"epss_pct": 0.95519, "name": "WordPress Bello Directory & Listing Theme <1.6.0 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24320.yaml" @@ -16646,7 +16646,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.03884, -"epss_pct": 0.89489, +"epss_pct": 0.89503, "name": "WordPress Car Repair Services & Auto Mechanic Theme <4.0 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24335.yaml" @@ -16656,7 +16656,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-89", "epss": 0.29776, -"epss_pct": 0.98066, +"epss_pct": 0.98068, "name": "WordPress Statistics <13.0.8 - Blind SQL Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24340.yaml" @@ -16666,7 +16666,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01975, -"epss_pct": 0.79064, +"epss_pct": 0.79088, "name": "WordPress JNews Theme <8.0.6 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24342.yaml" @@ -16676,7 +16676,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-178", "epss": 0.5408, -"epss_pct": 0.98929, +"epss_pct": 0.98931, "name": "WordPress SP Project & Document Manager <4.22 - Authenticated Shell Upload", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24347.yaml" @@ -16686,7 +16686,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.02483, -"epss_pct": 0.8346, +"epss_pct": 0.83479, "name": "WordPress The Plus Addons for Elementor <4.1.12 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24351.yaml" @@ -16696,7 +16696,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-601", "epss": 0.02295, -"epss_pct": 0.82057, +"epss_pct": 0.82077, "name": "Plus Addons for Elementor Page Builder < 4.1.10 - Open Redirect", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24358.yaml" @@ -16706,7 +16706,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01975, -"epss_pct": 0.79064, +"epss_pct": 0.79088, "name": "WordPress Jannah Theme <5.4.4 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24364.yaml" @@ -16716,7 +16716,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-434", "epss": 0.47091, -"epss_pct": 0.98748, +"epss_pct": 0.9875, "name": "WordPress Fancy Product Designer <4.6.9 - Arbitrary File Upload", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24370.yaml" @@ -16726,7 +16726,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.03677, -"epss_pct": 0.88885, +"epss_pct": 0.88898, "name": "WordPress Pro Real Estate 7 Theme <3.1.1 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24387.yaml" @@ -16736,7 +16736,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.03753, -"epss_pct": 0.89107, +"epss_pct": 0.89121, "name": "WordPress FoodBakery <2.2 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24389.yaml" @@ -16746,7 +16746,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-601", "epss": 0.02915, -"epss_pct": 0.86052, +"epss_pct": 0.86069, "name": "WordPress wpForo Forum < 1.9.7 - Open Redirect", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24406.yaml" @@ -16756,7 +16756,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.02591, -"epss_pct": 0.84209, +"epss_pct": 0.84226, "name": "WordPress Jannah Theme <5.4.5 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24407.yaml" @@ -16766,7 +16766,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01793, -"epss_pct": 0.76858, +"epss_pct": 0.76885, "name": "Prismatic < 2.8 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24409.yaml" @@ -16776,7 +16776,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01714, -"epss_pct": 0.75798, +"epss_pct": 0.75824, "name": "WordPress Titan Framework plugin <= 1.12.1 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24435.yaml" @@ -16786,7 +16786,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01905, -"epss_pct": 0.78278, +"epss_pct": 0.78304, "name": "WordPress W3 Total Cache <2.1.4 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24436.yaml" @@ -16796,7 +16796,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.45996, -"epss_pct": 0.98717, +"epss_pct": 0.98719, "name": "Wordpress Polls Widget < 1.5.3 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24442.yaml" @@ -16806,7 +16806,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01917, -"epss_pct": 0.78432, +"epss_pct": 0.78457, "name": "WordPress W3 Total Cache <2.1.5 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24452.yaml" @@ -16826,7 +16826,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.11241, -"epss_pct": 0.95651, +"epss_pct": 0.95657, "name": "WordPress Post Grid <2.1.8 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24488.yaml" @@ -16836,7 +16836,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.03343, -"epss_pct": 0.87811, +"epss_pct": 0.87824, "name": "Wordpress Marmoset Viewer <1.9.3 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24495.yaml" @@ -16846,7 +16846,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.03536, -"epss_pct": 0.88447, +"epss_pct": 0.88462, "name": "WordPress Calendar Event Multi View <1.4.01 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24498.yaml" @@ -16856,7 +16856,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-434", "epss": 0.60113, -"epss_pct": 0.99067, +"epss_pct": 0.99069, "name": "WordPress Workreap - Remote Code Execution", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24499.yaml" @@ -16866,7 +16866,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.02721, -"epss_pct": 0.84995, +"epss_pct": 0.85013, "name": "WordPress MF Gig Calendar <=1.1 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24510.yaml" @@ -16876,7 +16876,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01552, -"epss_pct": 0.73359, +"epss_pct": 0.73391, "name": "ProfilePress < 3.1.11 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24522.yaml" @@ -16886,7 +16886,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-287", "epss": 0.07634, -"epss_pct": 0.94137, +"epss_pct": 0.94144, "name": "Profile Builder < 3.4.9 - Improper Authentication", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24527.yaml" @@ -16896,7 +16896,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.0654, -"epss_pct": 0.93315, +"epss_pct": 0.93323, "name": "WordPress Paytm Donation <=1.3.2 - Authenticated SQL Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24554.yaml" @@ -16906,7 +16906,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.06668, -"epss_pct": 0.93413, +"epss_pct": 0.93422, "name": "G Auto-Hyperlink <= 1.0.1 - SQL Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24627.yaml" @@ -16916,7 +16916,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.05028, -"epss_pct": 0.91661, +"epss_pct": 0.91672, "name": "Images to WebP < 1.9 - Authenticated Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24644.yaml" @@ -16926,7 +16926,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-287", "epss": 0.0983, -"epss_pct": 0.95211, +"epss_pct": 0.95217, "name": "Pie Register < 3.7.1.6 - Unauthenticated Arbitrary Login", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24647.yaml" @@ -16936,7 +16936,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01582, -"epss_pct": 0.73802, +"epss_pct": 0.73832, "name": "Limit Login Attempts WordPress - Stored Cross-site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24657.yaml" @@ -16946,7 +16946,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.08883, -"epss_pct": 0.94848, +"epss_pct": 0.94854, "name": "WordPress Podlove Podcast Publisher <3.5.6 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24666.yaml" @@ -16956,7 +16956,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.00893, -"epss_pct": 0.57009, +"epss_pct": 0.57051, "name": "Duplicate Page WordPress - Stored Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24681.yaml" @@ -16966,7 +16966,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.06415, -"epss_pct": 0.93203, +"epss_pct": 0.93211, "name": "Pie Register < 3.7.1.6 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24731.yaml" @@ -16976,7 +16976,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.02244, -"epss_pct": 0.81647, +"epss_pct": 0.81669, "name": "WordPress Sassy Social Share Plugin <3.3.40 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24746.yaml" @@ -16986,7 +16986,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.38298, -"epss_pct": 0.98456, +"epss_pct": 0.98459, "name": "WordPress Visitor Statistics (Real Time Traffic) <4.8 -SQL Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24750.yaml" @@ -17006,7 +17006,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.17348, -"epss_pct": 0.96893, +"epss_pct": 0.96897, "name": "Download Monitor < 4.4.5 - SQL Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24786.yaml" @@ -17016,7 +17016,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.05208, -"epss_pct": 0.9191, +"epss_pct": 0.9192, "name": "Header Footer Code Manager < 1.1.14 - Admin+ SQL Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24791.yaml" @@ -17026,7 +17026,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.12559, -"epss_pct": 0.95948, +"epss_pct": 0.95953, "name": "WordPress Asgaros Forum <1.15.13 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24827.yaml" @@ -17036,7 +17036,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-601", "epss": 0.02208, -"epss_pct": 0.81349, +"epss_pct": 0.8137, "name": "WordPress AnyComment <0.3.5 - Open Redirect", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24838.yaml" @@ -17046,7 +17046,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.0848, -"epss_pct": 0.94631, +"epss_pct": 0.94638, "name": "WCFM WooCommerce Multivendor Marketplace < 3.4.12 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24849.yaml" @@ -17056,7 +17056,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.73293, -"epss_pct": 0.99419, +"epss_pct": 0.99421, "name": "WordPress RegistrationMagic <5.0.1.6 - Authenticated SQL Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24862.yaml" @@ -17066,7 +17066,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01555, -"epss_pct": 0.7342, +"epss_pct": 0.73451, "name": "WordPress eCommerce Product Catalog <3.0.39 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24875.yaml" @@ -17076,7 +17076,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01165, -"epss_pct": 0.65098, +"epss_pct": 0.65135, "name": "Registrations for The Events Calendar < 2.7.5 - Authenticated Reflected Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24876.yaml" @@ -17086,7 +17086,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01165, -"epss_pct": 0.65098, +"epss_pct": 0.65134, "name": "SupportCandy < 2.2.7 - Reflected Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24878.yaml" @@ -17096,7 +17096,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.25136, -"epss_pct": 0.97772, +"epss_pct": 0.97776, "name": "WordPress Elementor Website Builder <3.1.4 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24891.yaml" @@ -17106,7 +17106,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01567, -"epss_pct": 0.73581, +"epss_pct": 0.73611, "name": "WordPress Transposh Translation <1.0.8 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24910.yaml" @@ -17116,7 +17116,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.127, -"epss_pct": 0.95977, +"epss_pct": 0.95982, "name": "Contest Gallery < 13.1.0.6 - SQL injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24915.yaml" @@ -17126,7 +17126,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "cwe": "CWE-284", "epss": 0.01729, -"epss_pct": 0.75975, +"epss_pct": 0.76001, "name": "WordPress Qubely < 1.8.6 - Unauthenticated Email Sending", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24916.yaml" @@ -17146,7 +17146,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.12857, -"epss_pct": 0.96017, +"epss_pct": 0.96021, "name": "WordPress Domain Check <1.0.17 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24926.yaml" @@ -17166,7 +17166,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01397, -"epss_pct": 0.70526, +"epss_pct": 0.70556, "name": "Visual CSS Style Editor < 7.5.4 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24934.yaml" @@ -17176,7 +17176,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01439, -"epss_pct": 0.71321, +"epss_pct": 0.7135, "name": "WordPress Persian Woocommerce <=5.8.0 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24940.yaml" @@ -17186,7 +17186,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.07474, -"epss_pct": 0.94033, +"epss_pct": 0.9404, "name": "Registrations for the Events Calendar < 2.7.6 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24943.yaml" @@ -17196,7 +17196,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.728, -"epss_pct": 0.99407, +"epss_pct": 0.99409, "name": "WordPress Modern Events Calendar <6.1.5 - Blind SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24946.yaml" @@ -17205,7 +17205,7 @@ "cvss": 6.5, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "epss": 0.03089, -"epss_pct": 0.86786, +"epss_pct": 0.86803, "name": "WordPress Responsive Vector Maps < 6.4.2 - Arbitrary File Read", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24947.yaml" @@ -17215,7 +17215,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01439, -"epss_pct": 0.71321, +"epss_pct": 0.7135, "name": "Blog2Social < 6.8.7 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24956.yaml" @@ -17225,7 +17225,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-22", "epss": 0.05898, -"epss_pct": 0.92703, +"epss_pct": 0.92712, "name": "WordPress All-In-One Video Gallery <2.5.0 - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24970.yaml" @@ -17235,7 +17235,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01868, -"epss_pct": 0.77845, +"epss_pct": 0.77871, "name": "Paid Memberships Pro < 2.6.6 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24979.yaml" @@ -17245,7 +17245,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01938, -"epss_pct": 0.78668, +"epss_pct": 0.78693, "name": "WordPress Super Socializer <7.13.30 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24987.yaml" @@ -17255,7 +17255,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01188, -"epss_pct": 0.65722, +"epss_pct": 0.65759, "name": "WooCommerce PDF Invoices & Packing Slips WordPress Plugin < 2.10.5 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24991.yaml" @@ -17265,7 +17265,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "cwe": "CWE-862", "epss": 0.02753, -"epss_pct": 0.85198, +"epss_pct": 0.85214, "name": "WordPress Guppy <=1.1 - Information Disclosure", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24997.yaml" @@ -17274,7 +17274,7 @@ "cvss": 9.8, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "epss": 0.56148, -"epss_pct": 0.98975, +"epss_pct": 0.98977, "name": "WordPress WPCargo Track & Trace <6.9.0 - Remote Code Execution", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-25003.yaml" @@ -17284,7 +17284,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.02258, -"epss_pct": 0.81752, +"epss_pct": 0.81773, "name": "The Code Snippets WordPress Plugin < 2.14.3 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-25008.yaml" @@ -17294,7 +17294,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01798, -"epss_pct": 0.76919, +"epss_pct": 0.76946, "name": "Chaty < 2.8.2 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-25016.yaml" @@ -17304,7 +17304,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-601", "epss": 0.01932, -"epss_pct": 0.78596, +"epss_pct": 0.7862, "name": "WordPress Event Tickets < 5.2.2 - Open Redirect", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-25028.yaml" @@ -17314,7 +17314,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-352", "epss": 0.06691, -"epss_pct": 0.9343, +"epss_pct": 0.93439, "name": "PublishPress Capabilities < 2.3.1 - Missing Authorization", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-25032.yaml" @@ -17324,7 +17324,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-601", "epss": 0.02303, -"epss_pct": 0.82129, +"epss_pct": 0.82149, "name": "Noptin < 1.6.5 - Open Redirect", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-25033.yaml" @@ -17334,7 +17334,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "cwe": "CWE-352", "epss": 0.02985, -"epss_pct": 0.86358, +"epss_pct": 0.86374, "name": "WordPress Button Generator <2.3.3 - Remote File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-25052.yaml" @@ -17344,7 +17344,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.0201, -"epss_pct": 0.79493, +"epss_pct": 0.79517, "name": "WordPress FeedWordPress < 2022.0123 - Authenticated Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-25055.yaml" @@ -17354,7 +17354,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.0208, -"epss_pct": 0.80191, +"epss_pct": 0.80213, "name": "WordPress Contact Form 7 Skins <=2.5.0 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-25063.yaml" @@ -17364,7 +17364,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01217, -"epss_pct": 0.66489, +"epss_pct": 0.66522, "name": "Smash Balloon Social Post Feed < 4.1.1 - Authenticated Reflected Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-25065.yaml" @@ -17374,7 +17374,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01096, -"epss_pct": 0.63239, +"epss_pct": 0.63278, "name": "Landing Page Builder < 1.4.9.6 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-25067.yaml" @@ -17384,7 +17384,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-601", "epss": 0.02161, -"epss_pct": 0.80939, +"epss_pct": 0.80961, "name": "WordPress WebP Converter for Media < 4.0.3 - Unauthenticated Open Redirect", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-25074.yaml" @@ -17394,7 +17394,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N", "cwe": "CWE-862", "epss": 0.01364, -"epss_pct": 0.69864, +"epss_pct": 0.69895, "name": "WordPress Duplicate Page or Post <1.5.1 - Cross-Site Scripting", "severity": "low", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-25075.yaml" @@ -17404,7 +17404,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.02288, -"epss_pct": 0.81994, +"epss_pct": 0.82015, "name": "Affiliates Manager < 2.9.0 - Cross Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-25078.yaml" @@ -17414,7 +17414,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.0682, -"epss_pct": 0.93544, +"epss_pct": 0.93551, "name": "Contact Form Entries < 1.2.4 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-25079.yaml" @@ -17424,7 +17424,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-98", "epss": 0.05229, -"epss_pct": 0.91935, +"epss_pct": 0.91946, "name": "WordPress Popup Builder < 4.0.7 - Remote Code Execution", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-25082.yaml" @@ -17434,7 +17434,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01651, -"epss_pct": 0.7486, +"epss_pct": 0.7489, "name": "WOOF WordPress plugin - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-25085.yaml" @@ -17454,7 +17454,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.02145, -"epss_pct": 0.80797, +"epss_pct": 0.8082, "name": "WordPress GiveWP <2.17.3 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-25099.yaml" @@ -17464,7 +17464,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01418, -"epss_pct": 0.70931, +"epss_pct": 0.7096, "name": "WordPress Ocean Extra <1.9.5 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-25104.yaml" @@ -17474,7 +17474,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-601", "epss": 0.01908, -"epss_pct": 0.78324, +"epss_pct": 0.7835, "name": "WordPress English Admin <1.5.2 - Open Redirect", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-25111.yaml" @@ -17484,7 +17484,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.02187, -"epss_pct": 0.81154, +"epss_pct": 0.81175, "name": "WordPress WHMCS Bridge <6.4b - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-25112.yaml" @@ -17504,7 +17504,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-200", "epss": 0.05632, -"epss_pct": 0.92406, +"epss_pct": 0.92416, "name": "Yoast SEO 16.7-17.2 - Information Disclosure", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-25118.yaml" @@ -17514,7 +17514,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.02909, -"epss_pct": 0.86025, +"epss_pct": 0.86042, "name": "Easy Social Feed < 6.2.7 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-25120.yaml" @@ -17524,7 +17524,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.16372, -"epss_pct": 0.96737, +"epss_pct": 0.96741, "name": "Aruba Instant Access Point (IAP) - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-25161.yaml" @@ -17558,7 +17558,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-78", "epss": 0.56659, -"epss_pct": 0.98989, +"epss_pct": 0.98991, "name": "Nagios 5.5.6-5.7.5 - Authenticated Remote Command Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-25297.yaml" @@ -17598,7 +17598,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.09331, -"epss_pct": 0.95022, +"epss_pct": 0.95028, "name": "Hue Magic 3.0.0 - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-25864.yaml" @@ -17608,7 +17608,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-89", "epss": 0.12245, -"epss_pct": 0.95885, +"epss_pct": 0.9589, "name": "Void Aural Rec Monitor 9.0.0.1 - SQL Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-25899.yaml" @@ -17618,7 +17618,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-918", "epss": 0.38845, -"epss_pct": 0.98481, +"epss_pct": 0.98483, "name": "Atlassian Confluence < 5.8.6 - Server-Side Request Forgery", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-26072.yaml" @@ -17663,7 +17663,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.07124, -"epss_pct": 0.93797, +"epss_pct": 0.93804, "name": "Cacti - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-26247.yaml" @@ -17678,7 +17678,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.16899, -"epss_pct": 0.9683, +"epss_pct": 0.96834, "name": "AfterLogic Aurora and WebMail Pro < 7.7.9 - Information Disclosure", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-26294.yaml" @@ -17698,7 +17698,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.07326, -"epss_pct": 0.93945, +"epss_pct": 0.93952, "name": "EPrints 3.4.2 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-26475.yaml" @@ -17708,7 +17708,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-287", "epss": 0.10528, -"epss_pct": 0.95438, +"epss_pct": 0.95445, "name": "ImpressCMS <1.4.3 - Incorrect Authorization", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-26598.yaml" @@ -17718,7 +17718,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.20968, -"epss_pct": 0.97389, +"epss_pct": 0.97392, "name": "ImpressCMS < 1.4.3 - SQL Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-26599.yaml" @@ -17728,7 +17728,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.03072, -"epss_pct": 0.86723, +"epss_pct": 0.8674, "name": "EPrints 3.4.2 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-26702.yaml" @@ -17738,7 +17738,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.075, -"epss_pct": 0.9405, +"epss_pct": 0.94057, "name": "Redwood Report2Web 4.3.4.5 & 4.5.3 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-26710.yaml" @@ -17756,7 +17756,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.12578, -"epss_pct": 0.9595, +"epss_pct": 0.95955, "name": "Jenzabar 9.2x-9.2.2 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-26723.yaml" @@ -17786,7 +17786,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.0141, -"epss_pct": 0.70784, +"epss_pct": 0.70814, "name": "Odoo <= 15.0 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-26947.yaml" @@ -17796,7 +17796,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-89", "epss": 0.05721, -"epss_pct": 0.92503, +"epss_pct": 0.92513, "name": "Doctor Appointment System 1.0 - SQL Injection", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-27124.yaml" @@ -17806,7 +17806,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-74", "epss": 0.16062, -"epss_pct": 0.96685, +"epss_pct": 0.96689, "name": "Sercomm VD625 Smart Modems - CRLF Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-27132.yaml" @@ -17821,7 +17821,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01977, -"epss_pct": 0.79083, +"epss_pct": 0.79108, "name": "Clansphere CMS 2011.4 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-27309.yaml" @@ -17831,7 +17831,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.02816, -"epss_pct": 0.85559, +"epss_pct": 0.85576, "name": "Clansphere CMS 2011.4 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-27310.yaml" @@ -17841,7 +17841,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.12394, -"epss_pct": 0.95914, +"epss_pct": 0.95919, "name": "Doctor Appointment System 1.0 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-27314.yaml" @@ -17851,7 +17851,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-89", "epss": 0.07826, -"epss_pct": 0.94249, +"epss_pct": 0.94257, "name": "Doctor Appointment System 1.0 - SQL Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-27315.yaml" @@ -17861,7 +17861,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-89", "epss": 0.07826, -"epss_pct": 0.94249, +"epss_pct": 0.94257, "name": "Doctor Appointment System 1.0 - SQL Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-27316.yaml" @@ -17871,7 +17871,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-89", "epss": 0.07826, -"epss_pct": 0.94249, +"epss_pct": 0.94257, "name": "Doctor Appointment System 1.0 - SQL Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-27319.yaml" @@ -17881,7 +17881,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-89", "epss": 0.09299, -"epss_pct": 0.95011, +"epss_pct": 0.95017, "name": "Doctor Appointment System 1.0 - SQL Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-27320.yaml" @@ -17891,7 +17891,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.06196, -"epss_pct": 0.93002, +"epss_pct": 0.9301, "name": "Triconsole Datepicker Calendar <3.77 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-27330.yaml" @@ -17911,7 +17911,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.07604, -"epss_pct": 0.94118, +"epss_pct": 0.94125, "name": "FUDForum 3.1.0 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-27519.yaml" @@ -17921,7 +17921,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.06396, -"epss_pct": 0.9318, +"epss_pct": 0.93187, "name": "FUDForum 3.1.0 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-27520.yaml" @@ -17945,7 +17945,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-287", "epss": 0.53841, -"epss_pct": 0.98923, +"epss_pct": 0.98925, "name": "Pega Infinity - Authentication Bypass", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-27651.yaml" @@ -17955,7 +17955,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-918", "epss": 0.61274, -"epss_pct": 0.99097, +"epss_pct": 0.99099, "name": "Appspace 6.2.4 - Server-Side Request Forgery", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-27670.yaml" @@ -17978,7 +17978,7 @@ "cvss": 9.8, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "epss": 0.05598, -"epss_pct": 0.92357, +"epss_pct": 0.92367, "name": "FatPipe WARP/IPVPN/MPVPN - Backdoor Account", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-27856.yaml" @@ -17988,7 +17988,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-862", "epss": 0.02703, -"epss_pct": 0.84898, +"epss_pct": 0.84916, "name": "FatPipe WARP/IPVPN/MPVPN - Authorization Bypass", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-27858.yaml" @@ -18017,7 +18017,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.04067, -"epss_pct": 0.89954, +"epss_pct": 0.89965, "name": "Mautic <3.3.4 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-27909.yaml" @@ -18027,7 +18027,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "cwe": "CWE-611", "epss": 0.18132, -"epss_pct": 0.96992, +"epss_pct": 0.96995, "name": "LumisXP <10.0.0 - Blind XML External Entity Attack", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-27931.yaml" @@ -18037,7 +18037,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-434", "epss": 0.47519, -"epss_pct": 0.98756, +"epss_pct": 0.98759, "name": "SonLogger - Arbitrary File Upload", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-27964.yaml" @@ -18052,7 +18052,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.1592, -"epss_pct": 0.96656, +"epss_pct": 0.9666, "name": "Hongdian H8922 3.0.5 Devices - Local File Inclusion", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-28149.yaml" @@ -18062,7 +18062,7 @@ "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-425", "epss": 0.02794, -"epss_pct": 0.85438, +"epss_pct": 0.85455, "name": "Hongdian H8922 3.0.5 - Information Disclosure", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-28150.yaml" @@ -18072,7 +18072,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-78", "epss": 0.27912, -"epss_pct": 0.97957, +"epss_pct": 0.97959, "name": "Hongdian H8922 3.0.5 - Remote Command Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-28151.yaml" @@ -18081,7 +18081,7 @@ "cvss": 5.3, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "epss": 0.82371, -"epss_pct": 0.99637, +"epss_pct": 0.99638, "name": "Eclipse Jetty - Information Disclosure", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-28164.yaml" @@ -18100,7 +18100,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-22", "epss": 0.08389, -"epss_pct": 0.94575, +"epss_pct": 0.94582, "name": "Joomla! ChronoForums 2.0.11 - Local File Inclusion", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-28377.yaml" @@ -18117,7 +18117,7 @@ "cvss": 9.8, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "epss": 0.71425, -"epss_pct": 0.99367, +"epss_pct": 0.99369, "name": "Microsoft Exchange - Pre-Auth SSRF / ACL Bypass (ProxyNotFound)", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-28480.yaml" @@ -18126,7 +18126,7 @@ "cvss": 9.8, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "epss": 0.36486, -"epss_pct": 0.98377, +"epss_pct": 0.9838, "name": "Microsoft Exchange - Pre-Auth SSRF / ACL Bypass (ProxyNotFound)", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-28481.yaml" @@ -18151,7 +18151,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "cwe": "CWE-704", "epss": 0.16657, -"epss_pct": 0.96795, +"epss_pct": 0.96799, "name": "Netmask NPM Package - Server-Side Request Forgery", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-28918.yaml" @@ -18161,7 +18161,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-312", "epss": 0.04155, -"epss_pct": 0.90153, +"epss_pct": 0.90166, "name": "Acexy Wireless-N WiFi Repeater REV 1.0 - Repeater Password Disclosure", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-28937.yaml" @@ -18171,7 +18171,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.05603, -"epss_pct": 0.92364, +"epss_pct": 0.92374, "name": "rConfig 3.9.6 - Local File Inclusion", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-29006.yaml" @@ -18226,7 +18226,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-306", "epss": 0.6663, -"epss_pct": 0.99231, +"epss_pct": 0.99233, "name": "Nacos <1.4.1 - Authentication Bypass", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-29442.yaml" @@ -18257,7 +18257,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N", "cwe": "CWE-79", "epss": 0.07935, -"epss_pct": 0.94319, +"epss_pct": 0.94327, "name": "Ghost CMS <=4.32 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-29484.yaml" @@ -18287,7 +18287,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-601", "epss": 0.1956, -"epss_pct": 0.9719, +"epss_pct": 0.97193, "name": "Prometheus - Open Redirect", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-29622.yaml" @@ -18297,7 +18297,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.09572, -"epss_pct": 0.95117, +"epss_pct": 0.95123, "name": "Adminer <=4.8.0 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-29625.yaml" @@ -18307,7 +18307,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.04278, -"epss_pct": 0.90409, +"epss_pct": 0.90422, "name": "Seo Panel 4.8.0 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-3002.yaml" @@ -18316,7 +18316,7 @@ "cvss": 7.5, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "epss": 0.03213, -"epss_pct": 0.87305, +"epss_pct": 0.8732, "name": "vsftpd < 3.0.3 - DoS", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2021/CVE-2021-30047.yaml" @@ -18326,7 +18326,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.0247, -"epss_pct": 0.83379, +"epss_pct": 0.83398, "name": "SysAid Technologies 20.3.64 b14 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-30049.yaml" @@ -18376,7 +18376,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01261, -"epss_pct": 0.67574, +"epss_pct": 0.67608, "name": "Php-mod/curl Library <2.3.2 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-30134.yaml" @@ -18386,7 +18386,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.04158, -"epss_pct": 0.9016, +"epss_pct": 0.90173, "name": "Sidekiq <=6.2.0 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-30151.yaml" @@ -18395,7 +18395,7 @@ "cvss": 7.5, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "epss": 0.63023, -"epss_pct": 0.99138, +"epss_pct": 0.99141, "name": "Intelbras WIN 300/WRN 342 - Credentials Disclosure", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-3017.yaml" @@ -18405,7 +18405,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.08548, -"epss_pct": 0.94669, +"epss_pct": 0.94676, "name": "ZEROF Web Server 1.0 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-30175.yaml" @@ -18415,7 +18415,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.19506, -"epss_pct": 0.97183, +"epss_pct": 0.97186, "name": "IPeakCMS 3.5 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-3018.yaml" @@ -18425,7 +18425,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.16622, -"epss_pct": 0.96789, +"epss_pct": 0.96793, "name": "ffay lanproxy Directory Traversal", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-3019.yaml" @@ -18435,7 +18435,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.00596, -"epss_pct": 0.46136, +"epss_pct": 0.46188, "name": "Dzzoffice 2.02.1 - Cross-Site Scripting", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-30203.yaml" @@ -18445,7 +18445,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.02721, -"epss_pct": 0.84999, +"epss_pct": 0.85017, "name": "Knowage Suite 7.3 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-30213.yaml" @@ -18455,7 +18455,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-94", "epss": 0.36632, -"epss_pct": 0.98386, +"epss_pct": 0.98388, "name": "VoipMonitor <24.61 - Remote Code Execution", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-30461.yaml" @@ -18483,7 +18483,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.18653, -"epss_pct": 0.97058, +"epss_pct": 0.97061, "name": "PrestaShop 1.7.7.0 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-3110.yaml" @@ -18513,7 +18513,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "cwe": "CWE-74", "epss": 0.18003, -"epss_pct": 0.96978, +"epss_pct": 0.96981, "name": "CHIYU TCP/IP Converter - Carriage Return Line Feed Injection", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-31249.yaml" @@ -18542,7 +18542,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.13029, -"epss_pct": 0.96062, +"epss_pct": 0.96067, "name": "CentOS Web Panel - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-31316.yaml" @@ -18552,7 +18552,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-78", "epss": 0.34062, -"epss_pct": 0.98282, +"epss_pct": 0.98284, "name": "CentOS Web Panel - OS Command Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-31324.yaml" @@ -18562,7 +18562,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.02231, -"epss_pct": 0.81539, +"epss_pct": 0.81561, "name": "Home Assistant HACS - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-3152.yaml" @@ -18572,7 +18572,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.07781, -"epss_pct": 0.94225, +"epss_pct": 0.94232, "name": "SIS Informatik REWE GO SP17 <7.7 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-31537.yaml" @@ -18591,7 +18591,7 @@ "cvss": 4.4, "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N", "epss": 0.01217, -"epss_pct": 0.66488, +"epss_pct": 0.66521, "name": "Akkadian Provisioning Manager - Information Disclosure", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-31581.yaml" @@ -18601,7 +18601,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.28207, -"epss_pct": 0.97974, +"epss_pct": 0.97976, "name": "BeyondTrust Secure Remote Access Base <=6.0.1 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-31589.yaml" @@ -18611,7 +18611,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-287", "epss": 0.51653, -"epss_pct": 0.98863, +"epss_pct": 0.98866, "name": "Hitachi Vantara Pentaho/Business Intelligence Server - Authentication Bypass", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-31602.yaml" @@ -18621,7 +18621,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.10509, -"epss_pct": 0.95433, +"epss_pct": 0.95439, "name": "WebCTRL OEM <= 6.5 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-31682.yaml" @@ -18666,7 +18666,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.03985, -"epss_pct": 0.89772, +"epss_pct": 0.89784, "name": "SysAid 20.4.74 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-31862.yaml" @@ -18686,7 +18686,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-862", "epss": 0.66433, -"epss_pct": 0.99224, +"epss_pct": 0.99226, "name": "Maian Cart <=3.8 - Remote Code Execution", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-32172.yaml" @@ -18696,7 +18696,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.18512, -"epss_pct": 0.97043, +"epss_pct": 0.97046, "name": "Node RED Dashboard <2.26.2 - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-3223.yaml" @@ -18724,7 +18724,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01128, -"epss_pct": 0.64075, +"epss_pct": 0.64114, "name": "Moodle 3.8-3.10.3 - Reflected XSS & Open Redirect", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-32478.yaml" @@ -18734,7 +18734,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-601", "epss": 0.03289, -"epss_pct": 0.87617, +"epss_pct": 0.87632, "name": "Python Flask-Security - Open Redirect", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-32618.yaml" @@ -18753,7 +18753,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-22", "epss": 0.69934, -"epss_pct": 0.99322, +"epss_pct": 0.99324, "name": "elFinder 2.1.58 - Remote Code Execution", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-32682.yaml" @@ -18763,7 +18763,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-89", "epss": 0.17227, -"epss_pct": 0.96878, +"epss_pct": 0.96882, "name": "WooCommerce Blocks 2.5 to 5.5 - Unauthenticated SQL Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-32789.yaml" @@ -18772,7 +18772,7 @@ "cvss": 8.8, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "epss": 0.59844, -"epss_pct": 0.99063, +"epss_pct": 0.99065, "name": "Nodejs Squirrelly - Remote Code Execution", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-32819.yaml" @@ -18781,7 +18781,7 @@ "cvss": 8.6, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N", "epss": 0.17988, -"epss_pct": 0.96976, +"epss_pct": 0.96979, "name": "Express-handlebars - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-32820.yaml" @@ -18791,7 +18791,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "cwe": "CWE-79", "epss": 0.03125, -"epss_pct": 0.8694, +"epss_pct": 0.86955, "name": "Erxes <0.23.0 - Cross-Site Scripting", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-32853.yaml" @@ -18801,7 +18801,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-502", "epss": 0.51332, -"epss_pct": 0.98855, +"epss_pct": 0.98858, "name": "Zoho ManageEngine OpManager < 12.5.329 - Remote Code Execution", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-3287.yaml" @@ -18811,7 +18811,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-22", "epss": 0.20658, -"epss_pct": 0.97348, +"epss_pct": 0.97351, "name": "emlog 5.3.1 Path Disclosure", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-3293.yaml" @@ -18821,7 +18821,7 @@ "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-287", "epss": 0.20514, -"epss_pct": 0.97331, +"epss_pct": 0.97334, "name": "Zyxel NBG2105 V1.00(AAGU.2)C0 - Authentication Bypass", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-3297.yaml" @@ -18861,7 +18861,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-78", "epss": 0.17446, -"epss_pct": 0.96906, +"epss_pct": 0.9691, "name": "RaspAP <=2.6.5 - Remote Command Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-33357.yaml" @@ -18880,7 +18880,7 @@ "cvss": 7.5, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "epss": 0.12307, -"epss_pct": 0.95901, +"epss_pct": 0.95905, "name": "Boa 0.94.13 - Information Disclosure", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-33558.yaml" @@ -18890,7 +18890,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-88", "epss": 0.72143, -"epss_pct": 0.99387, +"epss_pct": 0.99389, "name": "Ruby Dragonfly <1.4.0 - Remote Code Execution", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-33564.yaml" @@ -18900,7 +18900,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "cwe": "CWE-918", "epss": 0.69075, -"epss_pct": 0.993, +"epss_pct": 0.99302, "name": "SAP NetWeaver Development Infrastructure - Server Side Request Forgery", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-33690.yaml" @@ -18910,7 +18910,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-22", "epss": 0.14424, -"epss_pct": 0.96367, +"epss_pct": 0.96372, "name": "Rstudio Shiny Server <1.5.16 - Local File Inclusion", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-3374.yaml" @@ -18929,7 +18929,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.08, -"epss_pct": 0.94352, +"epss_pct": 0.9436, "name": "npm ansi_up v4 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-3377.yaml" @@ -18949,7 +18949,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.16139, -"epss_pct": 0.96697, +"epss_pct": 0.967, "name": "Cartadis Gespage 8.2.1 - Directory Traversal", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-33807.yaml" @@ -18959,7 +18959,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.03189, -"epss_pct": 0.87193, +"epss_pct": 0.87208, "name": "Drupal 7 CKEditor XSS", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-33829.yaml" @@ -18969,7 +18969,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01318, -"epss_pct": 0.68829, +"epss_pct": 0.68865, "name": "WordPress Customize Login Image <3.5.3 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-33851.yaml" @@ -18979,7 +18979,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.09972, -"epss_pct": 0.95262, +"epss_pct": 0.95268, "name": "Accela Civic Platform <=21.1 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-33904.yaml" @@ -18989,7 +18989,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.16181, -"epss_pct": 0.96705, +"epss_pct": 0.96708, "name": "Chamilo model.ajax.php - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-34187.yaml" @@ -18999,7 +18999,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.09996, -"epss_pct": 0.95269, +"epss_pct": 0.95275, "name": "Accela Civic Platform <=21.1 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-34370.yaml" @@ -19009,7 +19009,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-434", "epss": 0.57982, -"epss_pct": 0.99019, +"epss_pct": 0.99021, "name": "Eclipse BIRT Viewer - Remote Code Execution", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-34427.yaml" @@ -19047,7 +19047,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-269", "epss": 0.0412, -"epss_pct": 0.90072, +"epss_pct": 0.90085, "name": "WordPress ProfilePress <= 3.1.3 - Privilege Escalation", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-34622.yaml" @@ -19057,7 +19057,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-434", "epss": 0.06744, -"epss_pct": 0.93488, +"epss_pct": 0.93497, "name": "WordPress ProfilePress 3.0-3.1.3 - Arbitrary File Upload", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-34624.yaml" @@ -19067,7 +19067,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01572, -"epss_pct": 0.73666, +"epss_pct": 0.73696, "name": "GTranslate < 2.8.65 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-34630.yaml" @@ -19077,7 +19077,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.02313, -"epss_pct": 0.82212, +"epss_pct": 0.82233, "name": "WordPress Securimage-WP-Fixed <=3.5.4 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-34640.yaml" @@ -19087,7 +19087,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.0235, -"epss_pct": 0.82509, +"epss_pct": 0.82531, "name": "WordPress Skaut Bazar <1.3.3 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-34643.yaml" @@ -19097,7 +19097,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.26823, -"epss_pct": 0.97887, +"epss_pct": 0.97889, "name": "FAUST iServer 9.0.018.018.4 - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-34805.yaml" @@ -19107,7 +19107,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.44369, -"epss_pct": 0.98667, +"epss_pct": 0.9867, "name": "Django QuerySet.order_by - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/dast/cves/2021/CVE-2021-35042.yaml" @@ -19132,7 +19132,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.12804, -"epss_pct": 0.96002, +"epss_pct": 0.96007, "name": "SolarWinds Serv-U 15.3 - Directory Traversal", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-35250.yaml" @@ -19142,7 +19142,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.03436, -"epss_pct": 0.88129, +"epss_pct": 0.88142, "name": "MaxSite CMS > V106 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-35265.yaml" @@ -19152,7 +19152,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.05621, -"epss_pct": 0.92398, +"epss_pct": 0.92409, "name": "Bludit 3.13.1 - Cross Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-35323.yaml" @@ -19162,7 +19162,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-1188", "epss": 0.10107, -"epss_pct": 0.95306, +"epss_pct": 0.95312, "name": "Tieline IP Audio Gateway <=2.6.4.8 - Unauthorized Remote Admin Panel Access", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-35336.yaml" @@ -19207,8 +19207,8 @@ "cvss": 6.1, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", -"epss": 0.02628, -"epss_pct": 0.84428, +"epss": 0.02779, +"epss_pct": 0.85385, "name": "Thruk 2.40-2 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-35488.yaml" @@ -19227,7 +19227,7 @@ "cvss": 8.8, "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "epss": 0.60158, -"epss_pct": 0.99068, +"epss_pct": 0.9907, "name": "Motorola Baby Monitors - Remote Command Execution", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-3577.yaml" @@ -19277,7 +19277,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-601", "epss": 0.26792, -"epss_pct": 0.97884, +"epss_pct": 0.97887, "name": "Nova noVNC - Open Redirect", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-3654.yaml" @@ -19287,7 +19287,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-601", "epss": 0.01588, -"epss_pct": 0.73887, +"epss_pct": 0.73917, "name": "IceWarp Mail Server - Open Redirect", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-36580.yaml" @@ -19297,7 +19297,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.00705, -"epss_pct": 0.50842, +"epss_pct": 0.50889, "name": "KodExplorer - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-36646.yaml" @@ -19307,7 +19307,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-89", "epss": 0.15415, -"epss_pct": 0.96542, +"epss_pct": 0.96546, "name": "PrestaHome Blog for PrestaShop <1.7.8 - SQL Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-36748.yaml" @@ -19327,7 +19327,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "cwe": "CWE-119", "epss": 0.64857, -"epss_pct": 0.99187, +"epss_pct": 0.99189, "name": "PowerDNS Authoritative Server - Denial of Service", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2021/CVE-2021-36754.yaml" @@ -19337,7 +19337,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01225, -"epss_pct": 0.66734, +"epss_pct": 0.66767, "name": "WordPress iQ Block Country <=1.2.11 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-36873.yaml" @@ -19347,7 +19347,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-284", "epss": 0.0674, -"epss_pct": 0.93481, +"epss_pct": 0.9349, "name": "WordPress Image Hover Ultimate - Unauthenticated Settings Update", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-36888.yaml" @@ -19357,7 +19357,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.03186, -"epss_pct": 0.87185, +"epss_pct": 0.872, "name": "QSAN Storage Manager <3.3.3 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-37216.yaml" @@ -19367,7 +19367,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.06535, -"epss_pct": 0.93311, +"epss_pct": 0.93319, "name": "KevinLAB BEMS 1.0 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-37291.yaml" @@ -19376,7 +19376,7 @@ "cvss": 7.2, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "epss": 0.0655, -"epss_pct": 0.93324, +"epss_pct": 0.93332, "name": "KevinLAB BEMS (Building Energy Management System) - Backdoor Account", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-37292.yaml" @@ -19386,7 +19386,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-732", "epss": 0.04013, -"epss_pct": 0.89839, +"epss_pct": 0.89851, "name": "Jeecg Boot <= 2.4.5 - Information Disclosure", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-37304.yaml" @@ -19396,7 +19396,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-732", "epss": 0.0352, -"epss_pct": 0.88401, +"epss_pct": 0.88416, "name": "Jeecg Boot <= 2.4.5 - Sensitive Information Disclosure", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-37305.yaml" @@ -19416,7 +19416,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.02934, -"epss_pct": 0.86133, +"epss_pct": 0.8615, "name": "Zoho ManageEngine ADSelfService Plus <=6103 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-37416.yaml" @@ -19426,7 +19426,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.74489, -"epss_pct": 0.99455, +"epss_pct": 0.99457, "name": "PrestaShop SmartBlog <4.0.6 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-37538.yaml" @@ -19436,7 +19436,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.03398, -"epss_pct": 0.87997, +"epss_pct": 0.8801, "name": "Tiny Java Web Server - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-37573.yaml" @@ -19446,7 +19446,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-287", "epss": 0.40058, -"epss_pct": 0.98528, +"epss_pct": 0.9853, "name": "Apache ShenYu Admin JWT - Authentication Bypass", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-37580.yaml" @@ -19456,7 +19456,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-89", "epss": 0.32662, -"epss_pct": 0.98218, +"epss_pct": 0.98221, "name": "Virtua Software Cobranca <12R - Blind SQL Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-37589.yaml" @@ -19466,7 +19466,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-863", "epss": 0.0235, -"epss_pct": 0.82505, +"epss_pct": 0.82526, "name": "WP Cerber < 8.9.3 - Broken Access Control", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-37598.yaml" @@ -19475,7 +19475,7 @@ "cvss": 4.3, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "epss": 0.06132, -"epss_pct": 0.92942, +"epss_pct": 0.92951, "name": "phpfastcache - phpinfo Resource Exposure", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-37704.yaml" @@ -19485,7 +19485,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.04878, -"epss_pct": 0.91439, +"epss_pct": 0.91451, "name": "Hotel Druid 3.0.2 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-37833.yaml" @@ -19500,7 +19500,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.11733, -"epss_pct": 0.95764, +"epss_pct": 0.95769, "name": "Wipro Holmes Orchestrator 20.4.1 - Arbitrary File Download", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-38146.yaml" @@ -19520,7 +19520,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-732", "epss": 0.04, -"epss_pct": 0.89809, +"epss_pct": 0.8982, "name": "Canon Devices - Authentication Bypass in Catwalk Server", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-38154.yaml" @@ -19540,7 +19540,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-80", "epss": 0.01812, -"epss_pct": 0.77106, +"epss_pct": 0.77133, "name": "Gnuboard 5 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-3831.yaml" @@ -19549,7 +19549,7 @@ "cvss": 5.3, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "epss": 0.28961, -"epss_pct": 0.98021, +"epss_pct": 0.98023, "name": "WordPress Redux Framework <=4.2.11 - Information Disclosure", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-38314.yaml" @@ -19578,7 +19578,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.06929, -"epss_pct": 0.93636, +"epss_pct": 0.93643, "name": "Cyberoam NetGenie Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-38702.yaml" @@ -19588,7 +19588,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.03521, -"epss_pct": 0.88404, +"epss_pct": 0.88418, "name": "ClinicCases 7.3.3 Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-38704.yaml" @@ -19598,7 +19598,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "cwe": "CWE-116", "epss": 0.02468, -"epss_pct": 0.8336, +"epss_pct": 0.83379, "name": "ExponentCMS <= 2.6 - Host Header Injection", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-38751.yaml" @@ -19608,7 +19608,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H", "cwe": "CWE-434", "epss": 0.16118, -"epss_pct": 0.96692, +"epss_pct": 0.96696, "name": "XStream 1.4.18 - Remote Code Execution", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-39141.yaml" @@ -19627,7 +19627,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H", "cwe": "CWE-434", "epss": 0.143, -"epss_pct": 0.96342, +"epss_pct": 0.96347, "name": "XStream 1.4.18 - Arbitrary Code Execution", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-39146.yaml" @@ -19637,7 +19637,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H", "cwe": "CWE-502", "epss": 0.11377, -"epss_pct": 0.95683, +"epss_pct": 0.95688, "name": "XStream <1.4.18 - Server-Side Request Forgery", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-39152.yaml" @@ -19647,7 +19647,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-287", "epss": 0.09752, -"epss_pct": 0.95181, +"epss_pct": 0.95187, "name": "Cachet <=2.3.18 - SQL Injection", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-39165.yaml" @@ -19684,7 +19684,7 @@ "cvss": 5.3, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "epss": 0.04699, -"epss_pct": 0.91165, +"epss_pct": 0.91176, "name": "GLPI 9.2/<9.5.6 - Information Disclosure", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-39211.yaml" @@ -19714,7 +19714,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.65763, -"epss_pct": 0.99209, +"epss_pct": 0.99211, "name": "WordPress DZS Zoomsounds <=6.50 - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-39316.yaml" @@ -19724,7 +19724,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.02324, -"epss_pct": 0.82297, +"epss_pct": 0.82319, "name": "WordPress Under Construction <1.19 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-39320.yaml" @@ -19734,7 +19734,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.02349, -"epss_pct": 0.82499, +"epss_pct": 0.8252, "name": "WordPress Easy Social Icons Plugin < 3.0.9 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-39322.yaml" @@ -19752,7 +19752,7 @@ "cvss": 8.2, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N", "epss": 0.21929, -"epss_pct": 0.97482, +"epss_pct": 0.97485, "name": "OptinMonster Plugin < 2.6.5 - Unprotected REST-API", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-39341.yaml" @@ -19762,7 +19762,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.02248, -"epss_pct": 0.81672, +"epss_pct": 0.81693, "name": "FV Flowplayer Video Player WordPress plugin - Authenticated Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-39350.yaml" @@ -19772,7 +19772,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.00914, -"epss_pct": 0.57652, +"epss_pct": 0.57698, "name": "Hospital Management System 1.0 - Cross-Site Scripting", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-39411.yaml" @@ -19781,7 +19781,7 @@ "cvss": 7.5, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "epss": 0.08687, -"epss_pct": 0.94744, +"epss_pct": 0.94751, "name": "BIQS IT Biqs-drive v1.83 Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-39433.yaml" @@ -19791,7 +19791,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-601", "epss": 0.03588, -"epss_pct": 0.88601, +"epss_pct": 0.88615, "name": "EyouCMS 1.5.4 Open Redirect", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-39501.yaml" @@ -19801,7 +19801,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-552", "epss": 0.07443, -"epss_pct": 0.94017, +"epss_pct": 0.94024, "name": "Reolink E1 Zoom Camera <=3.0.0.716 - Private Key Disclosure", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-40149.yaml" @@ -19811,7 +19811,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-552", "epss": 0.03729, -"epss_pct": 0.8904, +"epss_pct": 0.89053, "name": "Reolink E1 Zoom Camera <=3.0.0.716 - Information Disclosure", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-40150.yaml" @@ -19825,7 +19825,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01047, -"epss_pct": 0.6184, +"epss_pct": 0.6188, "name": "IRTS OP5 Monitor - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-40272.yaml" @@ -19835,7 +19835,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-94", "epss": 0.86829, -"epss_pct": 0.9973, +"epss_pct": 0.99731, "name": "Cobbler <3.3.0 - Remote Code Execution", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-40323.yaml" @@ -19863,7 +19863,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "cwe": "CWE-434", "epss": 0.04285, -"epss_pct": 0.90419, +"epss_pct": 0.90431, "name": "Pure-FTPd 1.0.23 < 1.0.50 - Arbitrary File Upload", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2021/CVE-2021-40524.yaml" @@ -19883,7 +19883,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.03156, -"epss_pct": 0.87066, +"epss_pct": 0.8708, "name": "Opensis-Classic 8.0 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-40542.yaml" @@ -19893,7 +19893,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.17945, -"epss_pct": 0.96968, +"epss_pct": 0.96972, "name": "OS4Ed OpenSIS Community 8.0 - Local File Inclusion", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-40651.yaml" @@ -19913,7 +19913,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.05063, -"epss_pct": 0.91717, +"epss_pct": 0.91727, "name": "IND780 - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-40661.yaml" @@ -19923,7 +19923,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-287", "epss": 0.07, -"epss_pct": 0.937, +"epss_pct": 0.93707, "name": "RegistrationMagic <= 5.0.1.7 - Authentication Bypass", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-4073.yaml" @@ -19933,7 +19933,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-918", "epss": 0.19259, -"epss_pct": 0.97142, +"epss_pct": 0.97145, "name": "Geoserver - Server-Side Request Forgery", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-40822.yaml" @@ -19943,7 +19943,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-706", "epss": 0.50125, -"epss_pct": 0.98821, +"epss_pct": 0.98823, "name": "Auerswald COMfortel 1400/2600/3600 IP - Authentication Bypass", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-40856.yaml" @@ -19952,7 +19952,7 @@ "cvss": 9.8, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "epss": 0.71979, -"epss_pct": 0.99382, +"epss_pct": 0.99384, "name": "Auerswald COMpact 5500R 7.8A and 8.0B Devices Backdoor", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-40859.yaml" @@ -19962,7 +19962,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.09071, -"epss_pct": 0.94921, +"epss_pct": 0.94927, "name": "Cloudron 6.2 Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-40868.yaml" @@ -19982,7 +19982,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-425", "epss": 0.48417, -"epss_pct": 0.98779, +"epss_pct": 0.9878, "name": "Gurock TestRail Application files.md5 Exposure", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-40875.yaml" @@ -20002,7 +20002,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-22", "epss": 0.0992, -"epss_pct": 0.95247, +"epss_pct": 0.95253, "name": "Galera WebTemplate 1.0 Directory Traversal", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-40960.yaml" @@ -20012,7 +20012,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.02239, -"epss_pct": 0.81612, +"epss_pct": 0.81634, "name": "Spotweb <= 1.5.1 - Cross Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-40968.yaml" @@ -20022,7 +20022,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.02239, -"epss_pct": 0.81612, +"epss_pct": 0.81634, "name": "Spotweb <= 1.5.1 - Cross Site Scripting (Reflected)", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-40969.yaml" @@ -20032,7 +20032,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.02239, -"epss_pct": 0.81611, +"epss_pct": 0.81633, "name": "Spotweb <= 1.5.1 - Cross Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-40970.yaml" @@ -20042,7 +20042,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.02239, -"epss_pct": 0.81611, +"epss_pct": 0.81634, "name": "Spotweb <= 1.5.1 - Cross Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-40971.yaml" @@ -20052,7 +20052,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.0225, -"epss_pct": 0.81685, +"epss_pct": 0.81706, "name": "Spotweb <= 1.5.1 - Cross Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-40972.yaml" @@ -20062,7 +20062,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.0225, -"epss_pct": 0.81685, +"epss_pct": 0.81706, "name": "Spotweb <= 1.5.1 - Cross Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-40973.yaml" @@ -20072,7 +20072,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.15103, -"epss_pct": 0.96487, +"epss_pct": 0.96491, "name": "MKdocs 1.2.2 - Directory Traversal", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-40978.yaml" @@ -20100,7 +20100,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N", "cwe": "CWE-1188", "epss": 0.08017, -"epss_pct": 0.9436, +"epss_pct": 0.94367, "name": "Redash Setup Configuration - Default Secrets Disclosure", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-41192.yaml" @@ -20110,7 +20110,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-306", "epss": 0.48414, -"epss_pct": 0.98777, +"epss_pct": 0.9878, "name": "MinIO Operator Console Authentication Bypass", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-41266.yaml" @@ -20149,7 +20149,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.20623, -"epss_pct": 0.97341, +"epss_pct": 0.97345, "name": "ECOA Building Automation System - Arbitrary File Retrieval", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-41293.yaml" @@ -20168,7 +20168,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.52926, -"epss_pct": 0.98895, +"epss_pct": 0.98897, "name": "Payara Micro Community 5.2021.6 Directory Traversal", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-41381.yaml" @@ -20178,7 +20178,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-502", "epss": 0.08517, -"epss_pct": 0.94651, +"epss_pct": 0.94658, "name": "QVIS NVR/DVR - Remote Code Execution", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-41419.yaml" @@ -20188,7 +20188,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01711, -"epss_pct": 0.7575, +"epss_pct": 0.75777, "name": "FlatPress 1.2.1 - Stored Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-41432.yaml" @@ -20198,7 +20198,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-89", "epss": 0.06429, -"epss_pct": 0.93215, +"epss_pct": 0.93223, "name": "ECShop 4.1.0 - SQL Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-41460.yaml" @@ -20208,7 +20208,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.03601, -"epss_pct": 0.88645, +"epss_pct": 0.88659, "name": "JustWriting - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-41467.yaml" @@ -20218,7 +20218,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-829", "epss": 0.07845, -"epss_pct": 0.94263, +"epss_pct": 0.9427, "name": "SAS/Internet 9.4 1520 - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-41569.yaml" @@ -20228,7 +20228,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-89", "epss": 0.10169, -"epss_pct": 0.95323, +"epss_pct": 0.9533, "name": "PuneethReddyHC action.php SQL Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-41648.yaml" @@ -20238,7 +20238,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.5177, -"epss_pct": 0.98865, +"epss_pct": 0.98867, "name": "PuneethReddyHC Online Shopping System homeaction.php SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-41649.yaml" @@ -20255,7 +20255,7 @@ }, "CVE-2021-41691": { "epss": 0.01792, -"epss_pct": 0.76846, +"epss_pct": 0.76873, "name": "openSIS Student Information System 8.0 SQL Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-41691.yaml" @@ -20265,7 +20265,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-94", "epss": 0.18122, -"epss_pct": 0.9699, +"epss_pct": 0.96994, "name": "CraftCMS SEOmatic - Server-Side Template Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-41749.yaml" @@ -20285,7 +20285,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-601", "epss": 0.12056, -"epss_pct": 0.95843, +"epss_pct": 0.95848, "name": "PlaceOS 1.2109.1 - Open Redirection", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-41826.yaml" @@ -20295,7 +20295,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.09912, -"epss_pct": 0.9524, +"epss_pct": 0.95246, "name": "i-Panel Administration System 2.0 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-41878.yaml" @@ -20315,7 +20315,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.77892, -"epss_pct": 0.99537, +"epss_pct": 0.99538, "name": "Resourcespace - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-41951.yaml" @@ -20335,7 +20335,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.22224, -"epss_pct": 0.97507, +"epss_pct": 0.9751, "name": "SAP Knowledge Warehouse <=7.5.0 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-42063.yaml" @@ -20345,7 +20345,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-78", "epss": 0.69882, -"epss_pct": 0.99321, +"epss_pct": 0.99323, "name": "Visual Tools DVR VX16 4.2.28.0 - Unauthenticated OS Command Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-42071.yaml" @@ -20355,7 +20355,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-863", "epss": 0.10066, -"epss_pct": 0.95291, +"epss_pct": 0.95297, "name": "KONGA 0.14.9 - Privilege Escalation", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-42192.yaml" @@ -20384,7 +20384,7 @@ "cvss": 7.5, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "epss": 0.03839, -"epss_pct": 0.8937, +"epss_pct": 0.89384, "name": "WP DSGVO Tools (GDPR) <= 3.1.23 - Unauthenticated Arbitrary Post Deletion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-42359.yaml" @@ -20394,7 +20394,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.02671, -"epss_pct": 0.84708, +"epss_pct": 0.84727, "name": "NetBiblio WebOPAC - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-42551.yaml" @@ -20404,7 +20404,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.05832, -"epss_pct": 0.92637, +"epss_pct": 0.92646, "name": "myfactory FMS - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-42565.yaml" @@ -20414,7 +20414,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.05832, -"epss_pct": 0.92637, +"epss_pct": 0.92646, "name": "myfactory FMS - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-42566.yaml" @@ -20424,7 +20424,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.08064, -"epss_pct": 0.94386, +"epss_pct": 0.94393, "name": "Apereo CAS Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-42567.yaml" @@ -20443,7 +20443,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N", "cwe": "CWE-79", "epss": 0.03852, -"epss_pct": 0.89402, +"epss_pct": 0.89415, "name": "Sourcecodester Online Event Booking and Reservation System 2.3.0 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-42663.yaml" @@ -20453,7 +20453,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.16046, -"epss_pct": 0.96682, +"epss_pct": 0.96686, "name": "Online Event Booking and Reservation System 2.3.0 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-42667.yaml" @@ -20468,7 +20468,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-287", "epss": 0.44291, -"epss_pct": 0.98665, +"epss_pct": 0.98667, "name": "TOTOLINK EX1200T 4.1.2cu.5215 - Authentication Bypass", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-42887.yaml" @@ -20478,7 +20478,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.12936, -"epss_pct": 0.96032, +"epss_pct": 0.96037, "name": "Fortinet FortiMail 7.0.1 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-43062.yaml" @@ -20496,7 +20496,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-200", "epss": 0.28039, -"epss_pct": 0.97963, +"epss_pct": 0.97966, "name": "Pre-Auth Takeover of Build Pipelines in GoCD", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-43287.yaml" @@ -20506,7 +20506,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-434", "epss": 0.42781, -"epss_pct": 0.98618, +"epss_pct": 0.98619, "name": "Studio-42 elFinder <2.1.60 - Arbitrary File Upload", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-43421.yaml" @@ -20516,7 +20516,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.09052, -"epss_pct": 0.94915, +"epss_pct": 0.94921, "name": "AlquistManager Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-43495.yaml" @@ -20526,7 +20526,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.15689, -"epss_pct": 0.96611, +"epss_pct": 0.96615, "name": "Clustering Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-43496.yaml" @@ -20536,7 +20536,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.07515, -"epss_pct": 0.94058, +"epss_pct": 0.94064, "name": "Sourcecodester Simple Client Management System 1.0 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-43510.yaml" @@ -20546,7 +20546,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.02422, -"epss_pct": 0.83033, +"epss_pct": 0.83054, "name": "Atmail 6.5.0 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-43574.yaml" @@ -20556,7 +20556,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.02573, -"epss_pct": 0.84077, +"epss_pct": 0.84096, "name": "Spotweb <= 1.5.1 - Cross Site Scripting (Reflected)", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-43725.yaml" @@ -20566,7 +20566,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.10728, -"epss_pct": 0.955, +"epss_pct": 0.95506, "name": "kkFileview v4.0.0 - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-43734.yaml" @@ -20576,7 +20576,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-862", "epss": 0.16408, -"epss_pct": 0.96751, +"epss_pct": 0.96755, "name": "WordPress Automatic Plugin - Unauthenticated Options Change", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-4374.yaml" @@ -20605,7 +20605,7 @@ "cvss": 9.8, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "epss": 0.04528, -"epss_pct": 0.90872, +"epss_pct": 0.90883, "name": "Pinterest Automatic < 4.14.4 - Unauthenticated Arbitrary Options Update", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-4380.yaml" @@ -20615,7 +20615,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.04996, -"epss_pct": 0.91622, +"epss_pct": 0.91633, "name": "Admidio - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-43810.yaml" @@ -20625,7 +20625,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.03794, -"epss_pct": 0.89233, +"epss_pct": 0.89246, "name": "Gradio < 2.5.0 - Arbitrary File Read", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-43831.yaml" @@ -20653,7 +20653,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.14115, -"epss_pct": 0.96302, +"epss_pct": 0.96306, "name": "Caucho Resin >=4.0.52 <=4.0.56 - Directory traversal", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-44138.yaml" @@ -20663,7 +20663,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-918", "epss": 0.05643, -"epss_pct": 0.9242, +"epss_pct": 0.9243, "name": "Alibaba Sentinel - Server-side request forgery (SSRF)", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-44139.yaml" @@ -20698,7 +20698,7 @@ "cvss": 7.5, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "epss": 0.07382, -"epss_pct": 0.9398, +"epss_pct": 0.93987, "name": "WAVLINK AC1200 - Information Disclosure", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-44260.yaml" @@ -20708,7 +20708,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-434", "epss": 0.06646, -"epss_pct": 0.93395, +"epss_pct": 0.93404, "name": "3DPrint Lite < 1.9.1.5 - Arbitrary File Upload", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-4436.yaml" @@ -20718,7 +20718,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.50641, -"epss_pct": 0.98834, +"epss_pct": 0.98837, "name": "Rosario Student Information System Unauthenticated SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-44427.yaml" @@ -20728,7 +20728,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-522", "epss": 0.07863, -"epss_pct": 0.94275, +"epss_pct": 0.94282, "name": "Apache Superset <=1.3.2 - Default Login", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-44451.yaml" @@ -20738,7 +20738,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "cwe": "CWE-862", "epss": 0.01381, -"epss_pct": 0.70224, +"epss_pct": 0.70255, "name": "Kaswara Modern VC Addons <= 3.0.1 - Missing Authorization", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-4448.yaml" @@ -20748,7 +20748,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-434", "epss": 0.05439, -"epss_pct": 0.92162, +"epss_pct": 0.92171, "name": "ZoomSounds Plugin - Unauthenticated Arbitrary File Upload", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-4449.yaml" @@ -20767,7 +20767,7 @@ "cvss": 9.1, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H", "epss": 0.55006, -"epss_pct": 0.98953, +"epss_pct": 0.98955, "name": "Apache Cassandra Load UDF RCE", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2021/CVE-2021-44521.yaml" @@ -20777,7 +20777,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-601", "epss": 0.04182, -"epss_pct": 0.90212, +"epss_pct": 0.90224, "name": "Open Redirect in Host Authorization Middleware", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-44528.yaml" @@ -20797,7 +20797,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-434", "epss": 0.0319, -"epss_pct": 0.87202, +"epss_pct": 0.87217, "name": "Employee Records System 1.0 - Unauthenticated File Upload RCE", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-4462.yaml" @@ -20806,7 +20806,7 @@ "cvss": 7.5, "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "epss": 0.01452, -"epss_pct": 0.71548, +"epss_pct": 0.71577, "name": "Longjing Technology BEMS API 1.21 - Unauthenticated Arbitrary File Download", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-4463.yaml" @@ -20816,7 +20816,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-203", "epss": 0.22966, -"epss_pct": 0.97586, +"epss_pct": 0.97589, "name": "Thinfinity VirtualUI User Enumeration", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-44848.yaml" @@ -20826,7 +20826,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.01927, -"epss_pct": 0.78532, +"epss_pct": 0.78557, "name": "Oliver 5 Library Server <8.00.008.053 - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-45027.yaml" @@ -20836,7 +20836,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.33133, -"epss_pct": 0.98241, +"epss_pct": 0.98245, "name": "HD-Network Realtime Monitoring System 2.0 - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-45043.yaml" @@ -20856,7 +20856,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-74", "epss": 0.39973, -"epss_pct": 0.98523, +"epss_pct": 0.98525, "name": "Thinfinity Iframe Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-45092.yaml" @@ -20866,7 +20866,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-306", "epss": 0.85943, -"epss_pct": 0.99713, +"epss_pct": 0.99714, "name": "Apache APISIX Dashboard <2.10.1 - API Unauthorized Access", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-45232.yaml" @@ -20876,7 +20876,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-601", "epss": 0.00948, -"epss_pct": 0.58743, +"epss_pct": 0.58788, "name": "Gitea < 1.4.3 - Open Redirect", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-45328.yaml" @@ -20886,7 +20886,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.0253, -"epss_pct": 0.83792, +"epss_pct": 0.83812, "name": "AppCMS - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-45380.yaml" @@ -20906,7 +20906,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-200", "epss": 0.18957, -"epss_pct": 0.97097, +"epss_pct": 0.971, "name": "Emerson Dixell XWEB-500 - Arbitrary File Write", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-45420.yaml" @@ -20916,7 +20916,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.03241, -"epss_pct": 0.87422, +"epss_pct": 0.87437, "name": "Reprise License Manager 14.2 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-45422.yaml" @@ -20926,7 +20926,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-639", "epss": 0.56931, -"epss_pct": 0.98995, +"epss_pct": 0.98997, "name": "Telesquare TLR-2005KSH 1.0.0 - Arbitrary File Upload", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-45428.yaml" @@ -20936,7 +20936,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-862", "epss": 0.70745, -"epss_pct": 0.99349, +"epss_pct": 0.9935, "name": "Control Web Panel (CWP) - File Inclusion", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-45467.yaml" @@ -20946,7 +20946,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-89", "epss": 0.04519, -"epss_pct": 0.90852, +"epss_pct": 0.90864, "name": "Slims9 Bulian 9.4.2 - SQL Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-45793.yaml" @@ -20956,7 +20956,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-89", "epss": 0.02454, -"epss_pct": 0.8327, +"epss_pct": 0.8329, "name": "osTicket 1.15.x - SQL Injection", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-45811.yaml" @@ -20966,7 +20966,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-22", "epss": 0.208, -"epss_pct": 0.9737, +"epss_pct": 0.97373, "name": "Pascom CPS Server-Side Request Forgery", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-45967.yaml" @@ -20976,7 +20976,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-918", "epss": 0.10385, -"epss_pct": 0.95396, +"epss_pct": 0.95402, "name": "Pascom CPS - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-45968.yaml" @@ -20986,7 +20986,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.02915, -"epss_pct": 0.86051, +"epss_pct": 0.86068, "name": "Sourcecodester Car Rental Management System 1.0 - Stored Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-46005.yaml" @@ -20996,7 +20996,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.02736, -"epss_pct": 0.85087, +"epss_pct": 0.85105, "name": "Vehicle Service Management System - Stored Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-46068.yaml" @@ -21006,7 +21006,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.02736, -"epss_pct": 0.85088, +"epss_pct": 0.85106, "name": "Vehicle Service Management System 1.0 - Stored Cross Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-46069.yaml" @@ -21016,7 +21016,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.02736, -"epss_pct": 0.85088, +"epss_pct": 0.85105, "name": "ehicle Service Management System 1.0 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-46071.yaml" @@ -21026,7 +21026,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.02736, -"epss_pct": 0.85087, +"epss_pct": 0.85105, "name": "Vehicle Service Management System 1.0 - Stored Cross Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-46072.yaml" @@ -21036,7 +21036,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.02759, -"epss_pct": 0.85232, +"epss_pct": 0.85248, "name": "Vehicle Service Management System 1.0 - Cross Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-46073.yaml" @@ -21045,8 +21045,8 @@ "cvss": 7.5, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", -"epss": 0.04231, -"epss_pct": 0.90315, +"epss": 0.0475, +"epss_pct": 0.91257, "name": "webp_server_go 0.4.0 - Path Traversal", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-46104.yaml" @@ -21056,7 +21056,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-918", "epss": 0.07408, -"epss_pct": 0.93997, +"epss_pct": 0.94003, "name": "Ligeo Archives Ligeo Basics - Server Side Request Forgery", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-46107.yaml" @@ -21066,7 +21066,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-306", "epss": 0.04305, -"epss_pct": 0.90457, +"epss_pct": 0.90469, "name": "AntD Admin - Sensitive Information Disclosure", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-46371.yaml" @@ -21076,7 +21076,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-601", "epss": 0.15701, -"epss_pct": 0.96614, +"epss_pct": 0.96618, "name": "D-Link DIR850 ET850-1.08TRb03 - Open Redirect", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-46379.yaml" @@ -21086,7 +21086,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.57984, -"epss_pct": 0.99019, +"epss_pct": 0.99022, "name": "D-Link DAP-1620 - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-46381.yaml" @@ -21096,7 +21096,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.21028, -"epss_pct": 0.97397, +"epss_pct": 0.974, "name": "Zyxel ZyWALL 2 Plus Internet Security Appliance - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-46387.yaml" @@ -21106,7 +21106,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.59753, -"epss_pct": 0.99061, +"epss_pct": 0.99063, "name": "Franklin Fueling Systems Colibri Controller Module 1.8.19.8580 - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-46417.yaml" @@ -21115,7 +21115,7 @@ "cvss": 7.5, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "epss": 0.23945, -"epss_pct": 0.97671, +"epss_pct": 0.97673, "name": "Telesquare TLR-2855KS6 - Arbitrary File Creation", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-46418.yaml" @@ -21144,7 +21144,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H", "cwe": "CWE-306", "epss": 0.36459, -"epss_pct": 0.98377, +"epss_pct": 0.98379, "name": "Telesquare TLR-2005KSH 1.0.0 - Arbitrary File Delete", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-46424.yaml" @@ -21154,7 +21154,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-78", "epss": 0.21901, -"epss_pct": 0.97477, +"epss_pct": 0.9748, "name": "GenieACS => 1.2.8 - OS Command Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-46704.yaml" @@ -21164,7 +21164,7 @@ "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.02615, -"epss_pct": 0.84354, +"epss_pct": 0.84372, "name": "GeoVision GeoWebServer <= 5.3.3 - Local File Inclusion / Cross-Site Scripting", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-47795.yaml" @@ -21174,7 +21174,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.02601, -"epss_pct": 0.8426, +"epss_pct": 0.84277, "name": "Keystone 6 Login Page - Open Redirect and Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0087.yaml" @@ -21184,7 +21184,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-306", "epss": 0.0384, -"epss_pct": 0.89375, +"epss_pct": 0.89388, "name": "WordPress Visual Form Builder <3.0.8 - Information Disclosure", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0140.yaml" @@ -21194,7 +21194,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.0156, -"epss_pct": 0.73481, +"epss_pct": 0.73512, "name": "WordPress Cookie Information/Free GDPR Consent Solution <2.0.8 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0147.yaml" @@ -21204,7 +21204,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01572, -"epss_pct": 0.73669, +"epss_pct": 0.737, "name": "WordPress All-in-one Floating Contact Form <2.0.4 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0148.yaml" @@ -21214,7 +21214,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.02337, -"epss_pct": 0.82405, +"epss_pct": 0.82427, "name": "WooCommerce Stored Exporter WordPress Plugin < 2.7.1 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0149.yaml" @@ -21224,7 +21224,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01718, -"epss_pct": 0.75844, +"epss_pct": 0.7587, "name": "WordPress Accessibility Helper <0.6.0.7 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0150.yaml" @@ -21234,7 +21234,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-601", "epss": 0.0428, -"epss_pct": 0.90413, +"epss_pct": 0.90425, "name": "WordPress Page Builder KingComposer <=2.9.6 - Open Redirect", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0165.yaml" @@ -21259,7 +21259,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.02228, -"epss_pct": 0.81513, +"epss_pct": 0.81535, "name": "WordPress RSS Aggregator < 4.20 - Authenticated Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0189.yaml" @@ -21269,7 +21269,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.03368, -"epss_pct": 0.87899, +"epss_pct": 0.87912, "name": "WordPress Permalink Manager <2.2.15 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0201.yaml" @@ -21279,7 +21279,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01458, -"epss_pct": 0.71682, +"epss_pct": 0.71713, "name": "WordPress NewStatPress <1.3.6 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0206.yaml" @@ -21289,7 +21289,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.02038, -"epss_pct": 0.79755, +"epss_pct": 0.79777, "name": "WordPress Plugin MapPress <2.73.4 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0208.yaml" @@ -21299,7 +21299,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.02291, -"epss_pct": 0.82024, +"epss_pct": 0.82045, "name": "WordPress Spider Calendar <=1.5.65 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0212.yaml" @@ -21309,7 +21309,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.70511, -"epss_pct": 0.99341, +"epss_pct": 0.99343, "name": "HTML Email Template Designer < 3.1 - Missing Authorization on Rest Route", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0218.yaml" @@ -21319,7 +21319,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-116", "epss": 0.02329, -"epss_pct": 0.82335, +"epss_pct": 0.82357, "name": "WordPress GDPR & CCPA <1.9.27 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0220.yaml" @@ -21329,7 +21329,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.05887, -"epss_pct": 0.92699, +"epss_pct": 0.92708, "name": "Popup Builder < 4.0.7 - SQL Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0228.yaml" @@ -21339,7 +21339,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01752, -"epss_pct": 0.76313, +"epss_pct": 0.76339, "name": "WordPress WOOCS < 1.3.7.5 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0234.yaml" @@ -21349,7 +21349,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01615, -"epss_pct": 0.74301, +"epss_pct": 0.74331, "name": "Redirection for Contact Form 7 < 2.5.0 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0250.yaml" @@ -21359,7 +21359,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.02254, -"epss_pct": 0.81721, +"epss_pct": 0.81742, "name": "LearnPress <4.1.6 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0271.yaml" @@ -21369,7 +21369,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-200", "epss": 0.1201, -"epss_pct": 0.95833, +"epss_pct": 0.95839, "name": "Microweber Information Disclosure", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0281.yaml" @@ -21379,7 +21379,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.02389, -"epss_pct": 0.82793, +"epss_pct": 0.82814, "name": "WordPress Ad Inserter <2.7.10 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0288.yaml" @@ -21399,7 +21399,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.02397, -"epss_pct": 0.82847, +"epss_pct": 0.82868, "name": "WordPress XML Sitemap Generator for Google <2.0.4 - Cross-Site Scripting/Remote Code Execution", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0346.yaml" @@ -21409,7 +21409,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.34359, -"epss_pct": 0.98292, +"epss_pct": 0.98294, "name": "WordPress NotificationX <2.3.9 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0349.yaml" @@ -21419,7 +21419,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.03866, -"epss_pct": 0.89446, +"epss_pct": 0.89459, "name": "Microweber Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0378.yaml" @@ -21429,7 +21429,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.03865, -"epss_pct": 0.89443, +"epss_pct": 0.89456, "name": "WordPress Embed Swagger <=1.0.0 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0381.yaml" @@ -21448,7 +21448,7 @@ "cvss": 8.8, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "epss": 0.65237, -"epss_pct": 0.99194, +"epss_pct": 0.99196, "name": "Gogs <0.12.6 - Remote Command Execution", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0415.yaml" @@ -21458,7 +21458,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.0812, -"epss_pct": 0.94427, +"epss_pct": 0.94435, "name": "WordPress White Label CMS <2.2.9 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0422.yaml" @@ -21468,7 +21468,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-306", "epss": 0.03005, -"epss_pct": 0.86447, +"epss_pct": 0.86463, "name": "Popup by Supsystic < 1.10.9 - Subscriber Email Addresses Disclosure", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0424.yaml" @@ -21478,7 +21478,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01157, -"epss_pct": 0.64852, +"epss_pct": 0.64889, "name": "WP Cerber Security, Anti-spam & Malware Scan < 8.9.6 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0429.yaml" @@ -21488,7 +21488,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-1321", "epss": 0.04429, -"epss_pct": 0.90688, +"epss_pct": 0.907, "name": "Mastodon Prototype Pollution Vulnerability", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0432.yaml" @@ -21498,7 +21498,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.14783, -"epss_pct": 0.96434, +"epss_pct": 0.96438, "name": "WordPress Page Views Count <2.4.15 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0434.yaml" @@ -21508,7 +21508,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.15054, -"epss_pct": 0.9648, +"epss_pct": 0.96484, "name": "karma-runner DOM-based Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0437.yaml" @@ -21518,7 +21518,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.04156, -"epss_pct": 0.90155, +"epss_pct": 0.90168, "name": "Email Subscribers & Newsletters <= 5.3.1 - Authenticated SQL Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0439.yaml" @@ -21537,7 +21537,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.43807, -"epss_pct": 0.9865, +"epss_pct": 0.98653, "name": "Popup Builder Plugin - SQL Injection and Cross-Site Scripting", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0479.yaml" @@ -21546,7 +21546,7 @@ "cvss": 9.1, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "epss": 0.43746, -"epss_pct": 0.98648, +"epss_pct": 0.9865, "name": "Easy!Appointments <1.4.3 - Broken Access Control", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0482.yaml" @@ -21556,7 +21556,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01809, -"epss_pct": 0.77066, +"epss_pct": 0.77094, "name": "Ditty (formerly Ditty News Ticker) < 3.0.15 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0533.yaml" @@ -21566,7 +21566,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01262, -"epss_pct": 0.67597, +"epss_pct": 0.67631, "name": "WordPress E2Pdf <1.16.45 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0535.yaml" @@ -21595,7 +21595,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "cwe": "CWE-918", "epss": 0.20249, -"epss_pct": 0.97286, +"epss_pct": 0.9729, "name": "Formcraft3 <3.8.28 - Server-Side Request Forgery", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0591.yaml" @@ -21605,7 +21605,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.10431, -"epss_pct": 0.95406, +"epss_pct": 0.95412, "name": "MapSVG < 6.2.20 - Unauthenticated SQLi", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0592.yaml" @@ -21615,7 +21615,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-863", "epss": 0.02013, -"epss_pct": 0.79515, +"epss_pct": 0.79539, "name": "WordPress Shareaholic <9.7.6 - Information Disclosure", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0594.yaml" @@ -21625,7 +21625,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.13575, -"epss_pct": 0.96187, +"epss_pct": 0.96192, "name": "WordPress Contact Form 7 <1.3.6.3 - Stored Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0595.yaml" @@ -21635,7 +21635,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-601", "epss": 0.03019, -"epss_pct": 0.86506, +"epss_pct": 0.86521, "name": "Microweber < 1.2.11 - Open Redirection", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0597.yaml" @@ -21645,7 +21645,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01669, -"epss_pct": 0.7513, +"epss_pct": 0.75159, "name": "WordPress Mapping Multiple URLs Redirect Same Page <=5.8 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0599.yaml" @@ -21655,7 +21655,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-89", "epss": 0.32212, -"epss_pct": 0.98194, +"epss_pct": 0.98197, "name": "WordPress Plugin WP Statistics <= 13.1.5 - SQL Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0651.yaml" @@ -21665,7 +21665,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.02703, -"epss_pct": 0.84894, +"epss_pct": 0.84913, "name": "Wordpress Profile Builder Plugin Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0653.yaml" @@ -21675,7 +21675,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-552", "epss": 0.07879, -"epss_pct": 0.94292, +"epss_pct": 0.94299, "name": "uDraw <3.3.3 - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0656.yaml" @@ -21685,7 +21685,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.08631, -"epss_pct": 0.94712, +"epss_pct": 0.94719, "name": "CommonsBooking < 2.6.8 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0658.yaml" @@ -21695,7 +21695,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-209", "epss": 0.06923, -"epss_pct": 0.93631, +"epss_pct": 0.93639, "name": "Microweber <1.2.11 - Information Disclosure", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0660.yaml" @@ -21705,7 +21705,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-93", "epss": 0.44259, -"epss_pct": 0.98663, +"epss_pct": 0.98666, "name": "Microweber < 1.2.11 - CRLF Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0666.yaml" @@ -21715,7 +21715,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.02273, -"epss_pct": 0.81862, +"epss_pct": 0.81882, "name": "Microweber <1.2.11 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0678.yaml" @@ -21735,7 +21735,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-601", "epss": 0.03378, -"epss_pct": 0.87932, +"epss_pct": 0.87945, "name": "Rudloff alltube prior to 3.0.1 - Open Redirect", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0692.yaml" @@ -21745,7 +21745,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.07097, -"epss_pct": 0.93771, +"epss_pct": 0.93779, "name": "WordPress Master Elements <=8.0 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0693.yaml" @@ -21755,7 +21755,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-863", "epss": 0.13227, -"epss_pct": 0.96101, +"epss_pct": 0.96106, "name": "GitLab CE/EE - Information Disclosure", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0735.yaml" @@ -21765,7 +21765,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.14882, -"epss_pct": 0.96451, +"epss_pct": 0.96455, "name": "Infographic Maker iList < 4.3.8 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0747.yaml" @@ -21775,7 +21775,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.10825, -"epss_pct": 0.95532, +"epss_pct": 0.95538, "name": "WordPress Simple Link Directory <7.7.2 - SQL injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0760.yaml" @@ -21785,7 +21785,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.03932, -"epss_pct": 0.89635, +"epss_pct": 0.89648, "name": "WordPress Loco Translate < 2.6.1 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0765.yaml" @@ -21795,7 +21795,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.0854, -"epss_pct": 0.94664, +"epss_pct": 0.94671, "name": "Users Ultra <= 3.1.0 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0769.yaml" @@ -21805,7 +21805,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.43259, -"epss_pct": 0.98629, +"epss_pct": 0.98632, "name": "Documentor <= 1.5.3 - Unauthenticated SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0773.yaml" @@ -21815,7 +21815,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.03679, -"epss_pct": 0.88892, +"epss_pct": 0.88905, "name": "RevealJS postMessage <4.3.0 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0776.yaml" @@ -21825,7 +21825,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.1305, -"epss_pct": 0.96066, +"epss_pct": 0.96071, "name": "WordPress Nirweb Support <2.8.2 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0781.yaml" @@ -21835,7 +21835,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.07771, -"epss_pct": 0.94221, +"epss_pct": 0.94228, "name": "Multiple Shipping Address Woocommerce < 2.0 - SQL Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0783.yaml" @@ -21845,7 +21845,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.10079, -"epss_pct": 0.95296, +"epss_pct": 0.95302, "name": "WordPress Title Experiments Free <9.0.1 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0784.yaml" @@ -21855,7 +21855,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.09276, -"epss_pct": 0.95003, +"epss_pct": 0.95009, "name": "WordPress Daily Prayer Time <2022.03.01 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0785.yaml" @@ -21865,7 +21865,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.13271, -"epss_pct": 0.9611, +"epss_pct": 0.96114, "name": "WordPress KiviCare <2.3.9 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0786.yaml" @@ -21875,7 +21875,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.08631, -"epss_pct": 0.94712, +"epss_pct": 0.94719, "name": "Limit Login Attempts (Spam Protection) < 5.1 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0787.yaml" @@ -21885,7 +21885,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.07949, -"epss_pct": 0.94329, +"epss_pct": 0.94336, "name": "WordPress WP Fundraising Donation and Crowdfunding Platform <1.5.0 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0788.yaml" @@ -21895,7 +21895,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.09381, -"epss_pct": 0.95042, +"epss_pct": 0.95048, "name": "Ubigeo de Peru < 3.6.4 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0814.yaml" @@ -21905,7 +21905,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.11586, -"epss_pct": 0.95729, +"epss_pct": 0.95735, "name": "WordPress BadgeOS <=3.7.0 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0817.yaml" @@ -21924,7 +21924,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.09127, -"epss_pct": 0.94944, +"epss_pct": 0.9495, "name": "WordPress WP Video Gallery <=1.7.1 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0826.yaml" @@ -21934,7 +21934,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.09127, -"epss_pct": 0.94944, +"epss_pct": 0.94949, "name": "WordPress Best Books <=2.6.3 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0827.yaml" @@ -21944,7 +21944,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.08785, -"epss_pct": 0.94797, +"epss_pct": 0.94804, "name": "SpeakOut Email Petitions < 2.14.15.1 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0846.yaml" @@ -21954,7 +21954,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.07415, -"epss_pct": 0.94002, +"epss_pct": 0.94009, "name": "UpdraftPlus < 1.22.9 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0864.yaml" @@ -21964,7 +21964,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.1345, -"epss_pct": 0.96155, +"epss_pct": 0.9616, "name": "WordPress ARPrice <3.6.1 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0867.yaml" @@ -21974,7 +21974,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-601", "epss": 0.02642, -"epss_pct": 0.84522, +"epss_pct": 0.84539, "name": "nitely/spirit 0.12.3 - Open Redirect", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0869.yaml" @@ -21984,7 +21984,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-918", "epss": 0.03422, -"epss_pct": 0.88069, +"epss_pct": 0.88082, "name": "Gogs <0.12.5 - Server-Side Request Forgery", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0870.yaml" @@ -21994,7 +21994,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.009, -"epss_pct": 0.57206, +"epss_pct": 0.57249, "name": "WordPress Gmedia Photo Gallery Plugin < 1.20.0 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0873.yaml" @@ -22004,7 +22004,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01195, -"epss_pct": 0.65893, +"epss_pct": 0.6593, "name": "Caldera Forms < 1.9.7 - Reflected Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0879.yaml" @@ -22014,7 +22014,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-862", "epss": 0.09436, -"epss_pct": 0.95062, +"epss_pct": 0.95068, "name": "Member Hero <=1.0.9 - Remote Code Execution", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0885.yaml" @@ -22024,7 +22024,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01323, -"epss_pct": 0.68915, +"epss_pct": 0.68951, "name": "Header Footer Code Manager < 1.1.24 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0899.yaml" @@ -22042,7 +22042,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.02389, -"epss_pct": 0.82789, +"epss_pct": 0.82811, "name": "Microweber < 1.2.12 - Stored Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0928.yaml" @@ -22052,7 +22052,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.09879, -"epss_pct": 0.95227, +"epss_pct": 0.95234, "name": "WordPress Order Listener for WooCommerce <3.2.2 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0948.yaml" @@ -22062,7 +22062,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.0767, -"epss_pct": 0.94161, +"epss_pct": 0.94168, "name": "WordPress Stop Bad Bots <6.930 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0949.yaml" @@ -22072,7 +22072,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "cwe": "CWE-352", "epss": 0.11419, -"epss_pct": 0.95692, +"epss_pct": 0.95698, "name": "WordPress Sitemap by click5 <1.0.36 - Missing Authorization", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0952.yaml" @@ -22082,7 +22082,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.03197, -"epss_pct": 0.87231, +"epss_pct": 0.87245, "name": "Microweber <1.2.11 - Stored Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0954.yaml" @@ -22092,7 +22092,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01877, -"epss_pct": 0.77948, +"epss_pct": 0.77973, "name": "Microweber <1.2.12 - Stored Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0963.yaml" @@ -22102,7 +22102,7 @@ "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "cwe": "CWE-190", "epss": 0.03731, -"epss_pct": 0.89044, +"epss_pct": 0.89058, "name": "Microweber <1.2.12 - Integer Overflow", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0968.yaml" @@ -22112,7 +22112,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01868, -"epss_pct": 0.77845, +"epss_pct": 0.77871, "name": "WordPress Advanced Booking Calendar <1.7.1 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1007.yaml" @@ -22122,7 +22122,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.07681, -"epss_pct": 0.94168, +"epss_pct": 0.94175, "name": "WordPress Personal Dictionary <1.3.4 - Blind SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1013.yaml" @@ -22132,7 +22132,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-352", "epss": 0.25937, -"epss_pct": 0.97832, +"epss_pct": 0.97835, "name": "WordPress WooCommerce <3.1.2 - Arbitrary Function Call", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1020.yaml" @@ -22142,7 +22142,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N", "cwe": "CWE-522", "epss": 0.14733, -"epss_pct": 0.96428, +"epss_pct": 0.96432, "name": "Kyocera Net View Address Book Exposure", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1026.yaml" @@ -22152,7 +22152,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.00866, -"epss_pct": 0.56197, +"epss_pct": 0.56242, "name": "Limit Login Attempts - Stored Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1029.yaml" @@ -22172,7 +22172,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-862", "epss": 0.04213, -"epss_pct": 0.90277, +"epss_pct": 0.90289, "name": "WordPress RSVP and Event Management <2.7.8 - Missing Authorization", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1054.yaml" @@ -22182,7 +22182,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.07942, -"epss_pct": 0.94324, +"epss_pct": 0.94332, "name": "WordPress Pricing Deals for WooCommerce <=2.0.2.02 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1057.yaml" @@ -22192,7 +22192,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-601", "epss": 0.53177, -"epss_pct": 0.98902, +"epss_pct": 0.98904, "name": "Gitea <1.16.5 - Open Redirect", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1058.yaml" @@ -22202,7 +22202,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.19958, -"epss_pct": 0.97246, +"epss_pct": 0.9725, "name": "WordPress Simple File List <3.2.8 - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1119.yaml" @@ -22222,7 +22222,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01847, -"epss_pct": 0.77572, +"epss_pct": 0.77598, "name": "WordPress WP JobSearch <1.5.1 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1168.yaml" @@ -22232,7 +22232,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01789, -"epss_pct": 0.76793, +"epss_pct": 0.7682, "name": "JobMonster < 4.5.2.9 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1170.yaml" @@ -22242,7 +22242,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.02176, -"epss_pct": 0.81065, +"epss_pct": 0.81087, "name": "WordPress Gwyn's Imagemap Selector <=0.3.3 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1221.yaml" @@ -22252,7 +22252,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.43036, -"epss_pct": 0.98623, +"epss_pct": 0.98626, "name": "Photo Gallery WordPress v1.6.3 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1281.yaml" @@ -22261,7 +22261,7 @@ "cvss": 8.8, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "epss": 0.92658, -"epss_pct": 0.9982, +"epss_pct": 0.99821, "name": "Elementor Website Builder - Remote Code Execution", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1329.yaml" @@ -22271,7 +22271,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-918", "epss": 0.71427, -"epss_pct": 0.99367, +"epss_pct": 0.99369, "name": "WordPress Fusion Builder <3.6.2 - Server-Side Request Forgery", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1386.yaml" @@ -22291,7 +22291,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-22", "epss": 0.21881, -"epss_pct": 0.97475, +"epss_pct": 0.97479, "name": "WordPress Admin Word Count Column 2.2 - Local File Inclusion", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1390.yaml" @@ -22301,7 +22301,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-22", "epss": 0.15064, -"epss_pct": 0.96481, +"epss_pct": 0.96485, "name": "WordPress Cab fare calculator < 1.0.4 - Local File Inclusion", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1391.yaml" @@ -22311,7 +22311,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.1129, -"epss_pct": 0.95662, +"epss_pct": 0.95668, "name": "WordPress Videos sync PDF <=1.7.4 - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1392.yaml" @@ -22321,7 +22321,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-918", "epss": 0.03054, -"epss_pct": 0.86657, +"epss_pct": 0.86673, "name": "External Media without Import <=1.1.2 - Authenticated Blind Server-Side Request Forgery", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1398.yaml" @@ -22331,7 +22331,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.03258, -"epss_pct": 0.87496, +"epss_pct": 0.8751, "name": "Microweber <1.2.15 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1439.yaml" @@ -22341,7 +22341,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-862", "epss": 0.08843, -"epss_pct": 0.94826, +"epss_pct": 0.94832, "name": "WordPress Metform <=2.1.3 - Information Disclosure", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1442.yaml" @@ -22351,7 +22351,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.07158, -"epss_pct": 0.93827, +"epss_pct": 0.93835, "name": "RSVPMaker <= 9.2.5 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1453.yaml" @@ -22361,7 +22361,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-352", "epss": 0.12018, -"epss_pct": 0.95835, +"epss_pct": 0.9584, "name": "WordPress HTML2WP <=1.0.0 - Arbitrary File Upload", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1574.yaml" @@ -22371,7 +22371,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-639", "epss": 0.01386, -"epss_pct": 0.70319, +"epss_pct": 0.70349, "name": "Site Offline WP Plugin < 1.5.3 - Authorization Bypass", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1580.yaml" @@ -22381,7 +22381,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-200", "epss": 0.02903, -"epss_pct": 0.85994, +"epss_pct": 0.86011, "name": "WordPress HC Custom WP-Admin URL <=1.4 - Admin Login URL Disclosure", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1595.yaml" @@ -22391,7 +22391,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.03017, -"epss_pct": 0.86497, +"epss_pct": 0.86512, "name": "WordPress WPQA <5.4 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1597.yaml" @@ -22401,7 +22401,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-306", "epss": 0.05383, -"epss_pct": 0.92104, +"epss_pct": 0.92114, "name": "WordPress WPQA <5.5 - Improper Access Control", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1598.yaml" @@ -22421,7 +22421,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.10648, -"epss_pct": 0.95474, +"epss_pct": 0.95481, "name": "CP Image Store with Slideshow <= 1.0.67 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1692.yaml" @@ -22431,7 +22431,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-918", "epss": 0.05945, -"epss_pct": 0.92751, +"epss_pct": 0.9276, "name": "draw.io < 18.0.5 - Server Side Request Forgery (SSRF)", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1711.yaml" @@ -22441,7 +22441,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-918", "epss": 0.09581, -"epss_pct": 0.95122, +"epss_pct": 0.95128, "name": "Drawio <18.0.4 - Server-Side Request Forgery", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1713.yaml" @@ -22451,7 +22451,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01849, -"epss_pct": 0.77597, +"epss_pct": 0.77623, "name": "WordPress Simple Membership <4.1.1 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1724.yaml" @@ -22461,7 +22461,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01941, -"epss_pct": 0.78707, +"epss_pct": 0.78731, "name": "Newsletter < 7.4.5 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1756.yaml" @@ -22471,7 +22471,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-89", "epss": 0.12624, -"epss_pct": 0.95958, +"epss_pct": 0.95963, "name": "WordPress RSVPMaker <=9.3.2 - SQL Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1768.yaml" @@ -22480,7 +22480,7 @@ "cvss": 7.5, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "epss": 0.05389, -"epss_pct": 0.92109, +"epss_pct": 0.92119, "name": "Drawio <18.1.2 - Server-Side Request Forgery", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1815.yaml" @@ -22490,7 +22490,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.0676, -"epss_pct": 0.93499, +"epss_pct": 0.93508, "name": "Terraboard <2.2.0 - SQL Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1883.yaml" @@ -22500,7 +22500,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-862", "epss": 0.08771, -"epss_pct": 0.94791, +"epss_pct": 0.94798, "name": "ARMember < 3.4.8 - Unauthenticated Admin Account Takeover", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1903.yaml" @@ -22510,7 +22510,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01452, -"epss_pct": 0.71573, +"epss_pct": 0.71602, "name": "WordPress Easy Pricing Tables <3.2.1 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1904.yaml" @@ -22520,7 +22520,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01117, -"epss_pct": 0.63791, +"epss_pct": 0.6383, "name": "WordPress Copyright Proof <=4.16 - Cross-Site-Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1906.yaml" @@ -22530,7 +22530,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01379, -"epss_pct": 0.70186, +"epss_pct": 0.70216, "name": "WordPress Shortcodes and Extra Features for Phlox <2.9.8 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1910.yaml" @@ -22540,7 +22540,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01913, -"epss_pct": 0.78375, +"epss_pct": 0.784, "name": "WordPress Active Products Tables for WooCommerce <1.0.5 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1916.yaml" @@ -22550,7 +22550,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01566, -"epss_pct": 0.73568, +"epss_pct": 0.73599, "name": "WordPress CDI <5.1.9 - Cross Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1933.yaml" @@ -22560,7 +22560,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01686, -"epss_pct": 0.75399, +"epss_pct": 0.75426, "name": "WordPress Awin Data Feed <=1.6 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1937.yaml" @@ -22570,7 +22570,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01735, -"epss_pct": 0.76066, +"epss_pct": 0.76092, "name": "WordPress Gallery <2.0.0 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1946.yaml" @@ -22580,7 +22580,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.05513, -"epss_pct": 0.92245, +"epss_pct": 0.92255, "name": "Youzify < 1.2.0 - Unauthenticated SQLi", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1950.yaml" @@ -22590,7 +22590,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-434", "epss": 0.23487, -"epss_pct": 0.9763, +"epss_pct": 0.97633, "name": "WordPress eaSYNC Booking <1.1.16 - Arbitrary File Upload", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-1952.yaml" @@ -22608,7 +22608,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-639", "epss": 0.02528, -"epss_pct": 0.83773, +"epss_pct": 0.83793, "name": "WordPress Sensei LMS <4.5.0 - Information Disclosure", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-2034.yaml" @@ -22622,7 +22622,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:L", "cwe": "CWE-79", "epss": 0.03076, -"epss_pct": 0.86734, +"epss_pct": 0.8675, "name": "Microweber < 1.2.17 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-2130.yaml" @@ -22645,7 +22645,7 @@ "cvss": 7.5, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "epss": 0.71703, -"epss_pct": 0.99375, +"epss_pct": 0.99377, "name": "Oracle E-Business Suite <=12.2 - Authentication Bypass", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-21500.yaml" @@ -22696,7 +22696,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.0127, -"epss_pct": 0.67773, +"epss_pct": 0.67806, "name": "WordPress Download Manager < 3.2.44 - Authenticated Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-2168.yaml" @@ -22705,7 +22705,7 @@ "cvss": 7.2, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "epss": 0.0865, -"epss_pct": 0.94723, +"epss_pct": 0.9473, "name": "October CMS - Remote Code Execution", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-21705.yaml" @@ -22715,7 +22715,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.02999, -"epss_pct": 0.86418, +"epss_pct": 0.86434, "name": "microweber 1.2.18 - Cross-site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-2174.yaml" @@ -22739,7 +22739,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01428, -"epss_pct": 0.71119, +"epss_pct": 0.71148, "name": "WordPress Contact Form 7 Captcha <0.1.2 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-2187.yaml" @@ -22749,7 +22749,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01619, -"epss_pct": 0.74377, +"epss_pct": 0.74407, "name": "Unyson < 2.7.27 - Cross Site Scripting", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-2219.yaml" @@ -22759,7 +22759,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.02634, -"epss_pct": 0.84478, +"epss_pct": 0.84495, "name": "Juniper Web Device Manager - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-22242.yaml" @@ -22779,7 +22779,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-200", "epss": 0.37594, -"epss_pct": 0.98428, +"epss_pct": 0.9843, "name": "Apache ShardingSphere ElasticJob-UI privilege escalation", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-22733.yaml" @@ -22789,7 +22789,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.1439, -"epss_pct": 0.96361, +"epss_pct": 0.96365, "name": "PrestaShop AP Pagebuilder <= 2.4.4 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-22897.yaml" @@ -22799,7 +22799,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.02849, -"epss_pct": 0.85732, +"epss_pct": 0.85749, "name": "Trilium <0.52.4 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-2290.yaml" @@ -22827,8 +22827,8 @@ "cvss": 9.8, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-287", -"epss": 0.50694, -"epss_pct": 0.98836, +"epss": 0.49814, +"epss_pct": 0.98814, "name": "VMware Workspace ONE Access - Authentication Bypass", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-22956.yaml" @@ -22867,7 +22867,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-601", "epss": 0.05265, -"epss_pct": 0.91976, +"epss_pct": 0.91986, "name": "SINEMA Remote Connect Server < V2.0 - Open Redirect", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-23102.yaml" @@ -22895,7 +22895,7 @@ "cvss": 9.8, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "epss": 0.1652, -"epss_pct": 0.96769, +"epss_pct": 0.96773, "name": "WordPress VR Calendar <=2.3.2 - Remote Code Execution", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-2314.yaml" @@ -22905,7 +22905,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-287", "epss": 0.75159, -"epss_pct": 0.99473, +"epss_pct": 0.99475, "name": "Crestron Device - Credentials Disclosure", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-23178.yaml" @@ -22915,7 +22915,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.13483, -"epss_pct": 0.96165, +"epss_pct": 0.9617, "name": "BigAnt Server v5.6.06 - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-23347.yaml" @@ -22925,7 +22925,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-916", "epss": 0.03273, -"epss_pct": 0.8755, +"epss_pct": 0.87564, "name": "BigAnt Server 5.6.06 - Improper Access Control", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-23348.yaml" @@ -22935,7 +22935,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01028, -"epss_pct": 0.61247, +"epss_pct": 0.61287, "name": "Cedar Gate EZ-NET <= 6.8.0 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-23397.yaml" @@ -22944,7 +22944,7 @@ "cvss": 6.1, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "epss": 0.01607, -"epss_pct": 0.74179, +"epss_pct": 0.7421, "name": "MeterSphere < 2.5.0 SSRF", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-23544.yaml" @@ -22961,7 +22961,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-862", "epss": 0.01857, -"epss_pct": 0.77717, +"epss_pct": 0.77743, "name": "WordPress Simply Schedule Appointments <1.5.7.7 - Information Disclosure", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-2373.yaml" @@ -22970,8 +22970,8 @@ "cvss": 5.3, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-862", -"epss": 0.01489, -"epss_pct": 0.72263, +"epss": 0.01836, +"epss_pct": 0.77458, "name": "WordPress Directorist <7.3.1 - Information Disclosure", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-2376.yaml" @@ -22981,7 +22981,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-200", "epss": 0.1514, -"epss_pct": 0.96492, +"epss_pct": 0.96496, "name": "Zoho ManageEngine - Internal Hostname Disclosure", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-23779.yaml" @@ -22991,7 +22991,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-862", "epss": 0.03389, -"epss_pct": 0.87964, +"epss_pct": 0.87977, "name": "WordPress Easy Student Results <=2.2.8 - Improper Authorization", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-2379.yaml" @@ -23001,7 +23001,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.07936, -"epss_pct": 0.9432, +"epss_pct": 0.94328, "name": "phpMyAdmin < 5.1.2 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-23808.yaml" @@ -23011,7 +23011,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.06332, -"epss_pct": 0.93134, +"epss_pct": 0.93141, "name": "WordPress Feed Them Social <3.0.1 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-2383.yaml" @@ -23020,7 +23020,7 @@ "cvss": 7.5, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "epss": 0.45957, -"epss_pct": 0.98716, +"epss_pct": 0.98718, "name": "AVEVA InTouch Access Anywhere Secure Gateway - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-23854.yaml" @@ -23030,7 +23030,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-77", "epss": 0.56509, -"epss_pct": 0.98985, +"epss_pct": 0.98988, "name": "ZZZCMS zzzphp 2.1.0 - Remote Code Execution", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-23881.yaml" @@ -23040,7 +23040,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.07734, -"epss_pct": 0.94201, +"epss_pct": 0.94208, "name": "MCMS 5.2.5 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-23898.yaml" @@ -23079,7 +23079,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-89", "epss": 0.55295, -"epss_pct": 0.98958, +"epss_pct": 0.9896, "name": "Casdoor 1.13.0 - Unauthenticated SQL Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-24124.yaml" @@ -23089,7 +23089,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N", "cwe": "CWE-918", "epss": 0.06139, -"epss_pct": 0.92948, +"epss_pct": 0.92957, "name": "Shibboleth OIDC OP <3.0.4 - Server-Side Request Forgery", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-24129.yaml" @@ -23109,7 +23109,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.0608, -"epss_pct": 0.92894, +"epss_pct": 0.92903, "name": "PKP Open Journal Systems 2.4.8-3.3 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-24181.yaml" @@ -23119,7 +23119,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.61965, -"epss_pct": 0.99113, +"epss_pct": 0.99115, "name": "Atom CMS v2.0 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-24223.yaml" @@ -23129,7 +23129,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.49992, -"epss_pct": 0.98816, +"epss_pct": 0.98819, "name": "VoipMonitor - Pre-Auth SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-24260.yaml" @@ -23139,7 +23139,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-89", "epss": 0.06711, -"epss_pct": 0.93446, +"epss_pct": 0.93455, "name": "Cuppa CMS v1.0 - SQL injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-24264.yaml" @@ -23149,7 +23149,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-89", "epss": 0.06711, -"epss_pct": 0.93446, +"epss_pct": 0.93455, "name": "Cuppa CMS v1.0 - SQL injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-24265.yaml" @@ -23159,7 +23159,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-89", "epss": 0.05707, -"epss_pct": 0.92482, +"epss_pct": 0.92492, "name": "Cuppa CMS v1.0 - SQL injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-24266.yaml" @@ -23179,7 +23179,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.0409, -"epss_pct": 0.90009, +"epss_pct": 0.9002, "name": "SmarterTools SmarterTrack - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-24384.yaml" @@ -23189,7 +23189,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "cwe": "CWE-862", "epss": 0.03852, -"epss_pct": 0.894, +"epss_pct": 0.89413, "name": "Transposh WordPress Translation <= 1.0.8 - Unauthenticated Settings Change", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-2461.yaml" @@ -23199,7 +23199,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-200", "epss": 0.03225, -"epss_pct": 0.8736, +"epss_pct": 0.87374, "name": "WordPress Transposh <=1.0.8.1 - Information Disclosure", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-2462.yaml" @@ -23209,7 +23209,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.26389, -"epss_pct": 0.97859, +"epss_pct": 0.97862, "name": "AudioCodes Device Manager Express - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-24627.yaml" @@ -23234,7 +23234,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.04493, -"epss_pct": 0.90807, +"epss_pct": 0.90819, "name": "Garage Management System 1.0 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-2467.yaml" @@ -23244,7 +23244,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.03619, -"epss_pct": 0.88694, +"epss_pct": 0.88708, "name": "ManageEngine ADSelfService Plus <6121 - Stored Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-24681.yaml" @@ -23254,7 +23254,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-116", "epss": 0.30931, -"epss_pct": 0.98127, +"epss_pct": 0.98129, "name": "Zimbra Collaboration Suite < 8.8.15 - Improper Encoding", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-24682.yaml" @@ -23294,7 +23294,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-359", "epss": 0.03198, -"epss_pct": 0.87238, +"epss_pct": 0.87253, "name": "XWiki < 12.10.11, 13.4.4 & 13.9-rc-1 - Information Disclosure", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-24819.yaml" @@ -23304,7 +23304,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-918", "epss": 0.10479, -"epss_pct": 0.95422, +"epss_pct": 0.95429, "name": "Flyte Console <0.52.0 - Server-Side Request Forgery", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-24856.yaml" @@ -23314,7 +23314,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-78", "epss": 0.29763, -"epss_pct": 0.98065, +"epss_pct": 0.98067, "name": "Wavlink WN535K2/WN535K3 - OS Command Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-2486.yaml" @@ -23334,7 +23334,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-78", "epss": 0.32947, -"epss_pct": 0.98236, +"epss_pct": 0.98239, "name": "Wavlink WN535K2/WN535K3 - OS Command Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-2488.yaml" @@ -23344,7 +23344,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.04478, -"epss_pct": 0.90779, +"epss_pct": 0.90792, "name": "Contao <4.13.3 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-24899.yaml" @@ -23353,7 +23353,7 @@ "cvss": 8.6, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N", "epss": 0.0841, -"epss_pct": 0.94587, +"epss_pct": 0.94593, "name": "Piano LED Visualizer 1.3 - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-24900.yaml" @@ -23373,7 +23373,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-78", "epss": 0.58701, -"epss_pct": 0.99036, +"epss_pct": 0.99038, "name": "TP-Link TL-WR840N - Command Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-25061.yaml" @@ -23383,7 +23383,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-78", "epss": 0.15673, -"epss_pct": 0.96606, +"epss_pct": 0.96611, "name": "TOTOLink - Unauthenticated Command Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-25082.yaml" @@ -23398,7 +23398,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.06981, -"epss_pct": 0.93678, +"epss_pct": 0.93685, "name": "MCMS 5.2.4 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-25125.yaml" @@ -23428,7 +23428,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.13835, -"epss_pct": 0.96249, +"epss_pct": 0.96254, "name": "DVDFab 12 Player/PlayerFab - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-25216.yaml" @@ -23437,7 +23437,7 @@ "cvss": 10.0, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "epss": 0.11027, -"epss_pct": 0.95594, +"epss_pct": 0.956, "name": "ThinVNC - Authentication Bypass", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-25226.yaml" @@ -23447,7 +23447,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-285", "epss": 0.56724, -"epss_pct": 0.9899, +"epss_pct": 0.98992, "name": "Bonita Web 2021.2 - Authentication/Authorization Bypass", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-25237.yaml" @@ -23457,7 +23457,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.08346, -"epss_pct": 0.9455, +"epss_pct": 0.94557, "name": "ZEROF Web Server 2.0 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-25322.yaml" @@ -23467,7 +23467,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.03245, -"epss_pct": 0.87438, +"epss_pct": 0.87453, "name": "ZEROF Web Server 2.0 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-25323.yaml" @@ -23477,7 +23477,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-639", "epss": 0.01909, -"epss_pct": 0.7833, +"epss_pct": 0.78355, "name": "SearchWP Live Ajax Search < 1.6.2 - Unauthenticated Arbitrary Post Title Disclosure", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-2535.yaml" @@ -23487,7 +23487,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-91", "epss": 0.05879, -"epss_pct": 0.92692, +"epss_pct": 0.92701, "name": "Alt-n/MDaemon Security Gateway <=8.5.0 - XML Injection", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-25356.yaml" @@ -23497,7 +23497,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-425", "epss": 0.40739, -"epss_pct": 0.9855, +"epss_pct": 0.98553, "name": "Dynamicweb 9.5.0 - 9.12.7 Unauthenticated Admin User Creation", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-25369.yaml" @@ -23507,7 +23507,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-425", "epss": 0.04267, -"epss_pct": 0.90389, +"epss_pct": 0.90401, "name": "WordPress Ninja Job Board < 1.3.3 - Direct Request", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-2544.yaml" @@ -23517,7 +23517,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01204, -"epss_pct": 0.66104, +"epss_pct": 0.66138, "name": "WordPress All-in-One WP Migration <=7.62 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-2546.yaml" @@ -23527,7 +23527,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-668", "epss": 0.04748, -"epss_pct": 0.91241, +"epss_pct": 0.91252, "name": "ThinkPHP 5.0.24 - Information Disclosure", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-25481.yaml" @@ -23537,7 +23537,7 @@ "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "cwe": "CWE-829", "epss": 0.07927, -"epss_pct": 0.94313, +"epss_pct": 0.94321, "name": "Cuppa CMS v1.0 - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-25485.yaml" @@ -23547,7 +23547,7 @@ "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "cwe": "CWE-829", "epss": 0.09966, -"epss_pct": 0.9526, +"epss_pct": 0.95266, "name": "Cuppa CMS v1.0 - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-25486.yaml" @@ -23567,7 +23567,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.07148, -"epss_pct": 0.93818, +"epss_pct": 0.93825, "name": "Atom CMS v2.0 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-25488.yaml" @@ -23577,7 +23577,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01459, -"epss_pct": 0.71697, +"epss_pct": 0.71727, "name": "Atom CMS v2.0 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-25489.yaml" @@ -23587,7 +23587,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-552", "epss": 0.03642, -"epss_pct": 0.88781, +"epss_pct": 0.88794, "name": "Cuppa CMS v1.0 - Local File Inclusion", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-25497.yaml" @@ -23597,7 +23597,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-425", "epss": 0.16673, -"epss_pct": 0.96798, +"epss_pct": 0.96802, "name": "WordPress Duplicator <1.4.7 - Authentication Bypass", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-2551.yaml" @@ -23607,7 +23607,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-862", "epss": 0.11298, -"epss_pct": 0.95665, +"epss_pct": 0.95671, "name": "Duplicator < 1.4.7.1 - Information Disclosure", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-2552.yaml" @@ -23617,7 +23617,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-1188", "epss": 0.06885, -"epss_pct": 0.93594, +"epss_pct": 0.93602, "name": "MotionEye Config Info Disclosure", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-25568.yaml" @@ -23627,7 +23627,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01331, -"epss_pct": 0.69106, +"epss_pct": 0.69142, "name": "WordPress Anti-Malware Security and Brute-Force Firewall <4.21.83 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-2599.yaml" @@ -23663,7 +23663,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-306", "epss": 0.87212, -"epss_pct": 0.99737, +"epss_pct": 0.99738, "name": "Mitel MiCollab - Information Disclosure & Denial of Service", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-26143.yaml" @@ -23683,7 +23683,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-425", "epss": 0.13372, -"epss_pct": 0.96139, +"epss_pct": 0.96144, "name": "Ametys CMS Information Disclosure", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-26159.yaml" @@ -23693,7 +23693,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.15028, -"epss_pct": 0.96474, +"epss_pct": 0.96477, "name": "Barco Control Room Management Suite <=2.9 Build 0275 - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-26233.yaml" @@ -23713,7 +23713,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01018, -"epss_pct": 0.60924, +"epss_pct": 0.60964, "name": "WordPress Newspaper < 12 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-2627.yaml" @@ -23723,7 +23723,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-552", "epss": 0.04515, -"epss_pct": 0.90845, +"epss_pct": 0.90857, "name": "74cmsSE v3.4.1 - Arbitrary File Read", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-26271.yaml" @@ -23733,7 +23733,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N", "cwe": "CWE-610", "epss": 0.27193, -"epss_pct": 0.97911, +"epss_pct": 0.97913, "name": "All-In-One Video Gallery <=2.6.0 - Server-Side Request Forgery", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-2633.yaml" @@ -23753,7 +23753,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.02759, -"epss_pct": 0.85233, +"epss_pct": 0.85249, "name": "HotelDruid Hotel Management Software 3.0.3 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-26564.yaml" @@ -23763,7 +23763,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.05475, -"epss_pct": 0.92201, +"epss_pct": 0.92211, "name": "Mingsoft MCMS v5.2.7 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-26585.yaml" @@ -23773,7 +23773,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H", "cwe": "CWE-306", "epss": 0.37639, -"epss_pct": 0.9843, +"epss_pct": 0.98432, "name": "Open Automation Software OAS Platform V16.00.0121 - Missing Authentication", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-26833.yaml" @@ -23783,7 +23783,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "cwe": "CWE-22", "epss": 0.50993, -"epss_pct": 0.98845, +"epss_pct": 0.98848, "name": "elFinder <=2.1.60 - Local File Inclusion", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-26960.yaml" @@ -23793,7 +23793,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.06299, -"epss_pct": 0.93104, +"epss_pct": 0.93112, "name": "Yearning - Directory Traversal", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-27043.yaml" @@ -23803,7 +23803,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-20", "epss": 0.20776, -"epss_pct": 0.97366, +"epss_pct": 0.97369, "name": "Bitrix Site Manager - Remote Code Execution", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-27228.yaml" @@ -23828,7 +23828,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-918", "epss": 0.03109, -"epss_pct": 0.86864, +"epss_pct": 0.86879, "name": "Kavita <0.5.4.1 - Server-Side Request Forgery", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-2756.yaml" @@ -23848,7 +23848,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-200", "epss": 0.04619, -"epss_pct": 0.91038, +"epss_pct": 0.91049, "name": "WordPress Simple Ajax Chat <20220116 - Sensitive Information Disclosure vulnerability", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-27849.yaml" @@ -23857,7 +23857,7 @@ "cvss": 9.8, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "epss": 0.85398, -"epss_pct": 0.99703, +"epss_pct": 0.99704, "name": "Zimbra Collaboration Suite - Memcached Command Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-27924.yaml" @@ -23867,7 +23867,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.17634, -"epss_pct": 0.9693, +"epss_pct": 0.96934, "name": "Zimbra Collaboration (ZCS) - Cross Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-27926.yaml" @@ -23877,7 +23877,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.13829, -"epss_pct": 0.96248, +"epss_pct": 0.96253, "name": "Microfinance Management System 1.0 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-27927.yaml" @@ -23887,7 +23887,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.0678, -"epss_pct": 0.93514, +"epss_pct": 0.93522, "name": "Cuppa CMS v1.0 - SQL injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-27984.yaml" @@ -23897,7 +23897,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.06598, -"epss_pct": 0.93363, +"epss_pct": 0.93372, "name": "Cuppa CMS v1.0 - SQL injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-27985.yaml" @@ -23927,7 +23927,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.05922, -"epss_pct": 0.92727, +"epss_pct": 0.92736, "name": "Atom CMS v2.0 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-28032.yaml" @@ -23937,7 +23937,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.05275, -"epss_pct": 0.91988, +"epss_pct": 0.91998, "name": "Atom.CMS 2.0 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-28033.yaml" @@ -23947,7 +23947,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.28512, -"epss_pct": 0.97991, +"epss_pct": 0.97993, "name": "College Management System 1.0 - SQL Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-28079.yaml" @@ -23957,7 +23957,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.56907, -"epss_pct": 0.98994, +"epss_pct": 0.98996, "name": "Royal Event - SQL Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-28080.yaml" @@ -23972,7 +23972,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N", "cwe": "CWE-918", "epss": 0.22903, -"epss_pct": 0.97577, +"epss_pct": 0.97581, "name": "Navigate CMS 2.9.4 - Server-Side Request Forgery", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-28117.yaml" @@ -24000,7 +24000,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01436, -"epss_pct": 0.7126, +"epss_pct": 0.71289, "name": "WordPress Country Selector <1.6.6 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-28290.yaml" @@ -24010,7 +24010,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.0492, -"epss_pct": 0.91501, +"epss_pct": 0.91513, "name": "Reprise License Manager 14.2 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-28363.yaml" @@ -24020,7 +24020,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-425", "epss": 0.09149, -"epss_pct": 0.94954, +"epss_pct": 0.94959, "name": "Reprise License Manager 14.2 - Information Disclosure", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-28365.yaml" @@ -24030,7 +24030,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.05324, -"epss_pct": 0.92037, +"epss_pct": 0.92047, "name": "MantisBT < 2.25.2 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-28508.yaml" @@ -24040,7 +24040,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.20668, -"epss_pct": 0.97349, +"epss_pct": 0.97352, "name": "WordPress WPvivid Backup <0.9.76 - Local File Inclusion", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-2863.yaml" @@ -24050,7 +24050,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "cwe": "CWE-287", "epss": 0.0137, -"epss_pct": 0.70001, +"epss_pct": 0.70032, "name": "Custom Product Tabs for WooCommerce < 1.7.8 - Unauthenticated Toggle Content Setting Update", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-28666.yaml" @@ -24060,7 +24060,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-601", "epss": 0.01431, -"epss_pct": 0.71172, +"epss_pct": 0.71201, "name": "Caddy 2.4.6 - Open Redirect", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-28923.yaml" @@ -24070,7 +24070,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-287", "epss": 0.39733, -"epss_pct": 0.98517, +"epss_pct": 0.98519, "name": "D-Link DIR-816L - Improper Access Control", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-28955.yaml" @@ -24080,7 +24080,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-203", "epss": 0.10365, -"epss_pct": 0.95389, +"epss_pct": 0.95396, "name": "Zoho ManageEngine ADSelfService Plus 6121 - Username Enumeration", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-28987.yaml" @@ -24090,7 +24090,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.02944, -"epss_pct": 0.86176, +"epss_pct": 0.86193, "name": "Diary Management System 1.0 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-29004.yaml" @@ -24100,7 +24100,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.02178, -"epss_pct": 0.81083, +"epss_pct": 0.81105, "name": "Online Birth Certificate System 1.2 - Stored Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-29005.yaml" @@ -24110,7 +24110,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.19253, -"epss_pct": 0.9714, +"epss_pct": 0.97144, "name": "Directory Management System 1.0 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-29006.yaml" @@ -24120,7 +24120,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.19253, -"epss_pct": 0.9714, +"epss_pct": 0.97143, "name": "Dairy Farm Shop Management System 1.0 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-29007.yaml" @@ -24130,7 +24130,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.22909, -"epss_pct": 0.97579, +"epss_pct": 0.97582, "name": "Cyber Cafe Management System 1.0 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-29009.yaml" @@ -24149,7 +24149,7 @@ "cvss": 7.5, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "epss": 0.11816, -"epss_pct": 0.95784, +"epss_pct": 0.95789, "name": "Razer Sila Gaming Router 2.0.441_api-2.0.418 - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-29014.yaml" @@ -24159,7 +24159,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-94", "epss": 0.32808, -"epss_pct": 0.98228, +"epss_pct": 0.98231, "name": "Node.js Embedded JavaScript 3.1.6 - Template Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-29078.yaml" @@ -24179,7 +24179,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "cwe": "CWE-918", "epss": 0.08676, -"epss_pct": 0.94738, +"epss_pct": 0.94744, "name": "HashiCorp Consul/Consul Enterprise - Server-Side Request Forgery", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-29153.yaml" @@ -24189,7 +24189,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-601", "epss": 0.04038, -"epss_pct": 0.89891, +"epss_pct": 0.89902, "name": "Nagios XI <5.8.5 - Open Redirect", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-29272.yaml" @@ -24199,7 +24199,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.46803, -"epss_pct": 0.98738, +"epss_pct": 0.98741, "name": "SolarView Compact 6.00 - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-29298.yaml" @@ -24219,7 +24219,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-78", "epss": 0.97997, -"epss_pct": 0.99906, +"epss_pct": 0.99907, "name": "SolarView Compact 6.00 - OS Command Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-29303.yaml" @@ -24229,7 +24229,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.03321, -"epss_pct": 0.87732, +"epss_pct": 0.87746, "name": "Complete Online Job Search System 1.0 - Cross-Site Scripting", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-29316.yaml" @@ -24239,7 +24239,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.0175, -"epss_pct": 0.76267, +"epss_pct": 0.76293, "name": "kkFileView 4.0.0 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-29349.yaml" @@ -24249,7 +24249,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.48537, -"epss_pct": 0.9878, +"epss_pct": 0.98783, "name": "NETGEAR ProSafe SSL VPN firmware - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-29383.yaml" @@ -24259,7 +24259,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.23678, -"epss_pct": 0.9765, +"epss_pct": 0.97653, "name": "WordPress Elementor Website Builder <= 3.5.5 - DOM Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-29455.yaml" @@ -24289,7 +24289,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.41078, -"epss_pct": 0.98562, +"epss_pct": 0.98564, "name": "WSO2 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-29548.yaml" @@ -24309,7 +24309,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01603, -"epss_pct": 0.74112, +"epss_pct": 0.74141, "name": "WBCE CMS 1.5.2 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-30073.yaml" @@ -24319,7 +24319,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.0416, -"epss_pct": 0.90163, +"epss_pct": 0.90175, "name": "Wavlink WN-535G3 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-30489.yaml" @@ -24329,7 +24329,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.09706, -"epss_pct": 0.95164, +"epss_pct": 0.95171, "name": "School Dormitory Management System 1.0 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-30512.yaml" @@ -24339,7 +24339,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.03635, -"epss_pct": 0.88739, +"epss_pct": 0.88753, "name": "School Dormitory Management System 1.0 - Authenticated Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-30513.yaml" @@ -24349,7 +24349,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.03635, -"epss_pct": 0.8874, +"epss_pct": 0.88753, "name": "School Dormitory Management System 1.0 - Authenticated Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-30514.yaml" @@ -24369,7 +24369,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.44095, -"epss_pct": 0.98658, +"epss_pct": 0.98661, "name": "Simple File List < 4.4.12 - Cross Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-3062.yaml" @@ -24379,7 +24379,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.04291, -"epss_pct": 0.90431, +"epss_pct": 0.90443, "name": "Atmail 6.5.0 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-30776.yaml" @@ -24389,7 +24389,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.02296, -"epss_pct": 0.82062, +"epss_pct": 0.82082, "name": "Parallels H-Sphere 3.6.1713 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-30777.yaml" @@ -24399,7 +24399,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "cwe": "CWE-89", "epss": 0.2317, -"epss_pct": 0.97601, +"epss_pct": 0.97605, "name": "Prestashop Blockwishlist 2.1.0 SQL Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-31101.yaml" @@ -24409,7 +24409,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-74", "epss": 0.52137, -"epss_pct": 0.98875, +"epss_pct": 0.98877, "name": "Roxy-WI - Remote Code Execution", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-31126.yaml" @@ -24429,7 +24429,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-78", "epss": 0.26819, -"epss_pct": 0.97886, +"epss_pct": 0.97888, "name": "Roxy-WI - Remote Code Execution", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-31161.yaml" @@ -24438,7 +24438,7 @@ "cvss": 9.8, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "epss": 0.06479, -"epss_pct": 0.93262, +"epss_pct": 0.9327, "name": "PrestaShop - SQL Injection to Eval Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-31181.yaml" @@ -24448,7 +24448,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "cwe": "CWE-862", "epss": 0.06504, -"epss_pct": 0.93282, +"epss_pct": 0.9329, "name": "Frontend File Manager < 21.3 - Unauthenticated File Renaming", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-3124.yaml" @@ -24458,7 +24458,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "cwe": "CWE-306", "epss": 0.01862, -"epss_pct": 0.77772, +"epss_pct": 0.77798, "name": "ResourceSpace - Metadata Export", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-31260.yaml" @@ -24468,7 +24468,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.10694, -"epss_pct": 0.95489, +"epss_pct": 0.95495, "name": "Gitblit 1.9.3 - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-31268.yaml" @@ -24478,7 +24478,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N", "cwe": "CWE-798", "epss": 0.06987, -"epss_pct": 0.93683, +"epss_pct": 0.9369, "name": "Linear eMerge E3-Series - Information Disclosure", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-31269.yaml" @@ -24487,8 +24487,8 @@ "cvss": 6.1, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", -"epss": 0.05045, -"epss_pct": 0.91696, +"epss": 0.05139, +"epss_pct": 0.91825, "name": "Haraj 3.7 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-31299.yaml" @@ -24498,7 +24498,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.05458, -"epss_pct": 0.92179, +"epss_pct": 0.92189, "name": "SolarView Compact 6.00 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-31373.yaml" @@ -24508,7 +24508,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.11416, -"epss_pct": 0.95691, +"epss_pct": 0.95697, "name": "NEX-Forms Plugin < 7.9.7 - SQL Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-3142.yaml" @@ -24518,7 +24518,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.52721, -"epss_pct": 0.98889, +"epss_pct": 0.98891, "name": "Axigen WebMail - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-31470.yaml" @@ -24538,7 +24538,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-78", "epss": 0.64589, -"epss_pct": 0.99178, +"epss_pct": 0.99181, "name": "Nortek Linear eMerge E3-Series <0.32-08f - Remote Command Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-31499.yaml" @@ -24548,7 +24548,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-287", "epss": 0.2294, -"epss_pct": 0.97582, +"epss_pct": 0.97586, "name": "VMware - Local File Inclusion", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-31656.yaml" @@ -24558,7 +24558,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "cwe": "CWE-611", "epss": 0.08717, -"epss_pct": 0.94757, +"epss_pct": 0.94764, "name": "VMWare Cloud Foundation NSX-V - XML External Entity (XXE)", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-31678.yaml" @@ -24587,7 +24587,7 @@ "cvss": 5.3, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "epss": 0.21657, -"epss_pct": 0.97456, +"epss_pct": 0.9746, "name": "VMware vRealize Log Insight < v8.10.2 - Information Disclosure", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-31711.yaml" @@ -24597,7 +24597,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.15852, -"epss_pct": 0.96641, +"epss_pct": 0.96645, "name": "muhttpd <=1.1.5 - Local Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2022/CVE-2022-31793.yaml" @@ -24607,7 +24607,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-384", "epss": 0.08513, -"epss_pct": 0.9465, +"epss_pct": 0.94657, "name": "Nortek Linear eMerge E3-Series - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-31798.yaml" @@ -24616,8 +24616,8 @@ "cvss": 9.8, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-78", -"epss": 0.87798, -"epss_pct": 0.99749, +"epss": 0.91881, +"epss_pct": 0.99809, "name": "pfSense pfBlockerNG <=2.1..4_26 - OS Command Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-31814.yaml" @@ -24627,7 +24627,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-668", "epss": 0.08698, -"epss_pct": 0.94749, +"epss_pct": 0.94756, "name": "WAVLINK WN535 G3 - Information Disclosure", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-31845.yaml" @@ -24637,7 +24637,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-668", "epss": 0.07429, -"epss_pct": 0.94009, +"epss_pct": 0.94016, "name": "WAVLINK WN535 G3 - Information Disclosure", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-31846.yaml" @@ -24647,7 +24647,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-425", "epss": 0.06555, -"epss_pct": 0.93327, +"epss_pct": 0.93335, "name": "WAVLINK WN579 X3 M79X3.V5030.180719 - Information Disclosure", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-31847.yaml" @@ -24657,7 +24657,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-434", "epss": 0.3283, -"epss_pct": 0.98229, +"epss_pct": 0.98233, "name": "Codoforum 5.1 - Arbitrary File Upload", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-31854.yaml" @@ -24677,7 +24677,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.05042, -"epss_pct": 0.91691, +"epss_pct": 0.91702, "name": "Online Fire Reporting System v1.0 - SQL injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-31974.yaml" @@ -24687,7 +24687,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.04906, -"epss_pct": 0.91485, +"epss_pct": 0.91496, "name": "Online Fire Reporting System v1.0 - SQL injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-31975.yaml" @@ -24697,7 +24697,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.07224, -"epss_pct": 0.93876, +"epss_pct": 0.93883, "name": "Online Fire Reporting System v1.0 - SQL injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-31976.yaml" @@ -24707,7 +24707,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.07224, -"epss_pct": 0.93875, +"epss_pct": 0.93882, "name": "Online Fire Reporting System v1.0 - SQL injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-31977.yaml" @@ -24717,7 +24717,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.07224, -"epss_pct": 0.93875, +"epss_pct": 0.93882, "name": "Online Fire Reporting System v1.0 - SQL injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-31978.yaml" @@ -24767,7 +24767,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.04906, -"epss_pct": 0.91484, +"epss_pct": 0.91496, "name": "Online Fire Reporting System v1.0 - SQL injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-31984.yaml" @@ -24777,7 +24777,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.04563, -"epss_pct": 0.90942, +"epss_pct": 0.90955, "name": "Complete Online Job Search System 1.0 - SQL Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-32007.yaml" @@ -24787,7 +24787,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.04563, -"epss_pct": 0.90943, +"epss_pct": 0.90954, "name": "Complete Online Job Search System 1.0 - SQL Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-32015.yaml" @@ -24797,7 +24797,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.04563, -"epss_pct": 0.90943, +"epss_pct": 0.90955, "name": "Complete Online Job Search System 1.0 - SQL Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-32018.yaml" @@ -24807,7 +24807,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.04923, -"epss_pct": 0.91506, +"epss_pct": 0.91518, "name": "Car Rental Management System 1.0 - SQL Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-32022.yaml" @@ -24817,7 +24817,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.04563, -"epss_pct": 0.90942, +"epss_pct": 0.90954, "name": "Car Rental Management System 1.0 - SQL Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-32024.yaml" @@ -24827,7 +24827,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.04563, -"epss_pct": 0.90943, +"epss_pct": 0.90954, "name": "Car Rental Management System 1.0 - SQL Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-32025.yaml" @@ -24837,7 +24837,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.05308, -"epss_pct": 0.92022, +"epss_pct": 0.92032, "name": "Car Rental Management System 1.0 - SQL Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-32026.yaml" @@ -24847,7 +24847,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.05059, -"epss_pct": 0.91711, +"epss_pct": 0.91721, "name": "Car Rental Management System 1.0 - SQL Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-32028.yaml" @@ -24857,7 +24857,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.07635, -"epss_pct": 0.94138, +"epss_pct": 0.94146, "name": "Hospital Management System 1.0 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-32094.yaml" @@ -24875,7 +24875,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.02407, -"epss_pct": 0.82915, +"epss_pct": 0.82936, "name": "Open edX <2022-06-06 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-32195.yaml" @@ -24895,7 +24895,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-22", "epss": 0.12593, -"epss_pct": 0.95954, +"epss_pct": 0.95959, "name": "Portal do Software Publico Brasileiro i3geo 7.0.5 - Local File Inclusion", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-32409.yaml" @@ -24904,7 +24904,7 @@ "cvss": 6.1, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "epss": 0.0152, -"epss_pct": 0.72794, +"epss_pct": 0.72824, "name": "Microweber <1.3.2 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-3242.yaml" @@ -24923,7 +24923,7 @@ "cvss": 7.5, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "epss": 0.04645, -"epss_pct": 0.9108, +"epss_pct": 0.91091, "name": "Lin CMS Spring Boot - Default JWT Token", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-32430.yaml" @@ -24933,7 +24933,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-601", "epss": 0.02396, -"epss_pct": 0.8284, +"epss_pct": 0.82861, "name": "u5cms v8.3.5 - Open Redirect", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-32444.yaml" @@ -24948,7 +24948,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.04448, -"epss_pct": 0.90733, +"epss_pct": 0.90745, "name": "WWBN AVideo 11.6 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-32770.yaml" @@ -24958,7 +24958,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.04226, -"epss_pct": 0.90303, +"epss_pct": 0.90316, "name": "WWBN AVideo 11.6 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-32771.yaml" @@ -24968,7 +24968,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.03871, -"epss_pct": 0.89457, +"epss_pct": 0.8947, "name": "WWBN AVideo 11.6 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-32772.yaml" @@ -24990,7 +24990,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01551, -"epss_pct": 0.73353, +"epss_pct": 0.73385, "name": "NUUO NVRsolo Video Recorder 03.06.02 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-33119.yaml" @@ -25000,7 +25000,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-863", "epss": 0.14116, -"epss_pct": 0.96303, +"epss_pct": 0.96307, "name": "Powertek Firmware <3.30.30 - Authorization Bypass", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-33174.yaml" @@ -25009,7 +25009,7 @@ "cvss": 9.8, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "epss": 0.03225, -"epss_pct": 0.87363, +"epss_pct": 0.87378, "name": "WordPress Accordions - Unauthenticated Settings Update", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-33198.yaml" @@ -25028,7 +25028,7 @@ "cvss": 7.5, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "epss": 0.02599, -"epss_pct": 0.84253, +"epss_pct": 0.8427, "name": "WordPress MultiSafepay for WooCommerce <=4.13.1 - Arbitrary File Read", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-33901.yaml" @@ -25038,7 +25038,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.04334, -"epss_pct": 0.9051, +"epss_pct": 0.90522, "name": "WordPress Visitor Statistics <=5.7 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-33965.yaml" @@ -25048,7 +25048,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-798", "epss": 0.03193, -"epss_pct": 0.87216, +"epss_pct": 0.8723, "name": "WAVLINK WN530HG4 - Improper Access Control", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-34045.yaml" @@ -25058,7 +25058,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-863", "epss": 0.20351, -"epss_pct": 0.97302, +"epss_pct": 0.97306, "name": "WAVLINK WN533A8 - Improper Access Control", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-34046.yaml" @@ -25068,7 +25068,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-668", "epss": 0.21387, -"epss_pct": 0.9743, +"epss_pct": 0.97434, "name": "WAVLINK WN530HG4 - Improper Access Control", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-34047.yaml" @@ -25078,7 +25078,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.06461, -"epss_pct": 0.93247, +"epss_pct": 0.93256, "name": "Wavlink WN-533A8 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-34048.yaml" @@ -25088,7 +25088,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-552", "epss": 0.0264, -"epss_pct": 0.84511, +"epss_pct": 0.84529, "name": "WAVLINK WN530HG4 - Improper Access Control", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-34049.yaml" @@ -25098,7 +25098,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.02804, -"epss_pct": 0.85495, +"epss_pct": 0.85511, "name": "Software Publico Brasileiro i3geo v7.0.5 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-34093.yaml" @@ -25108,7 +25108,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.02804, -"epss_pct": 0.85494, +"epss_pct": 0.85512, "name": "Software Publico Brasileiro i3geo v7.0.5 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-34094.yaml" @@ -25118,7 +25118,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-829", "epss": 0.03624, -"epss_pct": 0.88707, +"epss_pct": 0.8872, "name": "CuppaCMS v1.0 - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-34121.yaml" @@ -25138,7 +25138,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-287", "epss": 0.42162, -"epss_pct": 0.98594, +"epss_pct": 0.98597, "name": "RWS WorldServer - Authentication Bypass", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-34267.yaml" @@ -25148,7 +25148,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.06562, -"epss_pct": 0.93333, +"epss_pct": 0.93341, "name": "Apache Tomcat Examples Web Application - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-34305.yaml" @@ -25158,7 +25158,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.02299, -"epss_pct": 0.82088, +"epss_pct": 0.82108, "name": "PMB 7.3.10 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-34328.yaml" @@ -25168,7 +25168,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-264", "epss": 0.03225, -"epss_pct": 0.87363, +"epss_pct": 0.87378, "name": "ShortCode Addons - Unauthenticated Options Update", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-34487.yaml" @@ -25178,7 +25178,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-200", "epss": 0.02457, -"epss_pct": 0.8329, +"epss_pct": 0.8331, "name": "Digital Watchdog DW Spectrum Server 4.2.0.32842 - Information Disclosure", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-34534.yaml" @@ -25187,7 +25187,7 @@ "cvss": 7.5, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "epss": 0.0364, -"epss_pct": 0.8876, +"epss_pct": 0.88773, "name": "WAVLINK WN535 G3 - Improper Access Control", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-34576.yaml" @@ -25197,7 +25197,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.04475, -"epss_pct": 0.90775, +"epss_pct": 0.90787, "name": "Hospital Management System 1.0 - SQL Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-34590.yaml" @@ -25217,7 +25217,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-287", "epss": 0.03583, -"epss_pct": 0.88589, +"epss_pct": 0.88604, "name": "WordPress tagDiv Composer < 3.5 - Authentication Bypass", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-3477.yaml" @@ -25227,7 +25227,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N", "cwe": "CWE-20", "epss": 0.03725, -"epss_pct": 0.89022, +"epss_pct": 0.89036, "name": "NotificationX Dropshipping < 4.4 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-3481.yaml" @@ -25237,7 +25237,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.00912, -"epss_pct": 0.57569, +"epss_pct": 0.57612, "name": "WordPress WPB Show Core - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-3484.yaml" @@ -25247,7 +25247,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.0119, -"epss_pct": 0.65754, +"epss_pct": 0.65791, "name": "WordPress Related Posts <2.1.3 - Stored Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-3506.yaml" @@ -25257,7 +25257,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01361, -"epss_pct": 0.69809, +"epss_pct": 0.6984, "name": "kkFileView 4.1.0 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-35151.yaml" @@ -25277,7 +25277,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-798", "epss": 0.14054, -"epss_pct": 0.96292, +"epss_pct": 0.96297, "name": "WAPPLES Web Application Firewall <=6.0 - Hardcoded Credentials", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-35413.yaml" @@ -25287,7 +25287,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.02886, -"epss_pct": 0.85904, +"epss_pct": 0.85919, "name": "H3C SSL VPN <=2022-07-10 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-35416.yaml" @@ -25297,7 +25297,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.0187, -"epss_pct": 0.77864, +"epss_pct": 0.7789, "name": "eShop 3.0.4 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-35493.yaml" @@ -25307,7 +25307,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H", "cwe": "CWE-74", "epss": 0.01391, -"epss_pct": 0.70425, +"epss_pct": 0.70455, "name": "Proxmox - CRLF Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-35507.yaml" @@ -25317,7 +25317,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.04458, -"epss_pct": 0.9075, +"epss_pct": 0.90762, "name": "Moodle LTI module Reflected - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-35653.yaml" @@ -25327,7 +25327,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.00956, -"epss_pct": 0.58981, +"epss_pct": 0.59026, "name": "WordPress ProfileGrid <5.1.1 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-3578.yaml" @@ -25337,7 +25337,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-367", "epss": 0.0315, -"epss_pct": 0.8704, +"epss_pct": 0.87054, "name": "WordPress <= 6.2 - Server Side Request Forgery", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-3590.yaml" @@ -25387,7 +25387,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-862", "epss": 0.12591, -"epss_pct": 0.95953, +"epss_pct": 0.95958, "name": "Omnia MPX 1.5.0+r1 - Local File Inclusion", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-36642.yaml" @@ -25405,7 +25405,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-77", "epss": 0.99077, -"epss_pct": 0.9993, +"epss_pct": 0.99931, "name": "Atlassian Bitbucket - Remote Command Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-36804.yaml" @@ -25415,7 +25415,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "cwe": "CWE-862", "epss": 0.06453, -"epss_pct": 0.93241, +"epss_pct": 0.93249, "name": "Jenkins Git <=4.11.3 - Missing Authorization", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-36883.yaml" @@ -25424,7 +25424,7 @@ "cvss": 7.5, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "epss": 0.071, -"epss_pct": 0.93776, +"epss_pct": 0.93783, "name": "Zoho ManageEngine - getUserAPIKey Authentication Bypass", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-36923.yaml" @@ -25454,7 +25454,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.23061, -"epss_pct": 0.97593, +"epss_pct": 0.97596, "name": "Carel pCOWeb HVAC BACnet Gateway 2.1.0 - Path Traversal", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-37122.yaml" @@ -25464,7 +25464,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01647, -"epss_pct": 0.748, +"epss_pct": 0.7483, "name": "Artica Proxy 4.30.000000 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-37153.yaml" @@ -25474,7 +25474,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-732", "epss": 0.45769, -"epss_pct": 0.98711, +"epss_pct": 0.98714, "name": "Cuppa CMS v1.0 - Remote Code Execution", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-37190.yaml" @@ -25484,7 +25484,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-829", "epss": 0.02798, -"epss_pct": 0.8546, +"epss_pct": 0.85476, "name": "Cuppa CMS v1.0 - Authenticated Local File Inclusion", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-37191.yaml" @@ -25494,7 +25494,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.03104, -"epss_pct": 0.86845, +"epss_pct": 0.86861, "name": "Shirne CMS 1.2.0 - Local File Inclusion", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-37299.yaml" @@ -25504,7 +25504,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.06132, -"epss_pct": 0.92943, +"epss_pct": 0.92951, "name": "phpMyFAQ < 3.1.8 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-3766.yaml" @@ -25514,7 +25514,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.03663, -"epss_pct": 0.8885, +"epss_pct": 0.88863, "name": "WordPress WPSmartContracts <1.3.12 - SQL Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-3768.yaml" @@ -25523,7 +25523,7 @@ "cvss": 8.8, "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "epss": 0.02641, -"epss_pct": 0.84514, +"epss_pct": 0.84532, "name": "HP Switch - Authentication Bypass", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-37932.yaml" @@ -25532,7 +25532,7 @@ "cvss": 8.8, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "epss": 0.02485, -"epss_pct": 0.83469, +"epss_pct": 0.83489, "name": "IBAX - SQL Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-3800.yaml" @@ -25542,7 +25542,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L", "cwe": "CWE-79", "epss": 0.01594, -"epss_pct": 0.73984, +"epss_pct": 0.74014, "name": "Jeg Elementor Kit < 2.5.7 - Unauthenticated Settings Update", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-3805.yaml" @@ -25552,7 +25552,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.54072, -"epss_pct": 0.98929, +"epss_pct": 0.98931, "name": "KeySight RF - smsRestoreDatabaseZip UNC path to Remote Code Execution", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-38130.yaml" @@ -25562,7 +25562,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-601", "epss": 0.01403, -"epss_pct": 0.7065, +"epss_pct": 0.70682, "name": "RStudio Connect - Open Redirect", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-38131.yaml" @@ -25572,7 +25572,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01134, -"epss_pct": 0.64222, +"epss_pct": 0.64261, "name": "Cuppa CMS v1.0 - Cross Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-38295.yaml" @@ -25582,7 +25582,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-434", "epss": 0.04053, -"epss_pct": 0.89927, +"epss_pct": 0.89939, "name": "Cuppa CMS v1.0 - Arbitrary File Upload", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-38296.yaml" @@ -25592,7 +25592,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.02669, -"epss_pct": 0.847, +"epss_pct": 0.84718, "name": "ServiceNow - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-38463.yaml" @@ -25602,7 +25602,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.0081, -"epss_pct": 0.54421, +"epss_pct": 0.54464, "name": "CRM Perks Forms < 1.1.1 - Cross Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-38467.yaml" @@ -25612,7 +25612,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.02512, -"epss_pct": 0.83658, +"epss_pct": 0.83677, "name": "Academy Learning Management System <5.9.1 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-38553.yaml" @@ -25622,7 +25622,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.04305, -"epss_pct": 0.90456, +"epss_pct": 0.90468, "name": "Nortek Linear eMerge E3-Series - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-38627.yaml" @@ -25632,7 +25632,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.04917, -"epss_pct": 0.91497, +"epss_pct": 0.91509, "name": "Hospital Management System 1.0 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-38637.yaml" @@ -25642,7 +25642,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01302, -"epss_pct": 0.68476, +"epss_pct": 0.68512, "name": "Froxlor < 0.10.38.2. - HTML Injection", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-3869.yaml" @@ -25652,7 +25652,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.03928, -"epss_pct": 0.8962, +"epss_pct": 0.89633, "name": "Zaver - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-38794.yaml" @@ -25662,7 +25662,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-89", "epss": 0.02603, -"epss_pct": 0.84272, +"epss_pct": 0.84289, "name": "AeroCMS 0.1.1 - SQL Injection", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-38812.yaml" @@ -25672,7 +25672,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-306", "epss": 0.03206, -"epss_pct": 0.87274, +"epss_pct": 0.87289, "name": "Dapr Dashboard 0.1.0-0.10.0 - Improper Access Control", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-38817.yaml" @@ -25682,7 +25682,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-611", "epss": 0.09803, -"epss_pct": 0.95202, +"epss_pct": 0.95208, "name": "G\u00fcralp MAN-EAM-0003 3.2.4 - XML External Entity (XXE)", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-38840.yaml" @@ -25692,7 +25692,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-306", "epss": 0.03066, -"epss_pct": 0.86701, +"epss_pct": 0.86717, "name": "Free5gc 3.2.1 - Information Disclosure", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-38870.yaml" @@ -25702,7 +25702,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01089, -"epss_pct": 0.63012, +"epss_pct": 0.63055, "name": "ServiceNow - Cross-site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-39048.yaml" @@ -25712,7 +25712,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.00897, -"epss_pct": 0.57103, +"epss_pct": 0.57144, "name": "WordPress Helloprint <1.4.7 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-3908.yaml" @@ -25722,7 +25722,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.06314, -"epss_pct": 0.93119, +"epss_pct": 0.93126, "name": "LISTSERV 17 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-39195.yaml" @@ -25731,8 +25731,8 @@ "cvss": 6.1, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", -"epss": 0.01472, -"epss_pct": 0.71965, +"epss": 0.01524, +"epss_pct": 0.72899, "name": "Mailcow Dockerized Swagger UI - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-39258.yaml" @@ -25742,7 +25742,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.00869, -"epss_pct": 0.56272, +"epss_pct": 0.56315, "name": "WordPress Essential Real Estate <3.9.6 - Authenticated Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-3933.yaml" @@ -25752,7 +25752,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.00869, -"epss_pct": 0.56273, +"epss_pct": 0.56315, "name": "WordPress FlatPM <3.0.13 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-3934.yaml" @@ -25762,7 +25762,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-611", "epss": 0.08413, -"epss_pct": 0.94588, +"epss_pct": 0.94595, "name": "Sophos Mobile managed on-premises - XML External Entity Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-3980.yaml" @@ -25772,7 +25772,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-434", "epss": 0.04493, -"epss_pct": 0.90808, +"epss_pct": 0.9082, "name": "WordPress Booking Calendar <3.2.2 - Arbitrary File Upload", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-3982.yaml" @@ -25791,7 +25791,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-862", "epss": 0.2568, -"epss_pct": 0.97812, +"epss_pct": 0.97815, "name": "Jira Netic Group Export <1.0.3 - Missing Authorization", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-39960.yaml" @@ -25821,7 +25821,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.20693, -"epss_pct": 0.97355, +"epss_pct": 0.97358, "name": "Simple Task Managing System v1.0 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-40032.yaml" @@ -25831,7 +25831,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01199, -"epss_pct": 0.65976, +"epss_pct": 0.66012, "name": "Flatpress < v1.2.1 - Cross Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-40047.yaml" @@ -25841,7 +25841,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "cwe": "CWE-601", "epss": 0.02473, -"epss_pct": 0.83389, +"epss_pct": 0.83409, "name": "Labstack Echo 4.8.0 - Open Redirect", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-40083.yaml" @@ -25861,7 +25861,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01479, -"epss_pct": 0.72086, +"epss_pct": 0.72117, "name": "Kae's File Manager <=1.4.7 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-40359.yaml" @@ -25871,7 +25871,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-22", "epss": 0.02224, -"epss_pct": 0.81483, +"epss_pct": 0.81505, "name": "ZZCMS 2022 - Path Information Disclosure", "severity": "low", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-40443.yaml" @@ -25881,7 +25881,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.04756, -"epss_pct": 0.91253, +"epss_pct": 0.91264, "name": "WP User <= 7.0 - Unauthenticated SQLi", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-4049.yaml" @@ -25891,7 +25891,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.04756, -"epss_pct": 0.91253, +"epss_pct": 0.91264, "name": "WordPress JoomSport <5.2.8 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-4050.yaml" @@ -25901,7 +25901,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-425", "epss": 0.0146, -"epss_pct": 0.71737, +"epss_pct": 0.71767, "name": "Autoptimize < 3.1.0 - Information Disclosure", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-4057.yaml" @@ -25911,7 +25911,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.04795, -"epss_pct": 0.91312, +"epss_pct": 0.91323, "name": "Cryptocurrency Widgets Pack < 2.0 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-4059.yaml" @@ -25921,7 +25921,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-94", "epss": 0.42723, -"epss_pct": 0.98616, +"epss_pct": 0.98618, "name": "WordPress User Post Gallery <=2.19 - Remote Code Execution", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-4060.yaml" @@ -25939,7 +25939,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-78", "epss": 0.17107, -"epss_pct": 0.9686, +"epss_pct": 0.96864, "name": "pfSense pfBlockerNG - OS Command Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-40624.yaml" @@ -25949,7 +25949,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-22", "epss": 0.09519, -"epss_pct": 0.95096, +"epss_pct": 0.95102, "name": "WordPress InPost Gallery <2.1.4.1 - Local File Inclusion", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-4063.yaml" @@ -25969,7 +25969,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.04197, -"epss_pct": 0.90239, +"epss_pct": 0.90251, "name": "Laravel Filemanager v2.5.1 - Local File Inclusion", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-40734.yaml" @@ -25979,7 +25979,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-287", "epss": 0.28802, -"epss_pct": 0.98009, +"epss_pct": 0.98011, "name": "Tenda AC1200 V-W15Ev2 - Authentication Bypass", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-40843.yaml" @@ -25989,7 +25989,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01157, -"epss_pct": 0.64861, +"epss_pct": 0.64898, "name": "kkFileView 4.1.0 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-40879.yaml" @@ -25999,7 +25999,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-77", "epss": 0.29722, -"epss_pct": 0.98062, +"epss_pct": 0.98065, "name": "SolarView 6.00 - Remote Command Execution", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-40881.yaml" @@ -26014,7 +26014,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.04955, -"epss_pct": 0.91565, +"epss_pct": 0.91576, "name": "WordPress IWS Geo Form Fields <=1.0 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-4117.yaml" @@ -26034,7 +26034,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-552", "epss": 0.02941, -"epss_pct": 0.86159, +"epss_pct": 0.86177, "name": "WordPress Welcart e-Commerce <2.8.5 - Arbitrary File Access", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-4140.yaml" @@ -26044,7 +26044,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N", "cwe": "CWE-918", "epss": 0.04088, -"epss_pct": 0.90005, +"epss_pct": 0.90017, "name": "perfSONAR 4.x <= 4.4.4 - Server-Side Request Forgery", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-41412.yaml" @@ -26054,7 +26054,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.05187, -"epss_pct": 0.9188, +"epss_pct": 0.91891, "name": "ReQlogic v11.3 - Cross Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-41441.yaml" @@ -26064,7 +26064,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01054, -"epss_pct": 0.62032, +"epss_pct": 0.62072, "name": "RPCMS 3.0.2 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-41473.yaml" @@ -26084,7 +26084,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-204", "epss": 0.20041, -"epss_pct": 0.97254, +"epss_pct": 0.97258, "name": "Ghost CMS - User Enumeration", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-41697.yaml" @@ -26104,7 +26104,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-22", "epss": 0.05212, -"epss_pct": 0.91917, +"epss_pct": 0.91927, "name": "Welcart eCommerce <=2.7.7 - Local File Inclusion", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-41840.yaml" @@ -26113,8 +26113,8 @@ "cvss": 4.8, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", -"epss": 0.02505, -"epss_pct": 0.83609, +"epss": 0.02577, +"epss_pct": 0.84125, "name": "Backdrop CMS version 1.23.0 - Stored Cross Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-42094.yaml" @@ -26124,7 +26124,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01947, -"epss_pct": 0.78767, +"epss_pct": 0.78791, "name": "Backdrop CMS version 1.23.0 - Cross Site Scripting (Stored)", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-42095.yaml" @@ -26134,7 +26134,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.02016, -"epss_pct": 0.79539, +"epss_pct": 0.79563, "name": "Backdrop CMS version 1.23.0 - Cross Site Scripting (Stored)", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-42096.yaml" @@ -26144,7 +26144,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.0093, -"epss_pct": 0.58142, +"epss_pct": 0.58188, "name": "Liferay Portal - Cross-site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-42118.yaml" @@ -26154,7 +26154,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-918", "epss": 0.02334, -"epss_pct": 0.82381, +"epss_pct": 0.82403, "name": "kkFileView 4.0 - Server-Side Request Forgery", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-42149.yaml" @@ -26173,7 +26173,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-287", "epss": 0.42704, -"epss_pct": 0.98614, +"epss_pct": 0.98617, "name": "Tenda 11N - Authentication Bypass", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-42233.yaml" @@ -26192,7 +26192,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.00851, -"epss_pct": 0.55693, +"epss_pct": 0.55735, "name": "WordPress WP-Ban <1.69.1 - Stored Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-4260.yaml" @@ -26202,7 +26202,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01129, -"epss_pct": 0.64104, +"epss_pct": 0.64142, "name": "CandidATS 3.0.0 - Cross-Site Scripting.", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-42746.yaml" @@ -26212,7 +26212,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01082, -"epss_pct": 0.62831, +"epss_pct": 0.62872, "name": "CandidATS 3.0.0 - Cross-Site Scripting.", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-42747.yaml" @@ -26222,7 +26222,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01082, -"epss_pct": 0.62831, +"epss_pct": 0.62872, "name": "CandidATS 3.0.0 - Cross-Site Scripting.", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-42748.yaml" @@ -26232,7 +26232,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01082, -"epss_pct": 0.62831, +"epss_pct": 0.62873, "name": "CandidATS 3.0.0 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-42749.yaml" @@ -26252,7 +26252,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.00897, -"epss_pct": 0.57103, +"epss_pct": 0.57144, "name": "Show all comments < 7.0.1 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-4295.yaml" @@ -26270,7 +26270,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.00902, -"epss_pct": 0.57269, +"epss_pct": 0.57314, "name": "WordPress Sunshine Photo Cart <2.9.15 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-4301.yaml" @@ -26280,7 +26280,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01366, -"epss_pct": 0.69916, +"epss_pct": 0.69948, "name": "OpenCATS 0.9.6 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-43014.yaml" @@ -26290,7 +26290,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01366, -"epss_pct": 0.69917, +"epss_pct": 0.69948, "name": "OpenCATS 0.9.6 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-43015.yaml" @@ -26300,7 +26300,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01425, -"epss_pct": 0.71076, +"epss_pct": 0.71105, "name": "OpenCATS 0.9.6 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-43016.yaml" @@ -26310,7 +26310,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01425, -"epss_pct": 0.71076, +"epss_pct": 0.71105, "name": "OpenCATS 0.9.6 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-43017.yaml" @@ -26320,7 +26320,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01425, -"epss_pct": 0.71076, +"epss_pct": 0.71104, "name": "OpenCATS 0.9.6 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-43018.yaml" @@ -26330,7 +26330,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-269", "epss": 0.38625, -"epss_pct": 0.9847, +"epss_pct": 0.98473, "name": "Login as User or Customer < 3.3 - Privilege Escalation", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-4305.yaml" @@ -26340,7 +26340,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.00841, -"epss_pct": 0.55373, +"epss_pct": 0.55415, "name": "WordPress Panda Pods Repeater Field <1.5.4 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-4306.yaml" @@ -26350,7 +26350,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "cwe": "CWE-918", "epss": 0.0197, -"epss_pct": 0.7901, +"epss_pct": 0.79034, "name": "kkFileView 4.1.0 - Server-Side Request Forgery", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-43140.yaml" @@ -26360,7 +26360,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.00918, -"epss_pct": 0.57761, +"epss_pct": 0.57808, "name": "Rukovoditel <= 3.2.1 - Cross Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-43164.yaml" @@ -26370,7 +26370,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.00918, -"epss_pct": 0.57761, +"epss_pct": 0.57809, "name": "Rukovoditel <= 3.2.1 - Cross Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-43165.yaml" @@ -26380,7 +26380,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.00918, -"epss_pct": 0.57761, +"epss_pct": 0.57808, "name": "Rukovoditel <= 3.2.1 - Cross Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-43166.yaml" @@ -26390,7 +26390,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.00976, -"epss_pct": 0.5968, +"epss_pct": 0.59723, "name": "Rukovoditel <= 3.2.1 - Cross Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-43167.yaml" @@ -26400,7 +26400,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.00918, -"epss_pct": 0.5776, +"epss_pct": 0.57809, "name": "Rukovoditel <= 3.2.1 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-43169.yaml" @@ -26410,7 +26410,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.00918, -"epss_pct": 0.57761, +"epss_pct": 0.57808, "name": "Rukovoditel <= 3.2.1 - Cross Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-43170.yaml" @@ -26420,7 +26420,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01009, -"epss_pct": 0.60674, +"epss_pct": 0.60716, "name": "Rukovoditel <= 3.2.1 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-43185.yaml" @@ -26430,7 +26430,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.00891, -"epss_pct": 0.56911, +"epss_pct": 0.56954, "name": "WordPress Events Calendar <1.4.5 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-4320.yaml" @@ -26440,7 +26440,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01193, -"epss_pct": 0.65831, +"epss_pct": 0.65868, "name": "PDF Generator for WordPress < 1.1.2 - Cross Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-4321.yaml" @@ -26450,7 +26450,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.00902, -"epss_pct": 0.5727, +"epss_pct": 0.57314, "name": "WordPress Post Status Notifier Lite <1.10.1 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-4325.yaml" @@ -26460,7 +26460,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-434", "epss": 0.04427, -"epss_pct": 0.90685, +"epss_pct": 0.90697, "name": "WooCommerce Checkout Field Manager < 18.0 - Arbitrary File Upload", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-4328.yaml" @@ -26490,7 +26490,7 @@ "cvss": 9.8, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "epss": 0.0289, -"epss_pct": 0.85929, +"epss_pct": 0.85944, "name": "Mingsoft MCMS - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-4375.yaml" @@ -26519,7 +26519,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.03616, -"epss_pct": 0.88687, +"epss_pct": 0.887, "name": "WebTareas 2.4p5 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-44290.yaml" @@ -26529,7 +26529,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.03616, -"epss_pct": 0.88687, +"epss_pct": 0.88701, "name": "WebTareas 2.4p5 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-44291.yaml" @@ -26538,7 +26538,7 @@ "cvss": 7.5, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "epss": 0.02734, -"epss_pct": 0.8507, +"epss_pct": 0.85088, "name": "WAVLINK Quantum D4G (WL-WN531G3) - Information Disclosure", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-44356.yaml" @@ -26548,7 +26548,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.04756, -"epss_pct": 0.91252, +"epss_pct": 0.91264, "name": "WordPress Fontsy <=1.8.6 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-4447.yaml" @@ -26558,7 +26558,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.02249, -"epss_pct": 0.81679, +"epss_pct": 0.817, "name": "Cryptocurrency Widgets Pack <= 1.8.1 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-44588.yaml" @@ -26568,7 +26568,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.02486, -"epss_pct": 0.83479, +"epss_pct": 0.835, "name": "PrestaShop lgcookieslaw - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-44727.yaml" @@ -26588,7 +26588,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01046, -"epss_pct": 0.61795, +"epss_pct": 0.61835, "name": "Rukovoditel <= 3.2.1 - Cross Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-44944.yaml" @@ -26598,7 +26598,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01037, -"epss_pct": 0.6154, +"epss_pct": 0.61581, "name": "Rukovoditel <= 3.2.1 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-44946.yaml" @@ -26608,7 +26608,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.00969, -"epss_pct": 0.59446, +"epss_pct": 0.5949, "name": "Rukovoditel <= 3.2.1 - Cross Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-44947.yaml" @@ -26618,7 +26618,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.00903, -"epss_pct": 0.57313, +"epss_pct": 0.57358, "name": "Rukovoditel <= 3.2.1 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-44948.yaml" @@ -26628,7 +26628,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.00945, -"epss_pct": 0.58643, +"epss_pct": 0.58688, "name": "Rukovoditel <= 3.2.1 - Cross Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-44949.yaml" @@ -26638,7 +26638,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.00945, -"epss_pct": 0.58644, +"epss_pct": 0.58688, "name": "Rukovoditel <= 3.2.1 - Cross Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-44950.yaml" @@ -26648,7 +26648,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.00945, -"epss_pct": 0.58643, +"epss_pct": 0.58688, "name": "Rukovoditel <= 3.2.1 - Cross Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-44951.yaml" @@ -26658,7 +26658,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.00911, -"epss_pct": 0.57552, +"epss_pct": 0.57596, "name": "Rukovoditel <= 3.2.1 - Cross Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-44952.yaml" @@ -26668,7 +26668,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01046, -"epss_pct": 0.61795, +"epss_pct": 0.61835, "name": "WebTareas 2.4p5 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-44957.yaml" @@ -26678,7 +26678,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01024, -"epss_pct": 0.61122, +"epss_pct": 0.61163, "name": "WBCE CMS v1.5.4 - Cross Site Scripting (Stored)", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-45037.yaml" @@ -26688,7 +26688,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01024, -"epss_pct": 0.61122, +"epss_pct": 0.61163, "name": "WBCE CMS v1.5.4 - Cross Site Scripting (Stored)", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-45038.yaml" @@ -26698,7 +26698,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.03092, -"epss_pct": 0.86801, +"epss_pct": 0.86817, "name": "Linx Sphere - Directory Traversal", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-45269.yaml" @@ -26707,7 +26707,7 @@ "cvss": 7.5, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "epss": 0.38083, -"epss_pct": 0.98448, +"epss_pct": 0.98451, "name": "Download Monitor <= 4.7.60 - Sensitive Information Exposure", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-45354.yaml" @@ -26717,7 +26717,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "cwe": "CWE-918", "epss": 0.41762, -"epss_pct": 0.98584, +"epss_pct": 0.98586, "name": "WordPress Paytm Payment Gateway <=2.7.0 - Server-Side Request Forgery", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-45362.yaml" @@ -26746,7 +26746,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.02327, -"epss_pct": 0.82318, +"epss_pct": 0.8234, "name": "WordPress Paytm Payment Gateway <=2.7.3 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-45805.yaml" @@ -26756,7 +26756,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:L", "cwe": "CWE-89", "epss": 0.04269, -"epss_pct": 0.90392, +"epss_pct": 0.90404, "name": "LearnPress Plugin < 4.2.0 - Unauthenticated Time-Based Blind SQLi", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-45808.yaml" @@ -26766,7 +26766,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-918", "epss": 0.37673, -"epss_pct": 0.98431, +"epss_pct": 0.98433, "name": "WordPress PhonePe Payment Solutions <=1.0.15 - Server-Side Request Forgery", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-45835.yaml" @@ -26781,7 +26781,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-601", "epss": 0.0199, -"epss_pct": 0.79233, +"epss_pct": 0.79258, "name": "ILIAS eLearning <7.16 - Open Redirect", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-45917.yaml" @@ -26791,7 +26791,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-306", "epss": 0.51696, -"epss_pct": 0.98863, +"epss_pct": 0.98866, "name": "KubeView <=0.1.31 - Information Disclosure", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-45933.yaml" @@ -26801,7 +26801,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-434", "epss": 0.38953, -"epss_pct": 0.98482, +"epss_pct": 0.98485, "name": "WBCE CMS v1.5.4 - Remote Code Execution", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-46020.yaml" @@ -26811,7 +26811,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.0431, -"epss_pct": 0.90466, +"epss_pct": 0.90478, "name": "Helmet Store Showroom v1.0 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-46071.yaml" @@ -26821,7 +26821,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01235, -"epss_pct": 0.66965, +"epss_pct": 0.66997, "name": "Helmet Store Showroom - Cross Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-46073.yaml" @@ -26840,7 +26840,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01739, -"epss_pct": 0.76116, +"epss_pct": 0.76143, "name": "Linear eMerge E3-Series - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-46381.yaml" @@ -26850,7 +26850,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.37729, -"epss_pct": 0.98436, +"epss_pct": 0.98438, "name": "Bangresto - SQL Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-46443.yaml" @@ -26870,7 +26870,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01543, -"epss_pct": 0.73197, +"epss_pct": 0.73228, "name": "NexusPHP <1.7.33 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-46888.yaml" @@ -26880,7 +26880,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01084, -"epss_pct": 0.62878, +"epss_pct": 0.62919, "name": "kkFileView 4.1.0 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-46934.yaml" @@ -26890,7 +26890,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-863", "epss": 0.06253, -"epss_pct": 0.93059, +"epss_pct": 0.93066, "name": "Masa CMS - Authentication Bypass", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-47002.yaml" @@ -26899,8 +26899,8 @@ "cvss": 9.8, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-863", -"epss": 0.03614, -"epss_pct": 0.88679, +"epss": 0.03644, +"epss_pct": 0.88798, "name": "Mura CMS <10.0.580 - Authentication Bypass", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-47003.yaml" @@ -26909,7 +26909,7 @@ "cvss": 7.5, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "epss": 0.59407, -"epss_pct": 0.99052, +"epss_pct": 0.99054, "name": "Smart Office Web 20.28 - Information Disclosure", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-47075.yaml" @@ -26919,7 +26919,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.1018, -"epss_pct": 0.95327, +"epss_pct": 0.95334, "name": "Apache OFBiz < 18.12.07 - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-47501.yaml" @@ -26929,7 +26929,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-434", "epss": 0.05063, -"epss_pct": 0.91718, +"epss_pct": 0.91729, "name": "LearnPress Plugin < 4.2.0 - Local File Inclusion", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-47615.yaml" @@ -26939,7 +26939,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-22", "epss": 0.28254, -"epss_pct": 0.97977, +"epss_pct": 0.97979, "name": "Thinkphp Lang - Local File Inclusion", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-47945.yaml" @@ -26968,7 +26968,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.0137, -"epss_pct": 0.6998, +"epss_pct": 0.70012, "name": "OpenCATS 0.9.7 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-48012.yaml" @@ -26977,7 +26977,7 @@ "cvss": 7.5, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "epss": 0.03096, -"epss_pct": 0.86817, +"epss_pct": 0.86833, "name": "Wavlink WL-WN533A8 M33A8.V5030.190716 - Information Disclosure", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-48164.yaml" @@ -26987,7 +26987,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-284", "epss": 0.03284, -"epss_pct": 0.87594, +"epss_pct": 0.87609, "name": "Wavlink - Improper Access Control", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-48165.yaml" @@ -26996,7 +26996,7 @@ "cvss": 7.5, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "epss": 0.02823, -"epss_pct": 0.85599, +"epss_pct": 0.85616, "name": "Wavlink WL-WN530HG4 M30HG4.V5030.201217 - Information Disclosure", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-48166.yaml" @@ -27006,7 +27006,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.06608, -"epss_pct": 0.9337, +"epss_pct": 0.93379, "name": "Yahoo User Interface library (YUI2) TreeView v2.8.2 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-48197.yaml" @@ -27021,7 +27021,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-22", "epss": 0.56787, -"epss_pct": 0.98992, +"epss_pct": 0.98994, "name": "Sunflower Simple and Personal 1.0.1.43315 - Remote Code Execution", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-48323.yaml" @@ -27031,7 +27031,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.00858, -"epss_pct": 0.55948, +"epss_pct": 0.55992, "name": "WordPress BackupBuddy <8.8.3 - Cross Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-4897.yaml" @@ -27041,7 +27041,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "cwe": "CWE-862", "epss": 0.01084, -"epss_pct": 0.62899, +"epss_pct": 0.6294, "name": "WCFM Membership <= 2.10.0 - Broken Access Control", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-4940.yaml" @@ -27051,7 +27051,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.16223, -"epss_pct": 0.96715, +"epss_pct": 0.96718, "name": "Sassy Social Share <= 3.3.3 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-4971.yaml" @@ -27068,7 +27068,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.03911, -"epss_pct": 0.89556, +"epss_pct": 0.89568, "name": "WordPress 10Web Map Builder < 1.0.73 - Unauthenticated SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-0037.yaml" @@ -27078,7 +27078,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01726, -"epss_pct": 0.75937, +"epss_pct": 0.75963, "name": "Simple URLs < 115 - Cross Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-0099.yaml" @@ -27097,7 +27097,7 @@ "cvss": 7.5, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "epss": 0.55459, -"epss_pct": 0.98962, +"epss_pct": 0.98964, "name": "Extensive VC Addons for WPBakery page builder < 1.9.1 - Unauthenticated RCE", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-0159.yaml" @@ -27107,7 +27107,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01347, -"epss_pct": 0.69478, +"epss_pct": 0.69512, "name": "WordPress Tutor LMS <2.0.10 - Cross Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-0236.yaml" @@ -27117,7 +27117,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.04356, -"epss_pct": 0.90551, +"epss_pct": 0.90563, "name": "WordPress WP TripAdvisor Review Slider <10.8 - Authenticated SQL Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-0261.yaml" @@ -27137,7 +27137,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.00881, -"epss_pct": 0.56655, +"epss_pct": 0.56697, "name": "ShortPixel Adaptive Images < 3.6.3 - Cross Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-0334.yaml" @@ -27147,7 +27147,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.42928, -"epss_pct": 0.98621, +"epss_pct": 0.98624, "name": "WP Helper Lite < 4.3 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-0448.yaml" @@ -27157,7 +27157,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.0085, -"epss_pct": 0.55658, +"epss_pct": 0.557, "name": "Membership Database <= 1.0 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-0514.yaml" @@ -27167,7 +27167,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.06118, -"epss_pct": 0.92931, +"epss_pct": 0.9294, "name": "Online Security Guards Hiring System - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-0527.yaml" @@ -27177,7 +27177,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-601", "epss": 0.24263, -"epss_pct": 0.97694, +"epss_pct": 0.97697, "name": "WordPress Pie Register <3.8.2.3 - Open Redirect", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-0552.yaml" @@ -27187,7 +27187,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.44268, -"epss_pct": 0.98663, +"epss_pct": 0.98666, "name": "Bank Locker Management System v1.0 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-0562.yaml" @@ -27197,7 +27197,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.37608, -"epss_pct": 0.98428, +"epss_pct": 0.98431, "name": "Bank Locker Management System - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-0563.yaml" @@ -27207,7 +27207,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.04234, -"epss_pct": 0.90323, +"epss_pct": 0.90335, "name": "WP Visitor Statistics (Real Time Traffic) < 6.9 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-0600.yaml" @@ -27217,7 +27217,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.00886, -"epss_pct": 0.56768, +"epss_pct": 0.5681, "name": "Twittee Text Tweet <= 1.0.8 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-0602.yaml" @@ -27227,7 +27227,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.05141, -"epss_pct": 0.91816, +"epss_pct": 0.91827, "name": "Slimstat Analytics < 4.9.3.3 Subscriber - SQL Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-0630.yaml" @@ -27247,7 +27247,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01532, -"epss_pct": 0.72995, +"epss_pct": 0.73026, "name": "phpIPAM 1.5.1 - Cross-site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-0676.yaml" @@ -27257,7 +27257,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-862", "epss": 0.37304, -"epss_pct": 0.98416, +"epss_pct": 0.98419, "name": "PHPIPAM = 13.10.8 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-29506.yaml" @@ -28897,7 +28897,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.0125, -"epss_pct": 0.67314, +"epss_pct": 0.67347, "name": "Purchase Order Management v1.0 - Cross Site Scripting (Reflected)", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-29623.yaml" @@ -28928,7 +28928,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-288", "epss": 0.46242, -"epss_pct": 0.98724, +"epss_pct": 0.98726, "name": "Miniorange Social Login and Register <= 7.6.3 - Authentication Bypass", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-2982.yaml" @@ -28938,7 +28938,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-74", "epss": 0.05552, -"epss_pct": 0.92293, +"epss_pct": 0.92303, "name": "Embedded JavaScript(EJS) 3.1.6 - Template Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-29827.yaml" @@ -28947,7 +28947,7 @@ "cvss": 9.8, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "epss": 0.42814, -"epss_pct": 0.98619, +"epss_pct": 0.98621, "name": "Abandoned Cart Lite for WooCommerce - Authentication Bypass", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2023/CVE-2023-2986.yaml" @@ -28957,7 +28957,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.04736, -"epss_pct": 0.91226, +"epss_pct": 0.91237, "name": "Nuovo Spreadsheet Reader 0.5.11 - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-29887.yaml" @@ -28967,7 +28967,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "cwe": "CWE-276", "epss": 0.60221, -"epss_pct": 0.9907, +"epss_pct": 0.99072, "name": "SolarView Compact <= 6.00 - Local File Inclusion", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-29919.yaml" @@ -28977,7 +28977,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "cwe": "CWE-1188", "epss": 0.02998, -"epss_pct": 0.86414, +"epss_pct": 0.8643, "name": "PowerJob V4.3.1 - Authentication Bypass", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-29922.yaml" @@ -28987,7 +28987,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-276", "epss": 0.09545, -"epss_pct": 0.95106, +"epss_pct": 0.95112, "name": "PowerJob <=4.3.2 - Unauthenticated Access", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-29923.yaml" @@ -28997,7 +28997,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-78", "epss": 0.25889, -"epss_pct": 0.9783, +"epss_pct": 0.97833, "name": "TOTOLink - Unauthenticated Command Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-30013.yaml" @@ -29007,7 +29007,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-918", "epss": 0.02214, -"epss_pct": 0.81396, +"epss_pct": 0.81417, "name": "Imgproxy <= 3.14.0 - Server-side request forgery (SSRF)", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-30019.yaml" @@ -29017,7 +29017,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.03849, -"epss_pct": 0.89394, +"epss_pct": 0.89407, "name": "PrestaShop leocustomajax 1.0 & 1.0.0 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-30150.yaml" @@ -29027,7 +29027,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.02678, -"epss_pct": 0.84754, +"epss_pct": 0.84773, "name": "PrestaShop 'possearchproducts' <= 1.7 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-30192.yaml" @@ -29037,7 +29037,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.32413, -"epss_pct": 0.98207, +"epss_pct": 0.98209, "name": "Prestashop posstaticfooter <= 1.0.0 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-30194.yaml" @@ -29047,7 +29047,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01173, -"epss_pct": 0.65314, +"epss_pct": 0.65351, "name": "OURPHP <= 7.2.0 - Cross Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-30210.yaml" @@ -29057,7 +29057,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.08115, -"epss_pct": 0.94423, +"epss_pct": 0.9443, "name": "OURPHP <= 7.2.0 - Cross Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-30212.yaml" @@ -29067,7 +29067,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.08731, -"epss_pct": 0.94766, +"epss_pct": 0.94773, "name": "Webkul QloApps 1.5.2 - Cross-site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-30256.yaml" @@ -29077,7 +29077,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-78", "epss": 0.9425, -"epss_pct": 0.99842, +"epss_pct": 0.99843, "name": "MagnusBilling - Remote Code Execution", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-30258.yaml" @@ -29087,7 +29087,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "cwe": "CWE-502", "epss": 0.02569, -"epss_pct": 0.84049, +"epss_pct": 0.84068, "name": "Cacti < 1.2.25 Insecure Deserialization", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-30534.yaml" @@ -29106,7 +29106,7 @@ "cvss": 9.8, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "epss": 0.05505, -"epss_pct": 0.92236, +"epss_pct": 0.92246, "name": "MStore API < 3.9.8 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-3077.yaml" @@ -29116,7 +29116,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.38768, -"epss_pct": 0.98478, +"epss_pct": 0.98479, "name": "Advanced Custom Fields < 6.1.6 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-30777.yaml" @@ -29126,7 +29126,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.03995, -"epss_pct": 0.89795, +"epss_pct": 0.89807, "name": "Tree Page View Plugin < 1.6.7 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-30868.yaml" @@ -29136,7 +29136,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-287", "epss": 0.031, -"epss_pct": 0.86833, +"epss_pct": 0.86848, "name": "Easy Digital Downloads - Privilege Escalation", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-30869.yaml" @@ -29145,7 +29145,7 @@ "cvss": 5.3, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "epss": 0.06583, -"epss_pct": 0.93351, +"epss_pct": 0.9336, "name": "Moodle - Cross-Site Scripting/Remote Code Execution", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-30943.yaml" @@ -29162,7 +29162,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.05574, -"epss_pct": 0.92323, +"epss_pct": 0.92333, "name": "Repetier Server - Directory Traversal", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-31059.yaml" @@ -29180,7 +29180,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-601", "epss": 0.00734, -"epss_pct": 0.5192, +"epss_pct": 0.51968, "name": "Protect WP Admin < 4.0 - Unauthenticated Protection Bypass", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-3139.yaml" @@ -29198,7 +29198,7 @@ "cvss": 9.8, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "epss": 0.46304, -"epss_pct": 0.98726, +"epss_pct": 0.98728, "name": "TimeKeeper by FSMLabs - Remote Code Execution", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-31465.yaml" @@ -29207,7 +29207,7 @@ "cvss": 7.5, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "epss": 0.29699, -"epss_pct": 0.98063, +"epss_pct": 0.98065, "name": "GL.iNET SSID Key Disclosure", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-31478.yaml" @@ -29217,7 +29217,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01248, -"epss_pct": 0.67286, +"epss_pct": 0.6732, "name": "ChurchCRM v4.5.3 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-31548.yaml" @@ -29227,7 +29227,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01279, -"epss_pct": 0.67985, +"epss_pct": 0.6802, "name": "tagDiv Composer < 4.2 - Stored Cross-Site Scripting", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-3169.yaml" @@ -29237,7 +29237,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "cwe": "CWE-918", "epss": 0.01356, -"epss_pct": 0.69701, +"epss_pct": 0.69734, "name": "Owncast - Server Side Request Forgery", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-3188.yaml" @@ -29261,7 +29261,7 @@ "cvss": 7.5, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "epss": 0.03534, -"epss_pct": 0.8844, +"epss_pct": 0.88455, "name": "Netmaker - Hardcoded DNS Secret Key", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-32077.yaml" @@ -29270,7 +29270,7 @@ "cvss": 7.3, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "epss": 0.07133, -"epss_pct": 0.93805, +"epss_pct": 0.93813, "name": "Integrate Google Drive <= 1.1.99 - Missing Authorization via REST API Endpoints", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-32117.yaml" @@ -29280,7 +29280,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-639", "epss": 0.07521, -"epss_pct": 0.94061, +"epss_pct": 0.94068, "name": "EventON Lite < 2.1.2 - Arbitrary File Download", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-3219.yaml" @@ -29290,7 +29290,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.39078, -"epss_pct": 0.98487, +"epss_pct": 0.98489, "name": "Ghost CMS < 5.42.1 - Path Traversal", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-32235.yaml" @@ -29330,7 +29330,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L", "cwe": "CWE-89", "epss": 0.01808, -"epss_pct": 0.77057, +"epss_pct": 0.77084, "name": "Subscribe to Category <= 2.7.4 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-32590.yaml" @@ -29339,7 +29339,7 @@ "cvss": 9.8, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "epss": 0.02888, -"epss_pct": 0.85917, +"epss_pct": 0.85932, "name": "MStore API <= 4.10.7 - Unauthorized Account Access and Privilege Escalation", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-3277.yaml" @@ -29349,7 +29349,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "cwe": "CWE-444", "epss": 0.01699, -"epss_pct": 0.75573, +"epss_pct": 0.75598, "name": "Emby Server - Authentication Bypass", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-33193.yaml" @@ -29369,7 +29369,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.03632, -"epss_pct": 0.88732, +"epss_pct": 0.88745, "name": "Old Age Home Management System v1.0 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-33338.yaml" @@ -29379,7 +29379,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-601", "epss": 0.31265, -"epss_pct": 0.98146, +"epss_pct": 0.98149, "name": "BlogEngine CMS - Open Redirect", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-33405.yaml" @@ -29389,7 +29389,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.03307, -"epss_pct": 0.87685, +"epss_pct": 0.87699, "name": "Faculty Evaluation System v1.0 - SQL Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-33439.yaml" @@ -29399,7 +29399,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-434", "epss": 0.14507, -"epss_pct": 0.96381, +"epss_pct": 0.96385, "name": "Faculty Evaluation System v1.0 - Remote Code Execution", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-33440.yaml" @@ -29409,7 +29409,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-200", "epss": 0.0197, -"epss_pct": 0.79006, +"epss_pct": 0.7903, "name": "LMS by Masteriyo < 1.6.8 - Information Exposure", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-3345.yaml" @@ -29419,7 +29419,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-668", "epss": 0.04042, -"epss_pct": 0.89901, +"epss_pct": 0.89913, "name": "Jeecg P3 Biz Chat - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-33510.yaml" @@ -29429,7 +29429,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-552", "epss": 0.1494, -"epss_pct": 0.9646, +"epss_pct": 0.96463, "name": "Dolibarr Unauthenticated Contacts Database Theft", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-33568.yaml" @@ -29449,7 +29449,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-787", "epss": 0.04353, -"epss_pct": 0.90547, +"epss_pct": 0.90559, "name": "H3C Magic R300-2100M - Remote Code Execution", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-33629.yaml" @@ -29469,7 +29469,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-74", "epss": 0.0388, -"epss_pct": 0.89481, +"epss_pct": 0.89494, "name": "WAVLINK WN579X3 - Remote Command Execution", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-3380.yaml" @@ -29479,7 +29479,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-77", "epss": 0.22707, -"epss_pct": 0.97558, +"epss_pct": 0.97561, "name": "FUXA - Unauthenticated Remote Code Execution", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-33831.yaml" @@ -29499,7 +29499,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-200", "epss": 0.01257, -"epss_pct": 0.67487, +"epss_pct": 0.67522, "name": "OpenProject < 12.5.4 - Project Identifiers Exposure", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-33960.yaml" @@ -29509,7 +29509,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N", "cwe": "CWE-601", "epss": 0.00963, -"epss_pct": 0.59213, +"epss_pct": 0.59259, "name": "Uncanny Toolkit for LearnDash - Open Redirection", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-34020.yaml" @@ -29519,7 +29519,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-327", "epss": 0.6799, -"epss_pct": 0.99267, +"epss_pct": 0.99269, "name": "VMWare Aria Operations - Remote Code Execution", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2023/CVE-2023-34039.yaml" @@ -29539,7 +29539,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-50", "epss": 0.03126, -"epss_pct": 0.86945, +"epss_pct": 0.8696, "name": "Vite Dev Server - Information Exposure", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-34092.yaml" @@ -29555,7 +29555,7 @@ "cvss": 7.5, "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "epss": 0.08689, -"epss_pct": 0.94745, +"epss_pct": 0.94752, "name": "SRS - Command Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-34105.yaml" @@ -29594,7 +29594,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.60482, -"epss_pct": 0.99078, +"epss_pct": 0.9908, "name": "Kyocera TASKalfa printer - Path Traversal", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-34259.yaml" @@ -29614,7 +29614,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-98", "epss": 0.06958, -"epss_pct": 0.93656, +"epss_pct": 0.93664, "name": "WordPress Canto Plugin <= 3.0.4 - File Inclusion", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-3452.yaml" @@ -29624,7 +29624,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01438, -"epss_pct": 0.71298, +"epss_pct": 0.71327, "name": "Hoteldruid 3.0.5 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-34537.yaml" @@ -29634,7 +29634,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-22", "epss": 0.47238, -"epss_pct": 0.98751, +"epss_pct": 0.98754, "name": "Gibbon v25.0.0 - Local File Inclusion", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-34598.yaml" @@ -29644,7 +29644,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01853, -"epss_pct": 0.77646, +"epss_pct": 0.77673, "name": "Gibbon v25.0.0 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-34599.yaml" @@ -29654,7 +29654,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-269", "epss": 0.72306, -"epss_pct": 0.99392, +"epss_pct": 0.99394, "name": "Ultimate Member < 2.6.7 - Unauthenticated Privilege Escalation", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-3460.yaml" @@ -29664,7 +29664,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.1248, -"epss_pct": 0.95932, +"epss_pct": 0.95937, "name": "JeecgBoot 3.5.0 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-34659.yaml" @@ -29674,7 +29674,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.04228, -"epss_pct": 0.90309, +"epss_pct": 0.90321, "name": "bloofoxCMS v0.5.2.1 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-34751.yaml" @@ -29683,8 +29683,8 @@ "cvss": 9.8, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", -"epss": 0.04383, -"epss_pct": 0.90609, +"epss": 0.04419, +"epss_pct": 0.9068, "name": "bloofoxCMS v0.5.2.1 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-34752.yaml" @@ -29694,7 +29694,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.04228, -"epss_pct": 0.90308, +"epss_pct": 0.90321, "name": "bloofoxCMS v0.5.2.1 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-34753.yaml" @@ -29704,7 +29704,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.03449, -"epss_pct": 0.88174, +"epss_pct": 0.88188, "name": "Bloofox v0.5.2.1 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-34754.yaml" @@ -29714,7 +29714,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.04228, -"epss_pct": 0.90308, +"epss_pct": 0.90321, "name": "bloofoxCMS v0.5.2.1 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-34755.yaml" @@ -29724,7 +29724,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.04228, -"epss_pct": 0.90308, +"epss_pct": 0.90321, "name": "Bloofox v0.5.2.1 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-34756.yaml" @@ -29734,7 +29734,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01293, -"epss_pct": 0.68289, +"epss_pct": 0.68324, "name": "Hestiacp <= 1.7.7 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-3479.yaml" @@ -29744,7 +29744,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.07176, -"epss_pct": 0.93845, +"epss_pct": 0.93852, "name": "Traggo Server - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-34843.yaml" @@ -29763,7 +29763,7 @@ "cvss": 9.8, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "epss": 0.24901, -"epss_pct": 0.97748, +"epss_pct": 0.97752, "name": "FortiWLM - Directory Traversal", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-34990.yaml" @@ -29783,7 +29783,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-78", "epss": 0.18148, -"epss_pct": 0.96992, +"epss_pct": 0.96996, "name": "Fortinet FortiWLM Unauthenticated Command Injection Vulnerability", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-34993.yaml" @@ -29822,7 +29822,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01496, -"epss_pct": 0.72384, +"epss_pct": 0.72413, "name": "XWiki - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-35155.yaml" @@ -29832,7 +29832,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.02081, -"epss_pct": 0.80207, +"epss_pct": 0.80228, "name": "XWiki >= 6.0-rc-1 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-35156.yaml" @@ -29842,7 +29842,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-87", "epss": 0.02048, -"epss_pct": 0.79863, +"epss_pct": 0.79884, "name": "XWiki - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-35158.yaml" @@ -29852,7 +29852,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.02182, -"epss_pct": 0.81115, +"epss_pct": 0.81137, "name": "XWiki >= 3.4-milestone-1 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-35159.yaml" @@ -29862,7 +29862,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.02268, -"epss_pct": 0.81825, +"epss_pct": 0.81846, "name": "XWiki >= 2.5-milestone-2 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-35160.yaml" @@ -29872,7 +29872,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.02377, -"epss_pct": 0.82694, +"epss_pct": 0.82715, "name": "XWiki >= 6.2-milestone-1 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-35161.yaml" @@ -29882,7 +29882,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.02377, -"epss_pct": 0.82694, +"epss_pct": 0.82715, "name": "XWiki < 14.10.5 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-35162.yaml" @@ -29902,7 +29902,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.00919, -"epss_pct": 0.57794, +"epss_pct": 0.57841, "name": "FOSSBilling < 0.5.3 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-3521.yaml" @@ -29922,7 +29922,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-918", "epss": 0.0357, -"epss_pct": 0.88547, +"epss_pct": 0.88561, "name": "DedeCMS 5.7.109 - Server-Side Request Forgery", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-3578.yaml" @@ -29941,7 +29941,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.08875, -"epss_pct": 0.94843, +"epss_pct": 0.94849, "name": "NocoDB version <= 0.106.1 - Arbitrary File Read", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-35843.yaml" @@ -29951,7 +29951,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.06344, -"epss_pct": 0.93143, +"epss_pct": 0.9315, "name": "Lightdash version <= 0.510.3 Arbitrary File Read", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-35844.yaml" @@ -29961,7 +29961,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-565", "epss": 0.74888, -"epss_pct": 0.99467, +"epss_pct": 0.99469, "name": "Cloudpanel 2 < 2.3.1 - Remote Code Execution", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-35885.yaml" @@ -29971,7 +29971,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-862", "epss": 0.36507, -"epss_pct": 0.98379, +"epss_pct": 0.98381, "name": "Intelbras Switch - Information Disclosure", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-36144.yaml" @@ -29981,7 +29981,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-89", "epss": 0.03157, -"epss_pct": 0.87069, +"epss_pct": 0.87083, "name": "QloApps 1.6.0 - SQL Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-36284.yaml" @@ -29991,7 +29991,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01199, -"epss_pct": 0.65968, +"epss_pct": 0.66004, "name": "Webkul QloApps 1.6.0 - Cross-site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-36287.yaml" @@ -30001,7 +30001,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01169, -"epss_pct": 0.65188, +"epss_pct": 0.65224, "name": "Webkul QloApps 1.6.0 - Cross-site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-36289.yaml" @@ -30011,7 +30011,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.05313, -"epss_pct": 0.92028, +"epss_pct": 0.92038, "name": "Adiscon LogAnalyzer v.4.1.13 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-36306.yaml" @@ -30021,7 +30021,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.05252, -"epss_pct": 0.91961, +"epss_pct": 0.91971, "name": "POS Codekop v2.0 - Cross Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-36346.yaml" @@ -30031,7 +30031,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-306", "epss": 0.34054, -"epss_pct": 0.98281, +"epss_pct": 0.98283, "name": "POS Codekop v2.0 - Broken Authentication", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-36347.yaml" @@ -30051,7 +30051,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "cwe": "CWE-473", "epss": 0.90993, -"epss_pct": 0.99799, +"epss_pct": 0.99798, "name": "Juniper Devices - Remote Code Execution", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-36844.yaml" @@ -30080,7 +30080,7 @@ "cvss": 9.8, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "epss": 0.33094, -"epss_pct": 0.9824, +"epss_pct": 0.98243, "name": "Honeywell PM43 Printers - Command Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-3710.yaml" @@ -30090,7 +30090,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H", "cwe": "CWE-434", "epss": 0.0386, -"epss_pct": 0.89424, +"epss_pct": 0.89437, "name": "Avaya Aura Device Services - OS Command Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-3722.yaml" @@ -30100,7 +30100,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-306", "epss": 0.07356, -"epss_pct": 0.93961, +"epss_pct": 0.93968, "name": "CasaOS < 0.4.4 - Authentication Bypass via Internal IP", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-37265.yaml" @@ -30110,7 +30110,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-287", "epss": 0.06844, -"epss_pct": 0.9356, +"epss_pct": 0.93568, "name": "CasaOS < 0.4.4 - Authentication Bypass via Random JWT Token", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-37266.yaml" @@ -30120,7 +30120,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.045, -"epss_pct": 0.90821, +"epss_pct": 0.90832, "name": "Piwigo 13.7.0 - SQL Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-37270.yaml" @@ -30140,7 +30140,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.4492, -"epss_pct": 0.98686, +"epss_pct": 0.98688, "name": "Copyparty <= 1.8.2 - Directory Traversal", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-37474.yaml" @@ -30150,7 +30150,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.46709, -"epss_pct": 0.98738, +"epss_pct": 0.9874, "name": "Zimbra Collaboration Suite (ZCS) v.8.8.15 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-37580.yaml" @@ -30170,7 +30170,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-668", "epss": 0.03632, -"epss_pct": 0.88731, +"epss_pct": 0.88745, "name": "Issabel PBX 4.0.0-6 - Directory Listing", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-37599.yaml" @@ -30180,7 +30180,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-434", "epss": 0.23311, -"epss_pct": 0.97611, +"epss_pct": 0.97615, "name": "Online Piggery Management System v1.0 - Unauthenticated File Upload", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-37629.yaml" @@ -30190,7 +30190,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-668", "epss": 0.24931, -"epss_pct": 0.97753, +"epss_pct": 0.97756, "name": "EyouCms v1.6.3 - Information Disclosure", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-37645.yaml" @@ -30200,7 +30200,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "cwe": "CWE-36", "epss": 0.6755, -"epss_pct": 0.99256, +"epss_pct": 0.99258, "name": "MLflow Absolute Path Traversal", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-3765.yaml" @@ -30220,7 +30220,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01164, -"epss_pct": 0.65057, +"epss_pct": 0.65094, "name": "IceWarp Webmail Server v10.2.1 - Cross Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-37728.yaml" @@ -30230,7 +30230,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.09707, -"epss_pct": 0.95165, +"epss_pct": 0.95171, "name": "Ninja Forms < 3.6.26 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-37979.yaml" @@ -30240,7 +30240,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01317, -"epss_pct": 0.68792, +"epss_pct": 0.68829, "name": "Contact Form Generator <= 2.5.5 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-37988.yaml" @@ -30250,7 +30250,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-269", "epss": 0.03349, -"epss_pct": 0.87833, +"epss_pct": 0.87846, "name": "HT Mega \u2013 Absolute Addons for Elementor <= 2.2.0 - Missing Authorization to Privilege Escalation", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-37999.yaml" @@ -30277,7 +30277,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01983, -"epss_pct": 0.79159, +"epss_pct": 0.79184, "name": "Revive Adserver 5.4.1 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-38040.yaml" @@ -30287,7 +30287,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01107, -"epss_pct": 0.6355, +"epss_pct": 0.63588, "name": "SuperWebMailer 9.00.0.01710 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-38192.yaml" @@ -30297,7 +30297,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01131, -"epss_pct": 0.64157, +"epss_pct": 0.64195, "name": "SuperWebMailer - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-38194.yaml" @@ -30336,7 +30336,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.05955, -"epss_pct": 0.92763, +"epss_pct": 0.92773, "name": "mooDating 1.2 - Cross-site scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-3843.yaml" @@ -30346,7 +30346,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "cwe": "CWE-798", "epss": 0.03722, -"epss_pct": 0.89016, +"epss_pct": 0.89029, "name": "Fujitsu IP Series - Hardcoded Credentials", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-38433.yaml" @@ -30356,7 +30356,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.05955, -"epss_pct": 0.92764, +"epss_pct": 0.92772, "name": "MooDating 1.2 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-3844.yaml" @@ -30366,7 +30366,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.05955, -"epss_pct": 0.92764, +"epss_pct": 0.92772, "name": "MooDating 1.2 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-3845.yaml" @@ -30376,7 +30376,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.05955, -"epss_pct": 0.92763, +"epss_pct": 0.92773, "name": "MooDating 1.2 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-3846.yaml" @@ -30386,7 +30386,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.05955, -"epss_pct": 0.92763, +"epss_pct": 0.92773, "name": "MooDating 1.2 - Cross-Site scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-3847.yaml" @@ -30396,7 +30396,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.06004, -"epss_pct": 0.92813, +"epss_pct": 0.92822, "name": "MooDating 1.2 - Cross-site scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-3848.yaml" @@ -30406,7 +30406,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.06004, -"epss_pct": 0.92814, +"epss_pct": 0.92823, "name": "mooDating 1.2 - Cross-site scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-3849.yaml" @@ -30416,7 +30416,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.09321, -"epss_pct": 0.95018, +"epss_pct": 0.95023, "name": "CopyParty v1.8.6 - Cross Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-38501.yaml" @@ -30435,7 +30435,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.00824, -"epss_pct": 0.54852, +"epss_pct": 0.54892, "name": "PHP Login System 2.0.1 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-38875.yaml" @@ -30445,7 +30445,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.03663, -"epss_pct": 0.88848, +"epss_pct": 0.88861, "name": "openSIS v9.0 - Path Traversal", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-38879.yaml" @@ -30465,7 +30465,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-552", "epss": 0.0266, -"epss_pct": 0.84636, +"epss_pct": 0.84655, "name": "ZKTeco BioTime <= 9.0.1 - Privilege Escalation", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-38952.yaml" @@ -30475,7 +30475,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01101, -"epss_pct": 0.6339, +"epss_pct": 0.63428, "name": "Academy LMS 6.0 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-38964.yaml" @@ -30495,7 +30495,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01212, -"epss_pct": 0.6637, +"epss_pct": 0.66403, "name": "OPNsense - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-39002.yaml" @@ -30505,7 +30505,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "cwe": "CWE-79", "epss": 0.02608, -"epss_pct": 0.8431, +"epss_pct": 0.84327, "name": "OPNsense - Cross-Site Scripting to RCE", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-39007.yaml" @@ -30515,7 +30515,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.17919, -"epss_pct": 0.96964, +"epss_pct": 0.96967, "name": "FileMage Gateway - Directory Traversal", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-39026.yaml" @@ -30525,7 +30525,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-918", "epss": 0.03361, -"epss_pct": 0.87873, +"epss_pct": 0.87886, "name": "rConfig 3.9.4 - Server-Side Request Forgery", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-39108.yaml" @@ -30535,7 +30535,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-918", "epss": 0.03361, -"epss_pct": 0.87873, +"epss_pct": 0.87885, "name": "rConfig 3.9.4 - Server-Side Request Forgery", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-39109.yaml" @@ -30545,7 +30545,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-918", "epss": 0.03651, -"epss_pct": 0.88808, +"epss_pct": 0.88822, "name": "rConfig 3.9.4 - Server-Side Request Forgery", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-39110.yaml" @@ -30563,7 +30563,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.02513, -"epss_pct": 0.83663, +"epss_pct": 0.83683, "name": "Emlog 2.1.9 - SQL Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-39121.yaml" @@ -30573,7 +30573,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.03367, -"epss_pct": 0.87894, +"epss_pct": 0.87907, "name": "Aria2 WebUI - Path traversal", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-39141.yaml" @@ -30621,7 +30621,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.00902, -"epss_pct": 0.57269, +"epss_pct": 0.57315, "name": "Blog2Social < 7.2.1 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-3936.yaml" @@ -30641,7 +30641,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.04684, -"epss_pct": 0.9114, +"epss_pct": 0.91151, "name": "ECTouch v2 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-39560.yaml" @@ -30651,7 +30651,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.0139, -"epss_pct": 0.70416, +"epss_pct": 0.70446, "name": "IceWarp Email Client - Cross Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-39598.yaml" @@ -30661,7 +30661,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01215, -"epss_pct": 0.66444, +"epss_pct": 0.66478, "name": "IceWarp 11.4.6.0 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-39600.yaml" @@ -30671,7 +30671,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.04065, -"epss_pct": 0.89949, +"epss_pct": 0.89961, "name": "PrestaShop Theme Volty CMS Blog - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-39650.yaml" @@ -30681,7 +30681,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01332, -"epss_pct": 0.69123, +"epss_pct": 0.69158, "name": "PrestaShop fieldpopupnewsletter Module - Cross Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-39676.yaml" @@ -30690,7 +30690,7 @@ "cvss": 7.5, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "epss": 0.30806, -"epss_pct": 0.98116, +"epss_pct": 0.9812, "name": "PrestaShop MyPrestaModules - PhpInfo Disclosure", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-39677.yaml" @@ -30700,7 +30700,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.0148, -"epss_pct": 0.72112, +"epss_pct": 0.72142, "name": "IceWarp Mail Server v10.4.5 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-39700.yaml" @@ -30710,7 +30710,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.06146, -"epss_pct": 0.92955, +"epss_pct": 0.92964, "name": "WBCE 1.6.0 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-39796.yaml" @@ -30720,7 +30720,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01421, -"epss_pct": 0.7098, +"epss_pct": 0.71009, "name": "Mingsoft MCMS < 5.3.1 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-3990.yaml" @@ -30737,7 +30737,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L", "cwe": "CWE-79", "epss": 0.54872, -"epss_pct": 0.9895, +"epss_pct": 0.98952, "name": "LiteSpeed Cache <= 5.7 - Unauthenticated Stored XSS", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-40000.yaml" @@ -30761,7 +30761,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.00726, -"epss_pct": 0.51597, +"epss_pct": 0.51644, "name": "Stock Ticker <= 3.23.2 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-40208.yaml" @@ -30771,7 +30771,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-200", "epss": 0.0216, -"epss_pct": 0.80937, +"epss_pct": 0.8096, "name": "Post Grid <= 2.2.50 - Information Exposure via REST API", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-40211.yaml" @@ -30781,7 +30781,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01081, -"epss_pct": 0.62778, +"epss_pct": 0.6282, "name": "Axigen WebMail - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-40355.yaml" @@ -30806,7 +30806,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.03318, -"epss_pct": 0.87724, +"epss_pct": 0.87738, "name": "PHPJabbers Food Delivery Script - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-40748.yaml" @@ -30816,7 +30816,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.03682, -"epss_pct": 0.889, +"epss_pct": 0.88913, "name": "PHPJabbers Food Delivery Script v3.0 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-40749.yaml" @@ -30826,7 +30826,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01034, -"epss_pct": 0.61457, +"epss_pct": 0.61498, "name": "PHPJabbers Yacht Listing Script v1.0 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-40750.yaml" @@ -30836,7 +30836,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01088, -"epss_pct": 0.6299, +"epss_pct": 0.63033, "name": "PHPJabbers Fundraising Script v1.0 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-40751.yaml" @@ -30846,7 +30846,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01043, -"epss_pct": 0.61705, +"epss_pct": 0.61744, "name": "PHPJabbers Make an Offer Widget v1.0 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-40752.yaml" @@ -30856,7 +30856,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01109, -"epss_pct": 0.63599, +"epss_pct": 0.63637, "name": "PHPJabbers Ticket Support Script v3.2 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-40753.yaml" @@ -30866,7 +30866,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01254, -"epss_pct": 0.67389, +"epss_pct": 0.67423, "name": "PHPJabbers Callback Widget v1.0 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-40755.yaml" @@ -30876,7 +30876,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-601", "epss": 0.01355, -"epss_pct": 0.69671, +"epss_pct": 0.69704, "name": "IceWarp Mail Server Deep Castle 2 v.13.0.1.2 - Open Redirect", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-40779.yaml" @@ -30886,7 +30886,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.02885, -"epss_pct": 0.85902, +"epss_pct": 0.85917, "name": "SolarView Compact < 6.00 - Directory Traversal", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-40924.yaml" @@ -30896,7 +30896,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-89", "epss": 0.11278, -"epss_pct": 0.9566, +"epss_pct": 0.95666, "name": "Nagios XI v5.11.0 - SQL Injection", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-40931.yaml" @@ -30906,7 +30906,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01792, -"epss_pct": 0.76832, +"epss_pct": 0.76858, "name": "PHPJabbers Availability Booking Calendar 5.0 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-4110.yaml" @@ -30926,7 +30926,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.02535, -"epss_pct": 0.8382, +"epss_pct": 0.8384, "name": "PHPJabbers Bus Reservation System 1.1 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-4111.yaml" @@ -30936,7 +30936,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.08422, -"epss_pct": 0.94593, +"epss_pct": 0.94599, "name": "PHPJabbers Shuttle Booking Software 1.0 - Cross Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-4112.yaml" @@ -30946,7 +30946,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.08422, -"epss_pct": 0.94593, +"epss_pct": 0.94598, "name": "PHPJabbers Service Booking Script 1.0 - Cross Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-4113.yaml" @@ -30956,7 +30956,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.08312, -"epss_pct": 0.94535, +"epss_pct": 0.94542, "name": "PHP Jabbers Night Club Booking 1.0 - Cross Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-4114.yaml" @@ -30966,7 +30966,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.08422, -"epss_pct": 0.94592, +"epss_pct": 0.94599, "name": "PHPJabbers Cleaning Business 1.0 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-4115.yaml" @@ -30976,7 +30976,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.08422, -"epss_pct": 0.94592, +"epss_pct": 0.94599, "name": "PHPJabbers Taxi Booking 2.0 - Cross Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-4116.yaml" @@ -31006,7 +31006,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.0142, -"epss_pct": 0.7097, +"epss_pct": 0.70998, "name": "CrafterCMS Engine - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-4136.yaml" @@ -31016,7 +31016,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.00812, -"epss_pct": 0.54478, +"epss_pct": 0.54522, "name": "Ditty < 3.1.25 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-4148.yaml" @@ -31026,7 +31026,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.00645, -"epss_pct": 0.48447, +"epss_pct": 0.48497, "name": "Store Locator WordPress < 1.4.13 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-4151.yaml" @@ -31036,7 +31036,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01139, -"epss_pct": 0.64357, +"epss_pct": 0.64395, "name": "PHPJabbers PHP Forum Script 3.0 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-41538.yaml" @@ -31046,7 +31046,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01224, -"epss_pct": 0.66689, +"epss_pct": 0.66723, "name": "EyouCms v1.6.2 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-41597.yaml" @@ -31056,7 +31056,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-22", "epss": 0.11215, -"epss_pct": 0.95647, +"epss_pct": 0.95653, "name": "JFinalCMS v5.0.0 - Directory Traversal", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-41599.yaml" @@ -31066,7 +31066,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01146, -"epss_pct": 0.64525, +"epss_pct": 0.64562, "name": "Emlog Pro v2.1.14 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-41621.yaml" @@ -31076,7 +31076,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01117, -"epss_pct": 0.63798, +"epss_pct": 0.63837, "name": "RealGimm by GruppoSCAI v1.1.37p38 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-41642.yaml" @@ -31090,7 +31090,7 @@ "cvss": 7.5, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "epss": 0.45972, -"epss_pct": 0.98717, +"epss_pct": 0.98719, "name": "Adlisting Classified Ads 2.14.0 - Information Disclosure", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-4168.yaml" @@ -31109,7 +31109,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.05449, -"epss_pct": 0.92173, +"epss_pct": 0.92183, "name": "mooSocial 3.1.8 - Reflected XSS", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-4173.yaml" @@ -31119,7 +31119,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.09138, -"epss_pct": 0.94947, +"epss_pct": 0.94953, "name": "mooSocial 3.1.6 - Reflected Cross Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-4174.yaml" @@ -31148,7 +31148,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L", "cwe": "CWE-269", "epss": 0.01397, -"epss_pct": 0.70524, +"epss_pct": 0.70553, "name": "ProfilePress <= 4.13.1 \u2014 Unauthenticated Privilege Escalation", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-41954.yaml" @@ -31165,7 +31165,7 @@ }, "CVE-2023-42343": { "epss": 0.0059, -"epss_pct": 0.45886, +"epss_pct": 0.45938, "name": "OpenCMS - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-42343.yaml" @@ -31200,7 +31200,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N", "cwe": "CWE-79", "epss": 0.00759, -"epss_pct": 0.52757, +"epss_pct": 0.52799, "name": "WordPress Post Timeline Plugin < 2.2.6 - Cross-Site Scripting", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-4284.yaml" @@ -31210,7 +31210,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-913", "epss": 0.81801, -"epss_pct": 0.9962, +"epss_pct": 0.99621, "name": "CrushFTP < 10.5.1 - Unauthenticated Remote Code Execution", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-43177.yaml" @@ -31239,7 +31239,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-532", "epss": 0.59609, -"epss_pct": 0.99058, +"epss_pct": 0.9906, "name": "Milesight Routers - Information Disclosure", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-43261.yaml" @@ -31248,7 +31248,7 @@ "cvss": 6.5, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "epss": 0.0186, -"epss_pct": 0.77749, +"epss_pct": 0.77775, "name": "mooSocial 3.1.8 - External Service Interaction", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-43323.yaml" @@ -31258,7 +31258,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01857, -"epss_pct": 0.77717, +"epss_pct": 0.77743, "name": "MooSocial 3.1.8 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-43325.yaml" @@ -31268,7 +31268,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01615, -"epss_pct": 0.74305, +"epss_pct": 0.74336, "name": "MooSocial 3.1.8 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-43326.yaml" @@ -31278,7 +31278,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.03753, -"epss_pct": 0.89107, +"epss_pct": 0.8912, "name": "Hoteldruid v3.0.5 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-43373.yaml" @@ -31288,7 +31288,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.03272, -"epss_pct": 0.87545, +"epss_pct": 0.87559, "name": "Hoteldruid v3.0.5 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-43374.yaml" @@ -31297,7 +31297,7 @@ "cvss": 7.5, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "epss": 0.36582, -"epss_pct": 0.98382, +"epss_pct": 0.98386, "name": "MLFlow < 2.8.1 - Sensitive Information Disclosure", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-43472.yaml" @@ -31307,7 +31307,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-918", "epss": 0.355, -"epss_pct": 0.98336, +"epss_pct": 0.98338, "name": "PyTorch TorchServe SSRF", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-43654.yaml" @@ -31317,7 +31317,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.08147, -"epss_pct": 0.9444, +"epss_pct": 0.94447, "name": "ShokoServer System - Local File Inclusion (LFI)", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-43662.yaml" @@ -31327,7 +31327,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-918", "epss": 0.67715, -"epss_pct": 0.99261, +"epss_pct": 0.99263, "name": "GeoServer WPS - Server Side Request Forgery", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-43795.yaml" @@ -31337,7 +31337,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01258, -"epss_pct": 0.67499, +"epss_pct": 0.67533, "name": "mojoPortal v.2.7.0.0 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-44012.yaml" @@ -31347,7 +31347,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-287", "epss": 0.58296, -"epss_pct": 0.99026, +"epss_pct": 0.99029, "name": "Ruijie RG-EW1200G Router Background - Login Bypass", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-4415.yaml" @@ -31367,7 +31367,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-502", "epss": 0.80178, -"epss_pct": 0.99586, +"epss_pct": 0.99587, "name": "Adobe ColdFusion WDDX Deserialization Gadgets", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-44353.yaml" @@ -31377,14 +31377,14 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01277, -"epss_pct": 0.67962, +"epss_pct": 0.67997, "name": "Piwigo - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-44393.yaml" }, "CVE-2023-4450": { "epss": 0.11503, -"epss_pct": 0.95712, +"epss_pct": 0.95718, "name": "JeecgBoot JimuReport - Template injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-4450.yaml" @@ -31394,7 +31394,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.02499, -"epss_pct": 0.83562, +"epss_pct": 0.83582, "name": "Cockpit - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-4451.yaml" @@ -31404,7 +31404,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01897, -"epss_pct": 0.78198, +"epss_pct": 0.78225, "name": "mooSocial v.3.1.8 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-44812.yaml" @@ -31414,7 +31414,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01754, -"epss_pct": 0.76339, +"epss_pct": 0.76365, "name": "mooSocial v.3.1.8 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-44813.yaml" @@ -31424,7 +31424,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "cwe": "CWE-89", "epss": 0.03122, -"epss_pct": 0.8693, +"epss_pct": 0.86945, "name": "WordPress Job Portal < 2.0.6 - SQL Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-4490.yaml" @@ -31434,7 +31434,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-200", "epss": 0.01425, -"epss_pct": 0.71061, +"epss_pct": 0.7109, "name": "WordPress Perfect Images (WP Retina 2x) < 6.4.6 - Sensitive Information Exposure", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-44982.yaml" @@ -31444,7 +31444,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N", "cwe": "CWE-287", "epss": 0.01243, -"epss_pct": 0.67154, +"epss_pct": 0.67187, "name": "QNAP Music Station < 5.4.0 - Authentication Bypass", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-45038.yaml" @@ -31454,7 +31454,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.05124, -"epss_pct": 0.91796, +"epss_pct": 0.91807, "name": "XWiki < 14.10.14 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-45136.yaml" @@ -31463,7 +31463,7 @@ "cvss": 9.8, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "epss": 0.39294, -"epss_pct": 0.98497, +"epss_pct": 0.985, "name": "Import XML and RSS Feeds < 2.1.5 - Unauthenticated RCE", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-4521.yaml" @@ -31472,7 +31472,7 @@ "cvss": 9.8, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "epss": 0.53255, -"epss_pct": 0.98904, +"epss_pct": 0.98906, "name": "Acronis Cyber Infrastructure - Default Password", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2023/CVE-2023-45249.yaml" @@ -31482,7 +31482,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.38457, -"epss_pct": 0.98463, +"epss_pct": 0.98466, "name": "PrestaShop PireosPay - SQL Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-45375.yaml" @@ -31512,7 +31512,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01635, -"epss_pct": 0.74614, +"epss_pct": 0.74645, "name": "MooSocial 3.1.8 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-45542.yaml" @@ -31522,7 +31522,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "cwe": "CWE-444", "epss": 0.05848, -"epss_pct": 0.92654, +"epss_pct": 0.92663, "name": "Apache Tomcat - HTTP Request Smuggling", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-45648.yaml" @@ -31532,7 +31532,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01425, -"epss_pct": 0.71077, +"epss_pct": 0.71105, "name": "Frigate < 0.13.0 Beta 3 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-45671.yaml" @@ -31542,7 +31542,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "cwe": "CWE-287", "epss": 0.03568, -"epss_pct": 0.88543, +"epss_pct": 0.88557, "name": "PaperCut NG Unauthenticated XMLRPC Functionality", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-4568.yaml" @@ -31552,7 +31552,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-89", "epss": 0.01872, -"epss_pct": 0.77893, +"epss_pct": 0.77919, "name": "Leantime < 2.4 - Authenticated SQL Injection", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-45826.yaml" @@ -31562,7 +31562,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-77", "epss": 0.14003, -"epss_pct": 0.96285, +"epss_pct": 0.96289, "name": "Viessmann Vitogate 300 - Remote Code Execution", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-45852.yaml" @@ -31572,7 +31572,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.0333, -"epss_pct": 0.87765, +"epss_pct": 0.87778, "name": "qdPM 9.2 - Directory Traversal", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-45855.yaml" @@ -31591,7 +31591,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-434", "epss": 0.14321, -"epss_pct": 0.96346, +"epss_pct": 0.96351, "name": "WordPress Plugin Forminator 1.24.6 - Arbitrary File Upload", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-4596.yaml" @@ -31611,7 +31611,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.49885, -"epss_pct": 0.98814, +"epss_pct": 0.98816, "name": "PrestaShop Step by Step products Pack - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-46347.yaml" @@ -31620,8 +31620,8 @@ "cvss": 9.8, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-78", -"epss": 0.87495, -"epss_pct": 0.99744, +"epss": 0.87608, +"epss_pct": 0.99747, "name": "cPH2 Charging Station v1.87.0 - OS Command Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-46359.yaml" @@ -31631,7 +31631,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "cwe": "CWE-22", "epss": 0.46966, -"epss_pct": 0.98743, +"epss_pct": 0.98746, "name": "GL.iNet <= 4.3.7 - Arbitrary File Write", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-46455.yaml" @@ -31661,7 +31661,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.02191, -"epss_pct": 0.81181, +"epss_pct": 0.81202, "name": "XWiki < 14.10.14 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-46732.yaml" @@ -31689,8 +31689,8 @@ "cvss": 7.2, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-94", -"epss": 0.15856, -"epss_pct": 0.96642, +"epss": 0.13784, +"epss_pct": 0.96245, "name": "ISPConfig - PHP Code Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-46818.yaml" @@ -31700,7 +31700,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L", "cwe": "CWE-78", "epss": 0.01669, -"epss_pct": 0.75127, +"epss_pct": 0.75156, "name": "Chaosblade < 1.7.4 - Remote Code Execution", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-47105.yaml" @@ -31710,7 +31710,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", "cwe": "CWE-79", "epss": 0.01448, -"epss_pct": 0.71489, +"epss_pct": 0.71517, "name": "Label Studio - Cross-Site Scripting", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-47115.yaml" @@ -31720,7 +31720,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-200", "epss": 0.04055, -"epss_pct": 0.8993, +"epss_pct": 0.89942, "name": "Label Studio - Sensitive Information Exposure", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-47117.yaml" @@ -31729,8 +31729,8 @@ "cvss": 7.5, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-200", -"epss": 0.0521, -"epss_pct": 0.91915, +"epss": 0.05452, +"epss_pct": 0.92185, "name": "PlayTube 3.0.1 - Information Disclosure", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-4714.yaml" @@ -31740,7 +31740,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N", "cwe": "CWE-22", "epss": 0.47024, -"epss_pct": 0.98745, +"epss_pct": 0.98748, "name": "ManageEngine OpManager - Directory Traversal", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-47211.yaml" @@ -31770,7 +31770,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-502", "epss": 0.14528, -"epss_pct": 0.96384, +"epss_pct": 0.96388, "name": "PyArrow Flight RPC - Remote Code Execution", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-47248.yaml" @@ -31780,7 +31780,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-77", "epss": 0.14308, -"epss_pct": 0.96344, +"epss_pct": 0.96349, "name": "Qualitor <= 8.20 - Remote Code Execution", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-47253.yaml" @@ -31790,7 +31790,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-200", "epss": 0.03002, -"epss_pct": 0.86433, +"epss_pct": 0.86449, "name": "SuiteCRM Unauthenticated Graphql Introspection", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-47643.yaml" @@ -31800,7 +31800,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.00838, -"epss_pct": 0.55297, +"epss_pct": 0.55337, "name": "Essential Grid <= 3.1.0 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-47684.yaml" @@ -31810,7 +31810,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H", "cwe": "CWE-434", "epss": 0.02276, -"epss_pct": 0.81893, +"epss_pct": 0.81914, "name": "WordPress WP Child Theme Generator < 1.1.3 - Arbitrary File Upload", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-47873.yaml" @@ -31829,7 +31829,7 @@ "cvss": 9.1, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "epss": 0.35296, -"epss_pct": 0.9833, +"epss_pct": 0.98332, "name": "Anyscale Ray 2.6.3 and 2.8.0 - Server-Side Request Forgery", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-48023.yaml" @@ -31839,7 +31839,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.3374, -"epss_pct": 0.98268, +"epss_pct": 0.98271, "name": "Nagios XI < 5.11.3 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-48084.yaml" @@ -31849,7 +31849,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-285", "epss": 0.7282, -"epss_pct": 0.99408, +"epss_pct": 0.99409, "name": "XWiki < 4.10.15 - Information Disclosure", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-48241.yaml" @@ -31859,7 +31859,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.02268, -"epss_pct": 0.81825, +"epss_pct": 0.81845, "name": "WWBN AVideo 11.6 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-48728.yaml" @@ -31869,7 +31869,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "cwe": "CWE-434", "epss": 0.041, -"epss_pct": 0.90028, +"epss_pct": 0.9004, "name": "WordPress Elementor 3.18.1 - File Upload/Remote Code Execution", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-48777.yaml" @@ -31919,7 +31919,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-287", "epss": 0.43205, -"epss_pct": 0.98628, +"epss_pct": 0.9863, "name": "OwnCloud - WebDAV API Authentication Bypass", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2023/CVE-2023-49105.yaml" @@ -31938,7 +31938,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "cwe": "CWE-862", "epss": 0.0205, -"epss_pct": 0.79882, +"epss_pct": 0.79904, "name": "Peplink Balance Two before 8.4.0 - Unauthenticated Config Upload", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-49230.yaml" @@ -31948,7 +31948,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-80", "epss": 0.00997, -"epss_pct": 0.6029, +"epss_pct": 0.60329, "name": "Vite dev server - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-49293.yaml" @@ -31958,7 +31958,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-601", "epss": 0.01079, -"epss_pct": 0.62734, +"epss_pct": 0.62776, "name": "Python Flask-Security-Too <=5.3.2 - Open Redirect", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-49438.yaml" @@ -31968,7 +31968,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.0072, -"epss_pct": 0.51409, +"epss_pct": 0.51456, "name": "KodeExplorer 4.51 - Reflective Cross Site Scripting (XSS)", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-49489.yaml" @@ -31978,7 +31978,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01147, -"epss_pct": 0.6456, +"epss_pct": 0.64597, "name": "DedeCMS v5.7.111 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-49494.yaml" @@ -31997,7 +31997,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01835, -"epss_pct": 0.77414, +"epss_pct": 0.77439, "name": "Academy LMS 6.2 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-4973.yaml" @@ -32007,7 +32007,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.04886, -"epss_pct": 0.91452, +"epss_pct": 0.91463, "name": "Academy LMS 6.2 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-4974.yaml" @@ -32026,7 +32026,7 @@ "cvss": 7.5, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "epss": 0.25855, -"epss_pct": 0.97826, +"epss_pct": 0.97829, "name": "Active Directory Integration WP Plugin < 4.1.10 - Log Disclosure", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-5003.yaml" @@ -32036,7 +32036,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-78", "epss": 0.1354, -"epss_pct": 0.9618, +"epss_pct": 0.96185, "name": "reNgine 2.2.0 - Command Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-50094.yaml" @@ -32055,7 +32055,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.0224, -"epss_pct": 0.8162, +"epss_pct": 0.81643, "name": "Mingsoft MCMS 5.2.9 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-50578.yaml" @@ -32085,7 +32085,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-798", "epss": 0.67914, -"epss_pct": 0.99265, +"epss_pct": 0.99267, "name": "D-Link D-View 8 v2.0.1.28 - Authentication Bypass", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-5074.yaml" @@ -32095,7 +32095,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.02041, -"epss_pct": 0.79796, +"epss_pct": 0.79818, "name": "JS Help Desk <= 2.8.1 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-50839.yaml" @@ -32104,7 +32104,7 @@ "cvss": 5.3, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "epss": 0.02217, -"epss_pct": 0.81423, +"epss_pct": 0.81445, "name": "Defender Security < 4.1.0 - Protection Bypass (Hidden Login Page)", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-5089.yaml" @@ -32114,7 +32114,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-77", "epss": 0.38007, -"epss_pct": 0.98445, +"epss_pct": 0.98447, "name": "MajorDoMo thumb.php - OS Command Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-50917.yaml" @@ -32123,7 +32123,7 @@ "cvss": 7.5, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "epss": 0.63373, -"epss_pct": 0.99148, +"epss_pct": 0.9915, "name": "Apache OFBiz < 18.12.11 - Server Side Request Forgery", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-50968.yaml" @@ -32133,7 +32133,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-434", "epss": 0.63077, -"epss_pct": 0.99141, +"epss_pct": 0.99143, "name": "Jordy Meow AI Engine - Unrestricted File Upload", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-51409.yaml" @@ -32143,7 +32143,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.28336, -"epss_pct": 0.97982, +"epss_pct": 0.97984, "name": "Gradio Hugging Face - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-51449.yaml" @@ -32163,7 +32163,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "cwe": "CWE-125", "epss": 0.04249, -"epss_pct": 0.90352, +"epss_pct": 0.90365, "name": "ProFTPD < 1.3.8a - DoS via Out-of-Bounds Read", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2023/CVE-2023-51713.yaml" @@ -32173,7 +32173,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.02202, -"epss_pct": 0.81304, +"epss_pct": 0.81325, "name": "WP Sessions Time Monitoring Full Automatic <= 1.0.8 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-5203.yaml" @@ -32183,7 +32183,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.06888, -"epss_pct": 0.93596, +"epss_pct": 0.93604, "name": "WordPress AI ChatBot (WPBot) <= 4.8.9 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-5204.yaml" @@ -32193,7 +32193,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N", "cwe": "CWE-22", "epss": 0.30166, -"epss_pct": 0.98087, +"epss_pct": 0.9809, "name": "Winter CMS Local File Inclusion - (LFI)", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-52085.yaml" @@ -32228,7 +32228,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01061, -"epss_pct": 0.62227, +"epss_pct": 0.62266, "name": "Microweber < V.2.0 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-5244.yaml" @@ -32248,7 +32248,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-601", "epss": 0.35128, -"epss_pct": 0.98323, +"epss_pct": 0.98326, "name": "Mosparo < 1.0.2 - Open Redirect", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-5375.yaml" @@ -32258,7 +32258,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01222, -"epss_pct": 0.66611, +"epss_pct": 0.66645, "name": "Structurizr on-premises - Cross Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-5556.yaml" @@ -32268,7 +32268,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.00908, -"epss_pct": 0.57483, +"epss_pct": 0.57526, "name": "LearnPress < 4.2.5.5 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-5558.yaml" @@ -32277,7 +32277,7 @@ "cvss": 9.1, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H", "epss": 0.02788, -"epss_pct": 0.85409, +"epss_pct": 0.85425, "name": "10Web Booster < 2.24.18 - Unauthenticated Arbitrary Option Deletion", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-5559.yaml" @@ -32287,7 +32287,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-200", "epss": 0.03862, -"epss_pct": 0.89435, +"epss_pct": 0.89448, "name": "WordPress Core - Post Author Email Disclosure", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-5561.yaml" @@ -32297,7 +32297,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.63711, -"epss_pct": 0.99158, +"epss_pct": 0.9916, "name": "WP Hotel Booking <= 2.0.7 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-5652.yaml" @@ -32313,7 +32313,7 @@ "cvss": 8.1, "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "epss": 0.04262, -"epss_pct": 0.90375, +"epss_pct": 0.90387, "name": "News & Blog Designer Pack \u2013 WordPress Blog Plugin <= 3.4.1 - Unauthenticated Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-5815.yaml" @@ -32323,7 +32323,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-287", "epss": 0.60782, -"epss_pct": 0.99085, +"epss_pct": 0.99087, "name": "ColumbiaSoft DocumentLocator - Improper Authentication", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-5830.yaml" @@ -32333,7 +32333,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01096, -"epss_pct": 0.6325, +"epss_pct": 0.6329, "name": "phpMyFAQ < 3.2.0 - Cross-site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-5863.yaml" @@ -32353,7 +32353,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-918", "epss": 0.0315, -"epss_pct": 0.87038, +"epss_pct": 0.87053, "name": "WordPress WPB Show Core <= 2.2 - Server-Side Request Forgery", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-5974.yaml" @@ -32363,7 +32363,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-22", "epss": 0.03313, -"epss_pct": 0.87706, +"epss_pct": 0.8772, "name": "Hotel Booking Lite < 4.8.5 - Arbitrary File Download & Deletion", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-5991.yaml" @@ -32373,7 +32373,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01999, -"epss_pct": 0.79338, +"epss_pct": 0.79364, "name": "WordPress Popup Builder <= 4.2.3 - Unauthenticated Stored XSS", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-6000.yaml" @@ -32383,7 +32383,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-78", "epss": 0.47594, -"epss_pct": 0.98758, +"epss_pct": 0.9876, "name": "Mlflow - Arbitrary File Write", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-6018.yaml" @@ -32393,7 +32393,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-862", "epss": 0.14652, -"epss_pct": 0.9641, +"epss_pct": 0.96414, "name": "Ray Static File - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-6020.yaml" @@ -32402,7 +32402,7 @@ "cvss": 7.5, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "epss": 0.37076, -"epss_pct": 0.98409, +"epss_pct": 0.98411, "name": "Ray API - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-6021.yaml" @@ -32411,7 +32411,7 @@ "cvss": 7.5, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "epss": 0.02975, -"epss_pct": 0.8631, +"epss_pct": 0.86325, "name": "VertaAI ModelDB - Path Traversal", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-6023.yaml" @@ -32421,7 +32421,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.00821, -"epss_pct": 0.54781, +"epss_pct": 0.54822, "name": "LogDash Activity Log <= 1.1.3 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-6030.yaml" @@ -32431,7 +32431,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-862", "epss": 0.0434, -"epss_pct": 0.90522, +"epss_pct": 0.90534, "name": "H2O ImportFiles - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-6038.yaml" @@ -32450,7 +32450,7 @@ "cvss": 5.3, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "epss": 0.18552, -"epss_pct": 0.97048, +"epss_pct": 0.97051, "name": "Quttera Web Malware Scanner <= 3.4.1.48 - Sensitive Data Exposure", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-6065.yaml" @@ -32460,7 +32460,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-552", "epss": 0.30894, -"epss_pct": 0.98123, +"epss_pct": 0.98126, "name": "Duplicator < 1.5.7.1; Duplicator Pro < 4.5.14.2 - Unauthenticated Sensitive Data Exposure", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-6114.yaml" @@ -32469,7 +32469,7 @@ "cvss": 7.8, "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "epss": 0.04794, -"epss_pct": 0.9131, +"epss_pct": 0.91322, "name": "glibc's syslog - Local Privilege Escalation", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2023/CVE-2023-6246.yaml" @@ -32479,7 +32479,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-552", "epss": 0.02072, -"epss_pct": 0.80121, +"epss_pct": 0.80142, "name": "WordPress Backup Migration <= 1.3.6 - Path Traversal", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-6266.yaml" @@ -32489,7 +32489,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.02379, -"epss_pct": 0.82705, +"epss_pct": 0.82726, "name": "TOTVS Fluig Platform - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-6275.yaml" @@ -32509,7 +32509,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.63141, -"epss_pct": 0.99143, +"epss_pct": 0.99145, "name": "WordPress My Calendar <3.4.22 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-6360.yaml" @@ -32519,7 +32519,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01752, -"epss_pct": 0.76311, +"epss_pct": 0.76337, "name": "OpenCMS 14 & 15 - Cross Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-6379.yaml" @@ -32529,7 +32529,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-601", "epss": 0.01594, -"epss_pct": 0.73983, +"epss_pct": 0.74013, "name": "OpenCms 14 & 15 - Open Redirect", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-6380.yaml" @@ -32539,7 +32539,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-601", "epss": 0.26798, -"epss_pct": 0.97884, +"epss_pct": 0.97888, "name": "WordPress Toolbar <= 2.2.6 - Open Redirect", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-6389.yaml" @@ -32549,7 +32549,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-200", "epss": 0.02437, -"epss_pct": 0.83139, +"epss_pct": 0.8316, "name": "WordPress Download Manager - File Password Exposure", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-6421.yaml" @@ -32558,7 +32558,7 @@ "cvss": 5.3, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "epss": 0.02463, -"epss_pct": 0.83331, +"epss_pct": 0.83351, "name": "Seriously Simple Podcasting < 3.0.0 - Information Disclosure", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-6444.yaml" @@ -32567,7 +32567,7 @@ "cvss": 7.5, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "epss": 0.39867, -"epss_pct": 0.98521, +"epss_pct": 0.98523, "name": "Prime Mover < 1.9.3 - Sensitive Data Exposure", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-6505.yaml" @@ -32577,7 +32577,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-125", "epss": 0.57633, -"epss_pct": 0.99011, +"epss_pct": 0.99014, "name": "Citrix Netscaler ADC & Gateway - Out-Of-Bounds Memory Read", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-6549.yaml" @@ -32596,7 +32596,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-89", "epss": 0.51394, -"epss_pct": 0.98856, +"epss_pct": 0.98859, "name": "LearnPress <= 4.2.5.7 - SQL Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-6567.yaml" @@ -32606,7 +32606,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01662, -"epss_pct": 0.75032, +"epss_pct": 0.75062, "name": "Mlflow - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-6568.yaml" @@ -32616,7 +32616,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-548", "epss": 0.00913, -"epss_pct": 0.57598, +"epss_pct": 0.57642, "name": "WordPress FastDup <= 2.1.9 Sensitive Information Exposure - Directory Listing", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-6592.yaml" @@ -32626,7 +32626,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-22", "epss": 0.50673, -"epss_pct": 0.98836, +"epss_pct": 0.98838, "name": "Essential Blocks < 4.4.3 - Local File Inclusion", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-6623.yaml" @@ -32636,7 +32636,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-77", "epss": 0.08544, -"epss_pct": 0.94667, +"epss_pct": 0.94674, "name": "LearnPress < 4.2.5.8 - Remote Code Execution", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-6634.yaml" @@ -32646,7 +32646,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "cwe": "CWE-89", "epss": 0.03766, -"epss_pct": 0.89146, +"epss_pct": 0.8916, "name": "Hongjing e-HR 2020 - SQL Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-6655.yaml" @@ -32656,7 +32656,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.0104, -"epss_pct": 0.61622, +"epss_pct": 0.61664, "name": "WP Go Maps (formerly WP Google Maps) < 9.0.29 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-6697.yaml" @@ -32666,14 +32666,14 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-200", "epss": 0.01961, -"epss_pct": 0.78924, +"epss_pct": 0.78948, "name": "WordPress WP Clone <= 2.4.2 - Database Backup Exposure", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-6750.yaml" }, "CVE-2023-6786": { "epss": 0.00513, -"epss_pct": 0.41685, +"epss_pct": 0.41737, "name": "Payment Gateway for Telcell < 2.0.4 - Open Redirect", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-6786.yaml" @@ -32683,7 +32683,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N", "cwe": "CWE-22", "epss": 0.06009, -"epss_pct": 0.92817, +"epss_pct": 0.92826, "name": "WordPress File Manager <= 7.2.1 - Directory Traversal", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-6825.yaml" @@ -32692,7 +32692,7 @@ "cvss": 8.1, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H", "epss": 0.0329, -"epss_pct": 0.87621, +"epss_pct": 0.87636, "name": "mlflow - Path Traversal", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-6831.yaml" @@ -32737,7 +32737,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-29", "epss": 0.03924, -"epss_pct": 0.89609, +"epss_pct": 0.89621, "name": "Mlflow <2.8.0 - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-6977.yaml" @@ -32766,7 +32766,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "cwe": "CWE-78", "epss": 0.09026, -"epss_pct": 0.94906, +"epss_pct": 0.94912, "name": "WeiYe-Jing datax-web <= 2.1.2 - OS Command Injection", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-7116.yaml" @@ -32776,7 +32776,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-200", "epss": 0.02261, -"epss_pct": 0.8177, +"epss_pct": 0.81791, "name": "WordPress BackWPup < 4.0.4 - Backup File Disclosure", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-7164.yaml" @@ -32786,7 +32786,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-548", "epss": 0.01915, -"epss_pct": 0.78402, +"epss_pct": 0.78428, "name": "JetBackup <= 2.0.9.7 - Sensitive Information Exposure via Directory Listing", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-7165.yaml" @@ -32796,14 +32796,14 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.00813, -"epss_pct": 0.54503, +"epss_pct": 0.54547, "name": "System Dashboard < 2.8.10 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-7246.yaml" }, "CVE-2023-7327": { "epss": 0.02111, -"epss_pct": 0.80507, +"epss_pct": 0.80529, "name": "Ozeki 10 SMS Gateway 10.3.208 - Arbitrary File Read", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-7327.yaml" @@ -32813,7 +32813,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-89", "epss": 0.01317, -"epss_pct": 0.68791, +"epss_pct": 0.68828, "name": "JS Help Desk <= 2.8.2 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-7337.yaml" @@ -32833,7 +32833,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-94", "epss": 0.19403, -"epss_pct": 0.97167, +"epss_pct": 0.9717, "name": "SpiderFlow Crawler Platform - Remote Code Execution", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-0195.yaml" @@ -32863,14 +32863,14 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-862", "epss": 0.37957, -"epss_pct": 0.98443, +"epss_pct": 0.98445, "name": "EventON (Free < 2.2.8, Premium < 4.5.5) - Information Disclosure", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-0235.yaml" }, "CVE-2024-0250": { "epss": 0.01254, -"epss_pct": 0.67399, +"epss_pct": 0.67434, "name": "Analytics Insights for Google Analytics 4 < 6.3 - Open Redirect", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-0250.yaml" @@ -32879,14 +32879,14 @@ "cvss": 7.5, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "epss": 0.66932, -"epss_pct": 0.99238, +"epss_pct": 0.9924, "name": "Ncast busiFacade - Remote Command Execution", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-0305.yaml" }, "CVE-2024-0337": { "epss": 0.00891, -"epss_pct": 0.56947, +"epss_pct": 0.5699, "name": "Travelpayouts <= 1.1.16 - Open Redirect", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-0337.yaml" @@ -32906,7 +32906,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-862", "epss": 0.00909, -"epss_pct": 0.57511, +"epss_pct": 0.57555, "name": "WordPress Simple Job Board - Unauthorized Data Access", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-0593.yaml" @@ -32931,7 +32931,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-287", "epss": 0.04342, -"epss_pct": 0.90524, +"epss_pct": 0.90536, "name": "Arcserve Unified Data Protection - Authentication Bypass", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-0799.yaml" @@ -32941,7 +32941,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "cwe": "CWE-75", "epss": 0.41843, -"epss_pct": 0.98587, +"epss_pct": 0.98589, "name": "Arcserve Unified Data Protection - Unauthenticated DoS in ASNative.dll", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-0801.yaml" @@ -32949,7 +32949,7 @@ "CVE-2024-0881": { "cwe": "CWE-284", "epss": 0.16906, -"epss_pct": 0.96831, +"epss_pct": 0.96835, "name": "Combo Blocks < 2.2.76 - Improper Access Control", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-0881.yaml" @@ -32969,7 +32969,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L", "cwe": "CWE-78", "epss": 0.58153, -"epss_pct": 0.99024, +"epss_pct": 0.99027, "name": "Issabel Authenticated - Remote Code Execution", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-0986.yaml" @@ -32979,7 +32979,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N", "cwe": "CWE-288", "epss": 0.39122, -"epss_pct": 0.98487, +"epss_pct": 0.9849, "name": "CodeChecker <= 6.24.1 - Authentication Bypass", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-10081.yaml" @@ -32989,7 +32989,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.00585, -"epss_pct": 0.45649, +"epss_pct": 0.45699, "name": "Simple File List < 6.1.13 - Reflected Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-10146.yaml" @@ -32999,7 +32999,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", "cwe": "CWE-79", "epss": 0.00618, -"epss_pct": 0.47193, +"epss_pct": 0.47244, "name": "Simple Certain Time to Show Content - Cross-Site Scripting", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-10152.yaml" @@ -33009,7 +33009,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-918", "epss": 0.34713, -"epss_pct": 0.98307, +"epss_pct": 0.98309, "name": "Rebuild <= 3.5.5 - Server-Side Request Forgery", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-1021.yaml" @@ -33029,7 +33029,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-77", "epss": 0.28006, -"epss_pct": 0.97962, +"epss_pct": 0.97965, "name": "Synology BeeStation BST150-4T - Unauthenticated Command Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2024/CVE-2024-10443.yaml" @@ -33039,7 +33039,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-862", "epss": 0.00861, -"epss_pct": 0.56021, +"epss_pct": 0.56065, "name": "Google for WooCommerce <= 2.8.6 - Information Disclosure via Publicly Accessible PHP Info File", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-10486.yaml" @@ -33049,7 +33049,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-98", "epss": 0.06479, -"epss_pct": 0.93262, +"epss_pct": 0.93271, "name": "Swift Performance Lite < 2.3.7.2 - Local PHP File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-10516.yaml" @@ -33058,7 +33058,7 @@ "cvss": 9.8, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "epss": 0.04809, -"epss_pct": 0.91333, +"epss_pct": 0.91344, "name": "Chartify \u2013 WordPress Chart Plugin < 2.9.6 - Local File Inclusion", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-10571.yaml" @@ -33068,7 +33068,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.11215, -"epss_pct": 0.95647, +"epss_pct": 0.95653, "name": "WordPress HTML5 Video Player - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-1061.yaml" @@ -33078,7 +33078,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.0203, -"epss_pct": 0.79677, +"epss_pct": 0.79698, "name": "System Dashboard < 2.8.15 - Admin+ Path Traversal", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-10708.yaml" @@ -33098,7 +33098,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-98", "epss": 0.03655, -"epss_pct": 0.88821, +"epss_pct": 0.88835, "name": "WordPress Campress Theme <= 1.35 - Unauthenticated Local File Inclusion", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-10763.yaml" @@ -33108,21 +33108,21 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-862", "epss": 0.02369, -"epss_pct": 0.82637, +"epss_pct": 0.82658, "name": "WordPress Plugin MainWP Child - Authentication Bypass", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-10783.yaml" }, "CVE-2024-10812": { "epss": 0.00568, -"epss_pct": 0.44802, +"epss_pct": 0.44851, "name": "GPT Academic v1.3.9 - Open Redirect", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-10812.yaml" }, "CVE-2024-10908": { "epss": 0.00762, -"epss_pct": 0.52859, +"epss_pct": 0.52902, "name": "FastChat - Open Redirect", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-10908.yaml" @@ -33157,7 +33157,7 @@ }, "CVE-2024-11044": { "epss": 0.00807, -"epss_pct": 0.54327, +"epss_pct": 0.54368, "name": "Stable Diffusion Webui 1.10.0 - Open Redirect", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-11044.yaml" @@ -33167,7 +33167,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L", "cwe": "CWE-22", "epss": 0.05747, -"epss_pct": 0.92532, +"epss_pct": 0.92541, "name": "Landray EKP - Path Traversal", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-11238.yaml" @@ -33177,7 +33177,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.01783, -"epss_pct": 0.76725, +"epss_pct": 0.76752, "name": "Korenix JetPort 5601v3 - Path Traversal", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-11303.yaml" @@ -33187,7 +33187,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "cwe": "CWE-74", "epss": 0.0367, -"epss_pct": 0.88866, +"epss_pct": 0.88879, "name": "Altenergy Power Control Software - SQL Injection", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-11305.yaml" @@ -33207,7 +33207,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-359", "epss": 0.02015, -"epss_pct": 0.79526, +"epss_pct": 0.7955, "name": "Event Monster <= 1.4.3 - Information Exposure Via Visitors List Export", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-11396.yaml" @@ -33217,7 +33217,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.0091, -"epss_pct": 0.57515, +"epss_pct": 0.57558, "name": "idcCMS V1.60 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-11587.yaml" @@ -33233,8 +33233,8 @@ "CVE-2024-11680": { "cvss": 9.8, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", -"epss": 0.91458, -"epss_pct": 0.99804, +"epss": 0.91697, +"epss_pct": 0.99807, "name": "ProjectSend <= r1605 - Improper Authorization", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-11680.yaml" @@ -33244,7 +33244,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-89", "epss": 0.13515, -"epss_pct": 0.96172, +"epss_pct": 0.96177, "name": "KiviCare Clinic & Patient Management System (EHR) <= 3.6.4 - SQL Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-11728.yaml" @@ -33254,7 +33254,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "cwe": "CWE-94", "epss": 0.01888, -"epss_pct": 0.78078, +"epss_pct": 0.78104, "name": "Download Manager < 3.3.04 - Unauthenticated Arbitrary Shortcode Execution", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-11740.yaml" @@ -33264,7 +33264,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "cwe": "CWE-601", "epss": 0.01799, -"epss_pct": 0.76936, +"epss_pct": 0.76963, "name": "Gradio - Server Side Request Forgery", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-1183.yaml" @@ -33274,7 +33274,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-284", "epss": 0.01131, -"epss_pct": 0.64169, +"epss_pct": 0.64207, "name": "LearnPress < 4.2.7.4 - Course Material - Information Disclosure", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-11868.yaml" @@ -33284,7 +33284,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.00803, -"epss_pct": 0.54178, +"epss_pct": 0.54219, "name": "Give WP Plugin < 3.19.0 - Cross-Site Scripting", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-11921.yaml" @@ -33303,7 +33303,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-532", "epss": 0.02269, -"epss_pct": 0.81833, +"epss_pct": 0.81853, "name": "W3 Total Cache < 2.8.2 - Log File Exposure", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-12008.yaml" @@ -33313,7 +33313,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-89", "epss": 0.02572, -"epss_pct": 0.84068, +"epss_pct": 0.84088, "name": "WordPress Collapsing Categories <= 3.0.8 - SQL Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-12025.yaml" @@ -33322,7 +33322,7 @@ "cvss": 5.3, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "epss": 0.05285, -"epss_pct": 0.92, +"epss_pct": 0.92011, "name": "LearnDash LMS < 4.10.3 - Sensitive Information Exposure", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-1208.yaml" @@ -33331,7 +33331,7 @@ "cvss": 5.3, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "epss": 0.02419, -"epss_pct": 0.83011, +"epss_pct": 0.83032, "name": "LearnDash LMS < 4.10.2 - Sensitive Information Exposure via assignments", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-1209.yaml" @@ -33340,7 +33340,7 @@ "cvss": 5.3, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "epss": 0.02027, -"epss_pct": 0.79651, +"epss_pct": 0.79675, "name": "LearnDash LMS < 4.10.2 - Sensitive Information Exposure", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-1210.yaml" @@ -33360,7 +33360,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-98", "epss": 0.23364, -"epss_pct": 0.97616, +"epss_pct": 0.9762, "name": "WP Umbrella Update Backup Restore & Monitoring <= 2.17.0 - Local File Inclusion", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-12209.yaml" @@ -33399,7 +33399,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", "cwe": "CWE-79", "epss": 0.00548, -"epss_pct": 0.43737, +"epss_pct": 0.43783, "name": "Bulk Me Now! Plugin <= 2.0 - Cross-Site Scripting", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-12638.yaml" @@ -33409,7 +33409,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.00573, -"epss_pct": 0.45041, +"epss_pct": 0.45092, "name": "WP DeskLite - Reflected XSS", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-12724.yaml" @@ -33419,7 +33419,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.00573, -"epss_pct": 0.45041, +"epss_pct": 0.45092, "name": "AffiliateImporterEb <= 1.0.6 - Reflected XSS", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-12732.yaml" @@ -33429,7 +33429,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.00573, -"epss_pct": 0.45041, +"epss_pct": 0.45092, "name": "Advance Post Prefix WordPress plugin - Reflected XSS", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-12734.yaml" @@ -33439,7 +33439,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.00589, -"epss_pct": 0.45841, +"epss_pct": 0.45892, "name": "WP BASE Booking - Reflected XSS", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-12737.yaml" @@ -33449,7 +33449,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", "cwe": "CWE-79", "epss": 0.00582, -"epss_pct": 0.45506, +"epss_pct": 0.45556, "name": "WordPress Competition Form Plugin <= 2.0 - Cross-Site Scripting", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-12749.yaml" @@ -33459,7 +33459,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-620", "epss": 0.02342, -"epss_pct": 0.82453, +"epss_pct": 0.82474, "name": "Nokri \u2013 Job Board WordPress Theme <= 1.6.2 - Unauthenticated Arbitrary Password Change", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-12824.yaml" @@ -33469,7 +33469,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.46858, -"epss_pct": 0.98742, +"epss_pct": 0.98743, "name": "Error Log Viewer By WP Guru <= 1.0.1.3 - Missing Authorization to Arbitrary File Read", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-12849.yaml" @@ -33479,7 +33479,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.00583, -"epss_pct": 0.45512, +"epss_pct": 0.45561, "name": "Custom Field Manager WordPress - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-12873.yaml" @@ -33504,7 +33504,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", "cwe": "CWE-79", "epss": 0.00537, -"epss_pct": 0.43139, +"epss_pct": 0.4319, "name": "Dyn Business Panel Plugin <= 1.0.0 - Cross-Site Scripting", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13055.yaml" @@ -33514,7 +33514,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", "cwe": "CWE-79", "epss": 0.00571, -"epss_pct": 0.44948, +"epss_pct": 0.44998, "name": "WP Triggers Lite - Cross-Site Scripting", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13094.yaml" @@ -33524,7 +33524,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.00693, -"epss_pct": 0.50437, +"epss_pct": 0.50485, "name": "WP Finance Plugin <= 1.3.6 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13097.yaml" @@ -33534,7 +33534,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.00708, -"epss_pct": 0.50977, +"epss_pct": 0.51025, "name": "WordPress Email Newsletter - Reflected XSS", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13098.yaml" @@ -33544,7 +33544,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.00693, -"epss_pct": 0.50437, +"epss_pct": 0.50485, "name": "Widget4Call WordPress - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13099.yaml" @@ -33554,7 +33554,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.00594, -"epss_pct": 0.46028, +"epss_pct": 0.46078, "name": "WP MediaTagger <= 4.1.1 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13112.yaml" @@ -33564,7 +33564,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.00584, -"epss_pct": 0.45577, +"epss_pct": 0.45625, "name": "WP Projects Portfolio <= 3.0 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13114.yaml" @@ -33574,7 +33574,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-552", "epss": 0.00465, -"epss_pct": 0.38499, +"epss_pct": 0.38548, "name": "WordPress Download Manager < 3.3.07 - Unauthenticated Data Exposure", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13126.yaml" @@ -33614,7 +33614,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.00581, -"epss_pct": 0.45456, +"epss_pct": 0.45506, "name": "Privacy Policy Genius - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13219.yaml" @@ -33624,7 +33624,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.00581, -"epss_pct": 0.45456, +"epss_pct": 0.45506, "name": "WordPress Google Map Professional - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13220.yaml" @@ -33634,7 +33634,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.00594, -"epss_pct": 0.46028, +"epss_pct": 0.46079, "name": "Fantastic ElasticSearch Plugin <= 4.1.0 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13221.yaml" @@ -33644,7 +33644,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.00584, -"epss_pct": 0.45577, +"epss_pct": 0.45626, "name": "WordPress User Messages <= 1.2.4 - Reflected XSS", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13222.yaml" @@ -33654,7 +33654,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.00594, -"epss_pct": 0.46028, +"epss_pct": 0.46078, "name": "SlideDeck 1 Lite Content Slider - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13224.yaml" @@ -33664,7 +33664,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.00594, -"epss_pct": 0.46027, +"epss_pct": 0.46078, "name": "ECT Home Page Products - Reflected XSS", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13225.yaml" @@ -33674,7 +33674,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.00594, -"epss_pct": 0.46028, +"epss_pct": 0.46078, "name": "A5 Custom Login Page - Reflected XSS", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13226.yaml" @@ -33684,7 +33684,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-89", "epss": 0.01735, -"epss_pct": 0.76059, +"epss_pct": 0.76085, "name": "Ads Pro Plugin <= 4.88 - Unauthenticated SQL Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13322.yaml" @@ -33694,7 +33694,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.00584, -"epss_pct": 0.45576, +"epss_pct": 0.45625, "name": "Glossy WordPress - Reflected XSS", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13325.yaml" @@ -33704,7 +33704,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.00584, -"epss_pct": 0.45576, +"epss_pct": 0.45626, "name": "iBuildApp <= 0.2.0 - Reflected Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13326.yaml" @@ -33714,7 +33714,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.00584, -"epss_pct": 0.45578, +"epss_pct": 0.45625, "name": "Musicbox WordPress - Reflected XSS", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13327.yaml" @@ -33724,7 +33724,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.00584, -"epss_pct": 0.45578, +"epss_pct": 0.45626, "name": "Giga Messenger WordPress - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13328.yaml" @@ -33734,7 +33734,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", "cwe": "CWE-79", "epss": 0.00573, -"epss_pct": 0.45035, +"epss_pct": 0.45086, "name": "JustRows WordPress - Cross-Site Scripting", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13330.yaml" @@ -33744,7 +33744,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.00584, -"epss_pct": 0.45577, +"epss_pct": 0.45626, "name": "WP Dream Carousel < 1.0.1b - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13331.yaml" @@ -33760,8 +33760,8 @@ "cvss": 7.1, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", "cwe": "CWE-79", -"epss": 0.0055, -"epss_pct": 0.43887, +"epss": 0.00561, +"epss_pct": 0.44512, "name": "Legull WordPress - Cross-Site Scripting", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13352.yaml" @@ -33770,8 +33770,8 @@ "cvss": 6.1, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", -"epss": 0.00573, -"epss_pct": 0.45044, +"epss": 0.00584, +"epss_pct": 0.45661, "name": "Guten Free Options - Cross Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13492.yaml" @@ -33781,7 +33781,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.02231, -"epss_pct": 0.81535, +"epss_pct": 0.81557, "name": "GamiPress <= 2.8.9 - SQL Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13496.yaml" @@ -33791,7 +33791,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.00576, -"epss_pct": 0.45174, +"epss_pct": 0.45224, "name": "Zarinpal Paid Download - Reflected XSS", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13543.yaml" @@ -33801,7 +33801,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", "cwe": "CWE-79", "epss": 0.00533, -"epss_pct": 0.42935, +"epss_pct": 0.42984, "name": "WordPress Front End Users - Reflected XSS", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13569.yaml" @@ -33811,7 +33811,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.00576, -"epss_pct": 0.45174, +"epss_pct": 0.45225, "name": "WordPress Stray Random Quotes <= 1.9.9 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13570.yaml" @@ -33821,7 +33821,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-200", "epss": 0.01607, -"epss_pct": 0.74186, +"epss_pct": 0.74217, "name": "WordPress 1 Click Migration Plugin < 2.3 - Information Exposure", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13609.yaml" @@ -33831,7 +33831,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.00573, -"epss_pct": 0.45041, +"epss_pct": 0.45092, "name": "LifterLMS < 8.0.1 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13619.yaml" @@ -33841,7 +33841,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N", "cwe": "CWE-79", "epss": 0.00668, -"epss_pct": 0.49408, +"epss_pct": 0.4946, "name": "WordPress WPMovieLibrary Plugin <= 2.1.4.8 - Cross-Site Scripting", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13624.yaml" @@ -33851,7 +33851,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", "cwe": "CWE-79", "epss": 0.00562, -"epss_pct": 0.44496, +"epss_pct": 0.44544, "name": "Tube Video Ads Lite - Reflected XSS", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13625.yaml" @@ -33861,7 +33861,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L", "cwe": "CWE-79", "epss": 0.00821, -"epss_pct": 0.54779, +"epss_pct": 0.5482, "name": "OWL Carousel Slider - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13627.yaml" @@ -33871,7 +33871,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.0064, -"epss_pct": 0.48205, +"epss_pct": 0.48254, "name": "WP Pricing Table - Reflected XSS", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13628.yaml" @@ -33881,7 +33881,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.00589, -"epss_pct": 0.45841, +"epss_pct": 0.45892, "name": "NewsTicker <= 1.0 - Reflected Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13630.yaml" @@ -33891,7 +33891,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.00609, -"epss_pct": 0.46741, +"epss_pct": 0.46793, "name": "Post Sync Plugin <= 1.1 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13634.yaml" @@ -33901,7 +33901,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N", "cwe": "CWE-89", "epss": 0.01948, -"epss_pct": 0.78788, +"epss_pct": 0.78811, "name": "Themes Coder Ecommerce <= 1.3.4 - SQL Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13726.yaml" @@ -33911,7 +33911,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.0062, -"epss_pct": 0.47282, +"epss_pct": 0.47332, "name": "MemberSpace WordPress - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13727.yaml" @@ -33920,7 +33920,7 @@ "cvss": 5.3, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "epss": 0.50192, -"epss_pct": 0.98823, +"epss_pct": 0.98825, "name": "Relevanssi (A Better Search) <= 4.22.0 - Query Log Export", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-1380.yaml" @@ -33930,7 +33930,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.006, -"epss_pct": 0.46356, +"epss_pct": 0.46409, "name": "WordPress SEO Tools Plugin 4.0.7 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13853.yaml" @@ -33940,7 +33940,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N", "cwe": "CWE-601", "epss": 0.00745, -"epss_pct": 0.52269, +"epss_pct": 0.52317, "name": "WPMobile.App <= 11.56 - Open Redirect", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13888.yaml" @@ -33950,7 +33950,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.03106, -"epss_pct": 0.86851, +"epss_pct": 0.86866, "name": "St. Joe ERP system - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13979.yaml" @@ -33960,7 +33960,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-78", "epss": 0.14607, -"epss_pct": 0.964, +"epss_pct": 0.96405, "name": "Dahua EIMS - Unauthenticated Remote Code Execution via capture_handle", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-13985.yaml" @@ -33975,7 +33975,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-29", "epss": 0.02718, -"epss_pct": 0.84984, +"epss_pct": 0.85002, "name": "Mlflow < 2.9.2 - Path Traversal", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-1483.yaml" @@ -33994,7 +33994,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-29", "epss": 0.09314, -"epss_pct": 0.95015, +"epss_pct": 0.95021, "name": "Gradio 4.3-4.12 - Local File Read", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-1561.yaml" @@ -34042,7 +34042,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-89", "epss": 0.03109, -"epss_pct": 0.86864, +"epss_pct": 0.86879, "name": "Tutor LMS <= 2.1.10 - SQL Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-1751.yaml" @@ -34052,7 +34052,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N", "cwe": "CWE-918", "epss": 0.22644, -"epss_pct": 0.97554, +"epss_pct": 0.97557, "name": "Cisco Finesse - Server-Side Request Forgery (SSRF)", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-20404.yaml" @@ -34082,7 +34082,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-532", "epss": 0.51897, -"epss_pct": 0.98869, +"epss_pct": 0.9887, "name": "Cisco Smart Licensing Utility UnAuthenticated Logs Exposure Leaking Plaintext Credentials", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-20440.yaml" @@ -34092,7 +34092,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-23", "epss": 0.44579, -"epss_pct": 0.98675, +"epss_pct": 0.98678, "name": "Artica Proxy - Unauthenticated LFI", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-2053.yaml" @@ -34119,7 +34119,7 @@ "cvss": 8.6, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N", "epss": 0.01783, -"epss_pct": 0.76718, +"epss_pct": 0.76745, "name": "Oracle Retail Xstore Suite - Pre-authenticated Path Traversal", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-21136.yaml" @@ -34129,7 +34129,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01487, -"epss_pct": 0.72236, +"epss_pct": 0.72265, "name": "Dash Framework - Cross-site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-21485.yaml" @@ -34139,7 +34139,7 @@ "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "cwe": "CWE-22", "epss": 0.0132, -"epss_pct": 0.68867, +"epss_pct": 0.68904, "name": "MobSF - Path Traversal", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-21633.yaml" @@ -34149,7 +34149,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N", "cwe": "CWE-601", "epss": 0.01067, -"epss_pct": 0.62428, +"epss_pct": 0.62468, "name": "Flarum < 1.8.5 - Open Redirect", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-21641.yaml" @@ -34159,7 +34159,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-284", "epss": 0.42443, -"epss_pct": 0.98604, +"epss_pct": 0.98606, "name": "pyLoad Flask Config - Access Control", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-21644.yaml" @@ -34169,7 +34169,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "cwe": "CWE-74", "epss": 0.24698, -"epss_pct": 0.97731, +"epss_pct": 0.97734, "name": "pyload - Log Injection", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-21645.yaml" @@ -34226,7 +34226,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H", "cwe": "CWE-20", "epss": 0.76618, -"epss_pct": 0.99505, +"epss_pct": 0.99507, "name": "Zabbix Server - Time-Based Blind SQL injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2024/CVE-2024-22120.yaml" @@ -34236,7 +34236,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-1188", "epss": 0.0229, -"epss_pct": 0.82019, +"epss_pct": 0.8204, "name": "Fastify Swagger-UI - Information Disclosure", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-22207.yaml" @@ -34246,7 +34246,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-74", "epss": 0.764, -"epss_pct": 0.99501, +"epss_pct": 0.99502, "name": "IBM Operational Decision Manager - JNDI Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-22319.yaml" @@ -34266,7 +34266,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "cwe": "CWE-20", "epss": 0.35723, -"epss_pct": 0.98348, +"epss_pct": 0.9835, "name": "Intel Neural Compressor <2.5.0 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-22476.yaml" @@ -34286,7 +34286,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01028, -"epss_pct": 0.61244, +"epss_pct": 0.61285, "name": "eyoucms v.1.6.5 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-22927.yaml" @@ -34296,7 +34296,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.00918, -"epss_pct": 0.57781, +"epss_pct": 0.57829, "name": "Plone Docker - Host Header Injection", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-23055.yaml" @@ -34306,7 +34306,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "cwe": "CWE-78", "epss": 0.78375, -"epss_pct": 0.99548, +"epss_pct": 0.9955, "name": "Fortinet FortiSIEM - OS Command Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2024/CVE-2024-23108.yaml" @@ -34316,7 +34316,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "cwe": "CWE-89", "epss": 0.17622, -"epss_pct": 0.96929, +"epss_pct": 0.96933, "name": "NS-ASG Application Security Gateway 6.3 - Sql Injection", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-2330.yaml" @@ -34335,7 +34335,7 @@ "cvss": 5.3, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "epss": 0.27997, -"epss_pct": 0.97962, +"epss_pct": 0.97964, "name": "Avada < 7.11.7 - Information Disclosure", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-2340.yaml" @@ -34383,7 +34383,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.03348, -"epss_pct": 0.87827, +"epss_pct": 0.87841, "name": "Exrick XMall - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-24112.yaml" @@ -34393,7 +34393,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-287", "epss": 0.28411, -"epss_pct": 0.97985, +"epss_pct": 0.97987, "name": "Ruijie RG-NBS2009G-P - Improper Authentication", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-24116.yaml" @@ -34403,7 +34403,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.00924, -"epss_pct": 0.57944, +"epss_pct": 0.57991, "name": "SuperWebMailer 9.31.0.01799 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-24131.yaml" @@ -34413,7 +34413,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-78", "epss": 0.06172, -"epss_pct": 0.92983, +"epss_pct": 0.92991, "name": "TotoLink Router setMacFilterRules - Command Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-24328.yaml" @@ -34423,7 +34423,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-78", "epss": 0.06172, -"epss_pct": 0.92983, +"epss_pct": 0.92992, "name": "TotoLink Router setPortForwardRules - Command Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-24329.yaml" @@ -34433,7 +34433,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.03084, -"epss_pct": 0.86771, +"epss_pct": 0.86787, "name": "CrateDB Database - Arbitrary File Read", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-24565.yaml" @@ -34443,7 +34443,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-200", "epss": 0.01235, -"epss_pct": 0.66959, +"epss_pct": 0.66991, "name": "WPS Hide Login <= 1.9.15.2 - Login Page Disclosure", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-2473.yaml" @@ -34453,7 +34453,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "cwe": "CWE-918", "epss": 0.04936, -"epss_pct": 0.9153, +"epss_pct": 0.91541, "name": "MindsDB -DNS Rebinding SSRF Protection Bypass", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-24759.yaml" @@ -34463,7 +34463,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L", "cwe": "CWE-601", "epss": 0.01057, -"epss_pct": 0.62086, +"epss_pct": 0.62127, "name": "JumpServer < 3.10.0 - Open Redirect", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-24763.yaml" @@ -34473,7 +34473,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:L", "cwe": "CWE-27", "epss": 0.54413, -"epss_pct": 0.98936, +"epss_pct": 0.98938, "name": "Traccar - Unrestricted File Upload", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-24809.yaml" @@ -34483,7 +34483,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-269", "epss": 0.02094, -"epss_pct": 0.80348, +"epss_pct": 0.80371, "name": "Masteriyo LMS <= 1.7.2 - Unauthenticated Privilege Escalation", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-24882.yaml" @@ -34510,28 +34510,28 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-601", "epss": 0.0096, -"epss_pct": 0.59094, +"epss_pct": 0.5914, "name": "Liferay Portal - Open Redirect", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-25608.yaml" }, "CVE-2024-25723": { "epss": 0.70785, -"epss_pct": 0.9935, +"epss_pct": 0.99352, "name": "ZenML ZenML Server - Improper Authentication", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-25723.yaml" }, "CVE-2024-25735": { "epss": 0.50622, -"epss_pct": 0.98833, +"epss_pct": 0.98836, "name": "WyreStorm Apollo VX20 - Information Disclosure", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-25735.yaml" }, "CVE-2024-25852": { "epss": 0.16519, -"epss_pct": 0.96768, +"epss_pct": 0.96772, "name": "Linksys RE7000 - Command Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-25852.yaml" @@ -34541,7 +34541,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "cwe": "CWE-89", "epss": 0.0194, -"epss_pct": 0.78702, +"epss_pct": 0.78726, "name": "Fujian Kelixin Communication - Command Injection", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-2621.yaml" @@ -34551,7 +34551,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-285", "epss": 0.01083, -"epss_pct": 0.62847, +"epss_pct": 0.62889, "name": "Avid NEXIS Agent - Arbitrary File Read", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-26291.yaml" @@ -34568,7 +34568,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-434", "epss": 0.05794, -"epss_pct": 0.92588, +"epss_pct": 0.92597, "name": "InstaWP Connect <= 0.1.0.22 - Unauthenticated Arbitrary File Upload", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-2667.yaml" @@ -34578,7 +34578,7 @@ "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/S:N/AU:Y/R:I/V:C/RE:M/U:Red", "cwe": "CWE-434", "epss": 0.0459, -"epss_pct": 0.90988, +"epss_pct": 0.91, "name": "SOPlanning - Remote Code Execution", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-27115.yaml" @@ -34607,8 +34607,8 @@ "cvss": 7.5, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-706", -"epss": 0.69486, -"epss_pct": 0.99311, +"epss": 0.69272, +"epss_pct": 0.99306, "name": "Docassemble - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-27292.yaml" @@ -34626,21 +34626,21 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.23632, -"epss_pct": 0.97641, +"epss_pct": 0.97643, "name": "Zimbra Collaboration - Cross-Site Scripting (XSS)", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-27443.yaml" }, "CVE-2024-27497": { "epss": 0.26657, -"epss_pct": 0.97874, +"epss_pct": 0.97877, "name": "Linksys E2000 1.0.06 position.js Improper Authentication", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-27497.yaml" }, "CVE-2024-27564": { "epss": 0.40637, -"epss_pct": 0.98548, +"epss_pct": 0.98551, "name": "ChatGPT\u4e2a\u4eba\u4e13\u7528\u7248 - Server Side Request Forgery", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-27564.yaml" @@ -34650,14 +34650,14 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-862", "epss": 0.02333, -"epss_pct": 0.82361, +"epss_pct": 0.82383, "name": "Contact Form Plugin by Fluent Forms < 5.1.17 - Unauthenticated Limited Privilege Escalation", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-2771.yaml" }, "CVE-2024-27718": { "epss": 0.01101, -"epss_pct": 0.63382, +"epss_pct": 0.6342, "name": "Smart s200 Management Platform v.S200 - SQL Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-27718.yaml" @@ -34667,7 +34667,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "cwe": "CWE-862", "epss": 0.0123, -"epss_pct": 0.66839, +"epss_pct": 0.66871, "name": "WordPress FluentForms <= 5.1.16 - Broken Access Control", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-2782.yaml" @@ -34676,7 +34676,7 @@ "cvss": 9.8, "cwe": "CWE-918", "epss": 0.72953, -"epss_pct": 0.99411, +"epss_pct": 0.99413, "name": "WordPress Automatic Plugin <3.92.1 - Arbitrary File Download and SSRF", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-27954.yaml" @@ -34695,7 +34695,7 @@ "cvss": 9.8, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "epss": 0.68266, -"epss_pct": 0.99276, +"epss_pct": 0.99277, "name": "WordPress LiteSpeed Cache - Unauthenticated Privilege Escalation to Admin", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-28000.yaml" @@ -34705,7 +34705,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "cwe": "CWE-287", "epss": 0.01946, -"epss_pct": 0.78758, +"epss_pct": 0.78782, "name": "N-able N-central < 2024.2 - Authentication Bypass Detection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-28200.yaml" @@ -34715,7 +34715,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L", "cwe": "CWE-94", "epss": 0.12527, -"epss_pct": 0.9594, +"epss_pct": 0.95945, "name": "OpenMetaData - SpEL Injection in PUT /api/v1/policies", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-28253.yaml" @@ -34725,7 +34725,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-287", "epss": 0.73255, -"epss_pct": 0.99418, +"epss_pct": 0.99419, "name": "OpenMetadata - Authentication Bypass", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-28255.yaml" @@ -34735,7 +34735,7 @@ "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "cwe": "CWE-94", "epss": 0.04548, -"epss_pct": 0.90918, +"epss_pct": 0.90929, "name": "pyload-ng js2py - Remote Code Execution", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-28397.yaml" @@ -34745,7 +34745,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-640", "epss": 0.51001, -"epss_pct": 0.98847, +"epss_pct": 0.98848, "name": "LG LED Assistant - Unauthenticated Password Reset", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-2862.yaml" @@ -34755,7 +34755,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01317, -"epss_pct": 0.68803, +"epss_pct": 0.68839, "name": "RiteCMS 3.0.0 - Cross-site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-28623.yaml" @@ -34765,14 +34765,14 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-22", "epss": 0.63999, -"epss_pct": 0.99163, +"epss_pct": 0.99165, "name": "LG LED Assistant - Thumbnail Path Traversal File Upload", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-2863.yaml" }, "CVE-2024-28734": { "epss": 0.01791, -"epss_pct": 0.76818, +"epss_pct": 0.76844, "name": "Coda v.2024Q1 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-28734.yaml" @@ -34789,7 +34789,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-89", "epss": 0.18402, -"epss_pct": 0.97026, +"epss_pct": 0.97028, "name": "WordPress Plugin LayerSlider 7.9.11-7.10.0 - SQL Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-2879.yaml" @@ -34826,7 +34826,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-918", "epss": 0.01049, -"epss_pct": 0.61875, +"epss_pct": 0.61915, "name": "Memos 0.13.2 - Server-Side Request Forgery", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-29028.yaml" @@ -34862,7 +34862,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", "cwe": "CWE-79", "epss": 0.00617, -"epss_pct": 0.47133, +"epss_pct": 0.47184, "name": "WordPress Tourfic Plugin <= 2.11.7 - Cross-Site Scripting", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-29137.yaml" @@ -34872,7 +34872,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.00617, -"epss_pct": 0.47134, +"epss_pct": 0.47184, "name": "WordPress Restrict User Access <= 2.5 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-29138.yaml" @@ -34882,7 +34882,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-918", "epss": 0.02199, -"epss_pct": 0.81275, +"epss_pct": 0.81296, "name": "GeoServer Demo Request Endpoint - Server Side Request Forgery", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-29198.yaml" @@ -34891,7 +34891,7 @@ "cvss": 9.8, "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "epss": 0.06294, -"epss_pct": 0.93101, +"epss_pct": 0.93108, "name": "Telesquare TLR-2005KSH - Remote Command Execution", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-29269.yaml" @@ -34901,7 +34901,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "cwe": "CWE-434", "epss": 0.09366, -"epss_pct": 0.95036, +"epss_pct": 0.95042, "name": "VvvebJs < 1.7.5 - Arbitrary File Upload", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-29272.yaml" @@ -34911,7 +34911,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-29", "epss": 0.21847, -"epss_pct": 0.97472, +"epss_pct": 0.97475, "name": "MLflow < 2.11.3 - Path Traversal", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-2928.yaml" @@ -34931,7 +34931,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.0074, -"epss_pct": 0.5212, +"epss_pct": 0.52168, "name": "Unlimited Elements for Elementor <= 1.5.93 - Cross Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-29792.yaml" @@ -34948,7 +34948,7 @@ "CVE-2024-29868": { "cwe": "CWE-338", "epss": 0.05995, -"epss_pct": 0.92805, +"epss_pct": 0.92814, "name": "Apache StreamPipes <= 0.93.0 - Use of Cryptographically Weak PRNG in Recovery Token Generation", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-29868.yaml" @@ -34958,7 +34958,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01086, -"epss_pct": 0.62937, +"epss_pct": 0.62979, "name": "HTTP API DOM - XSS on JSONP callback", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/headless/cves/2024/CVE-2024-29882.yaml" @@ -34988,7 +34988,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.00753, -"epss_pct": 0.52541, +"epss_pct": 0.52587, "name": "WP Go Maps <= 9.0.29 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-29931.yaml" @@ -35008,7 +35008,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-78", "epss": 0.86089, -"epss_pct": 0.99715, +"epss_pct": 0.99716, "name": "Zyxel NAS326 Firmware < V5.21(AAZF.17)C0 - Command Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-29973.yaml" @@ -35018,7 +35018,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.08676, -"epss_pct": 0.94738, +"epss_pct": 0.94745, "name": "IPS Community Suite - Unauthenticated SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-30163.yaml" @@ -35027,7 +35027,7 @@ "cvss": 8.1, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "epss": 0.05987, -"epss_pct": 0.92795, +"epss_pct": 0.92804, "name": "Apache DolphinScheduler >= 3.1.0, < 3.2.2 Resource File Read And Write", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-30188.yaml" @@ -35037,7 +35037,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.00721, -"epss_pct": 0.5144, +"epss_pct": 0.51487, "name": "Sunshine Photo Cart <= 3.1.1 - Reflected Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-30194.yaml" @@ -35047,7 +35047,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-200", "epss": 0.15875, -"epss_pct": 0.96646, +"epss_pct": 0.9665, "name": "DataEase <= 2.4.1 - Sensitive Information Exposure", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-30269.yaml" @@ -35057,7 +35057,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-601", "epss": 0.00816, -"epss_pct": 0.546, +"epss_pct": 0.54642, "name": "WordPress Themify Builder < 7.5.8 - Open Redirect", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-3032.yaml" @@ -35067,7 +35067,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "cwe": "CWE-862", "epss": 0.01504, -"epss_pct": 0.72541, +"epss_pct": 0.72571, "name": "WPZOOM Social Icons Widget <= 4.2.15 - Missing Authorization", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-30464.yaml" @@ -35082,7 +35082,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L", "cwe": "CWE-89", "epss": 0.02248, -"epss_pct": 0.81675, +"epss_pct": 0.81696, "name": "CRM Perks Forms <= 1.1.4 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-30498.yaml" @@ -35092,7 +35092,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.02248, -"epss_pct": 0.81675, +"epss_pct": 0.81696, "name": "WP Travel Engine <= 5.7.9 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-30502.yaml" @@ -35112,7 +35112,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-200", "epss": 0.01907, -"epss_pct": 0.78306, +"epss_pct": 0.78332, "name": "Netgear R6850 - Information Disclosure", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-30569.yaml" @@ -35122,7 +35122,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-200", "epss": 0.01221, -"epss_pct": 0.66591, +"epss_pct": 0.66625, "name": "Netgear R6850 - Information Disclosure", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-30570.yaml" @@ -35132,7 +35132,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-287", "epss": 0.43456, -"epss_pct": 0.98643, +"epss_pct": 0.98645, "name": "ASUS DSL-AC88U - Authentication Bypass", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-3080.yaml" @@ -35152,7 +35152,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-862", "epss": 0.38023, -"epss_pct": 0.98445, +"epss_pct": 0.98448, "name": "NextGEN Gallery <= 3.59 - Missing Authorization to Unauthenticated Information Disclosure", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-3097.yaml" @@ -35176,7 +35176,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-497", "epss": 0.01105, -"epss_pct": 0.6348, +"epss_pct": 0.6352, "name": "Fides Privacy Center \u2264 2.39.1 - Server-Side URL Disclosure", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-31223.yaml" @@ -35185,7 +35185,7 @@ "cvss": 9.8, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "epss": 0.05018, -"epss_pct": 0.91649, +"epss_pct": 0.9166, "name": "MasterStudy LMS <= 3.3.3 - Unauthenticated Local File Inclusion via template", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-3136.yaml" @@ -35202,7 +35202,7 @@ }, "CVE-2024-31750": { "epss": 0.1927, -"epss_pct": 0.97145, +"epss_pct": 0.97148, "name": "F-logic DataCube3 - SQL Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-31750.yaml" @@ -35212,7 +35212,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.08038, -"epss_pct": 0.94374, +"epss_pct": 0.94382, "name": "CHAOS 5.0.1 'sendCommandHandler' - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-31839.yaml" @@ -35222,7 +35222,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-22", "epss": 0.08086, -"epss_pct": 0.94403, +"epss_pct": 0.94411, "name": "CData API Server < 23.4.8844 - Path Traversal", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-31848.yaml" @@ -35232,7 +35232,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-22", "epss": 0.06076, -"epss_pct": 0.92888, +"epss_pct": 0.92898, "name": "CData Connect < 23.4.8846 - Path Traversal", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-31849.yaml" @@ -35242,7 +35242,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L", "cwe": "CWE-22", "epss": 0.03037, -"epss_pct": 0.8658, +"epss_pct": 0.86595, "name": "CData Arc < 23.4.8839 - Path Traversal", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-31850.yaml" @@ -35252,7 +35252,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L", "cwe": "CWE-22", "epss": 0.02885, -"epss_pct": 0.85902, +"epss_pct": 0.85917, "name": "CData Sync < 23.4.8843 - Path Traversal", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-31851.yaml" @@ -35262,7 +35262,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-95", "epss": 0.3428, -"epss_pct": 0.98288, +"epss_pct": 0.9829, "name": "XWiki < 4.10.20 - Remote code execution", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-31982.yaml" @@ -35289,7 +35289,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "cwe": "CWE-1188", "epss": 0.07148, -"epss_pct": 0.93819, +"epss_pct": 0.93826, "name": "Apache ActiveMQ 6.x < 6.1.2 - Broken Access Control", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-32114.yaml" @@ -35301,7 +35301,7 @@ }, "CVE-2024-32231": { "epss": 0.0117, -"epss_pct": 0.6522, +"epss_pct": 0.65257, "name": "Stash < 0.26.0 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-32231.yaml" @@ -35321,7 +35321,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.00678, -"epss_pct": 0.49857, +"epss_pct": 0.49906, "name": "Popup4Phone <= 1.3.2 - Unauthenticated Stored Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-3231.yaml" @@ -35331,7 +35331,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-22", "epss": 0.03726, -"epss_pct": 0.89026, +"epss_pct": 0.89039, "name": "Chuanhu Chat - Directory Traversal", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-3234.yaml" @@ -35341,7 +35341,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L", "cwe": "CWE-22", "epss": 0.0316, -"epss_pct": 0.87082, +"epss_pct": 0.87096, "name": "RaidenMAILD Mail Server v.4.9.4 - Path Traversal", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-32399.yaml" @@ -35366,7 +35366,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L", "cwe": "CWE-89", "epss": 0.05803, -"epss_pct": 0.926, +"epss_pct": 0.92609, "name": "WP-Recall <= 16.26.5 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-32709.yaml" @@ -35396,7 +35396,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-306", "epss": 0.06765, -"epss_pct": 0.93503, +"epss_pct": 0.93512, "name": "CyberPower - Missing Authentication", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-32735.yaml" @@ -35405,7 +35405,7 @@ "cvss": 7.5, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "epss": 0.05408, -"epss_pct": 0.9213, +"epss_pct": 0.9214, "name": "CyberPower < v2.8.3 - SQL Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-32736.yaml" @@ -35415,7 +35415,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-89", "epss": 0.05408, -"epss_pct": 0.9213, +"epss_pct": 0.9214, "name": "CyberPower - SQL Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-32737.yaml" @@ -35425,7 +35425,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-89", "epss": 0.04553, -"epss_pct": 0.90928, +"epss_pct": 0.9094, "name": "CyberPower - SQL Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-32738.yaml" @@ -35434,7 +35434,7 @@ "cvss": 7.5, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "epss": 0.05408, -"epss_pct": 0.9213, +"epss_pct": 0.9214, "name": "CyberPower < v2.8.3 - SQL Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-32739.yaml" @@ -35444,7 +35444,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-200", "epss": 0.33484, -"epss_pct": 0.98257, +"epss_pct": 0.9826, "name": "D-LINK DNS-320L,DNS-320LW and DNS-327L - Information Disclosure", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-3274.yaml" @@ -35459,7 +35459,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N", "cwe": "CWE-200", "epss": 0.00751, -"epss_pct": 0.52469, +"epss_pct": 0.52516, "name": "iTop Hub Connector - Information Disclosure", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-32870.yaml" @@ -35469,7 +35469,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:H", "cwe": "CWE-918", "epss": 0.52964, -"epss_pct": 0.98897, +"epss_pct": 0.98899, "name": "Lobe Chat <= v0.150.5 - Server-Side Request Forgery", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-32964.yaml" @@ -35479,14 +35479,14 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H", "cwe": "CWE-502", "epss": 0.02761, -"epss_pct": 0.85244, +"epss_pct": 0.85261, "name": "Delmia Apriso - Pre-Authentication Unsafe .NET Object Deserialization", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-3300.yaml" }, "CVE-2024-33113": { "epss": 0.03419, -"epss_pct": 0.88063, +"epss_pct": 0.88076, "name": "D-LINK DIR-845L bsc_sms_inbox.php file - Information Disclosure", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-33113.yaml" @@ -35501,7 +35501,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.0081, -"epss_pct": 0.54405, +"epss_pct": 0.54449, "name": "LumisXP - Cross-site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-33326.yaml" @@ -35511,7 +35511,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-200", "epss": 0.01121, -"epss_pct": 0.63903, +"epss_pct": 0.63942, "name": "User Meta WP Plugin < 3.1 - Sensitive Information Exposure", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-33575.yaml" @@ -35520,8 +35520,8 @@ "cvss": 7.5, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", -"epss": 0.06175, -"epss_pct": 0.92986, +"epss": 0.06047, +"epss_pct": 0.92867, "name": "Sharp Multifunction Printers - Directory Listing", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-33605.yaml" @@ -35530,8 +35530,8 @@ "cvss": 9.1, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "cwe": "CWE-284", -"epss": 0.45842, -"epss_pct": 0.98714, +"epss": 0.5002, +"epss_pct": 0.9882, "name": "Sharp Multifunction Printers - Cookie Exposure", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-33610.yaml" @@ -35546,7 +35546,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "cwe": "CWE-79", "epss": 0.22002, -"epss_pct": 0.97489, +"epss_pct": 0.97492, "name": "iboss Secure Web Gateway - Stored Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-3378.yaml" @@ -35556,7 +35556,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "cwe": "CWE-918", "epss": 0.0072, -"epss_pct": 0.51405, +"epss_pct": 0.51452, "name": "OneNav v0.9.35-20240318 - Server-Side Request Forgery (SSRF)", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-33832.yaml" @@ -35566,7 +35566,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-288", "epss": 0.00934, -"epss_pct": 0.58311, +"epss_pct": 0.58356, "name": "Masteriyo LMS <= 1.7.3 - Insecure Direct Object Reference", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-33939.yaml" @@ -35585,7 +35585,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "cwe": "CWE-79", "epss": 0.01281, -"epss_pct": 0.68032, +"epss_pct": 0.68067, "name": "Changedetection.io <=v0.45.21 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-34061.yaml" @@ -35611,7 +35611,7 @@ }, "CVE-2024-34257": { "epss": 0.03817, -"epss_pct": 0.89309, +"epss_pct": 0.89323, "name": "TOTOLINK EX1800T TOTOLINK EX1800T - Command Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-34257.yaml" @@ -35621,7 +35621,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-918", "epss": 0.05453, -"epss_pct": 0.92176, +"epss_pct": 0.92186, "name": "Next.js - Server Side Request Forgery (SSRF)", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-34351.yaml" @@ -35631,7 +35631,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.06699, -"epss_pct": 0.93439, +"epss_pct": 0.93448, "name": "HSC Mailinspector 5.2.17-3 through 5.2.18 - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-34470.yaml" @@ -35641,7 +35641,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.00637, -"epss_pct": 0.48083, +"epss_pct": 0.48132, "name": "GP Premium <= 2.4.0 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-3469.yaml" @@ -35651,14 +35651,14 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.13618, -"epss_pct": 0.96199, +"epss_pct": 0.96203, "name": "Wordpress Country State City Dropdown <=2.7.2 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-3495.yaml" }, "CVE-2024-34982": { "epss": 0.04675, -"epss_pct": 0.91128, +"epss_pct": 0.91139, "name": "LyLme-Spage - Arbitary File Upload", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-34982.yaml" @@ -35668,7 +35668,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:H", "cwe": "CWE-22", "epss": 0.03592, -"epss_pct": 0.8862, +"epss_pct": 0.88634, "name": "OpenAPI Generator <= 7.5.0 - Arbitrary File Read/Delete", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-35219.yaml" @@ -35678,14 +35678,14 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.65367, -"epss_pct": 0.992, +"epss_pct": 0.99202, "name": "Mitel MiCollab <= 9.8.0.33 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-35286.yaml" }, "CVE-2024-3552": { "epss": 0.67288, -"epss_pct": 0.99248, +"epss_pct": 0.9925, "name": "Web Directory Free < 1.7.0 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-3552.yaml" @@ -35695,7 +35695,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.05857, -"epss_pct": 0.92668, +"epss_pct": 0.92677, "name": "openSIS < 9.1 - SQL Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-35584.yaml" @@ -35705,7 +35705,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.00957, -"epss_pct": 0.59028, +"epss_pct": 0.59074, "name": "TileServer API - Cross Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-35627.yaml" @@ -35715,7 +35715,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.0059, -"epss_pct": 0.45869, +"epss_pct": 0.4592, "name": "WordPress 12 Step Meeting List Plugin <= 3.14.33 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-35693.yaml" @@ -35725,7 +35725,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", "cwe": "CWE-79", "epss": 0.00668, -"epss_pct": 0.4943, +"epss_pct": 0.49481, "name": "Wordpress WPMobile.App >= 11.42 - Cross-Site Scripting", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-35694.yaml" @@ -35750,7 +35750,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L", "cwe": "CWE-22", "epss": 0.03145, -"epss_pct": 0.87016, +"epss_pct": 0.8703, "name": "Reposilite >= 3.3.0, < 3.5.12 - Arbitrary File Read", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-36117.yaml" @@ -35777,7 +35777,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.05692, -"epss_pct": 0.92469, +"epss_pct": 0.92479, "name": "SuiteCRM - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-36412.yaml" @@ -35787,7 +35787,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.01776, -"epss_pct": 0.76645, +"epss_pct": 0.76672, "name": "Flowise 1.4.3 - Arbitrary File Read", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-36420.yaml" @@ -35802,7 +35802,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "cwe": "CWE-200", "epss": 0.02862, -"epss_pct": 0.85788, +"epss_pct": 0.85804, "name": "Keycloak < 24.0.5 - Broken Access Control", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-3656.yaml" @@ -35812,7 +35812,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N", "cwe": "CWE-918", "epss": 0.01438, -"epss_pct": 0.713, +"epss_pct": 0.71329, "name": "LyLme spage v1.9.5 - Server-Side Request Forgery", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-36675.yaml" @@ -35822,7 +35822,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.00963, -"epss_pct": 0.59206, +"epss_pct": 0.59252, "name": "PrestaShop productsalert - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-36683.yaml" @@ -35831,14 +35831,14 @@ "cvss": 9.1, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "epss": 0.05578, -"epss_pct": 0.92327, +"epss_pct": 0.92337, "name": "Web Directory Free < 1.7.3 - Local File Inclusion", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-3673.yaml" }, "CVE-2024-36837": { "epss": 0.08306, -"epss_pct": 0.94531, +"epss_pct": 0.94538, "name": "CRMEB v.5.2.2 - SQL Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-36837.yaml" @@ -35847,7 +35847,7 @@ "cvss": 7.5, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "epss": 0.02054, -"epss_pct": 0.79933, +"epss_pct": 0.79954, "name": "Jan v0.4.12 'readFileSync' - Path Traversal", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-36857.yaml" @@ -35857,14 +35857,14 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-434", "epss": 0.03035, -"epss_pct": 0.86572, +"epss_pct": 0.86587, "name": "Jan v0.4.12 - Arbitrary File Upload", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-36858.yaml" }, "CVE-2024-36991": { "epss": 0.13006, -"epss_pct": 0.96049, +"epss_pct": 0.96054, "name": "Splunk Enterprise - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-36991.yaml" @@ -35874,7 +35874,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-94", "epss": 0.63037, -"epss_pct": 0.99139, +"epss_pct": 0.99142, "name": "Langflow <= 1.0.12 - Remote Code Execution", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-37014.yaml" @@ -35891,7 +35891,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-306", "epss": 0.02348, -"epss_pct": 0.82495, +"epss_pct": 0.82517, "name": "Argo CD Unauthenticated Access to sensitive setting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-37152.yaml" @@ -35901,7 +35901,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.00624, -"epss_pct": 0.47543, +"epss_pct": 0.47592, "name": "WP Extended < 3.0.0 - Stored Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-37259.yaml" @@ -35911,7 +35911,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.00624, -"epss_pct": 0.47543, +"epss_pct": 0.47593, "name": "WP-Lister Lite for Amazon <= 2.6.16 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-37261.yaml" @@ -35921,7 +35921,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.03304, -"epss_pct": 0.87671, +"epss_pct": 0.87686, "name": "SecurEnvoy Two Factor Authentication - LDAP Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-37393.yaml" @@ -35931,7 +35931,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-312", "epss": 0.01418, -"epss_pct": 0.70933, +"epss_pct": 0.70962, "name": "Electrolink FM/DAB/TV Transmitter (controlloLogin.js) - Credentials Disclosure", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-3742.yaml" @@ -35941,7 +35941,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L", "cwe": "CWE-79", "epss": 0.00801, -"epss_pct": 0.54096, +"epss_pct": 0.54137, "name": "Hostel < 1.1.5.3 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-3753.yaml" @@ -35951,7 +35951,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N", "cwe": "CWE-601", "epss": 0.0049, -"epss_pct": 0.40229, +"epss_pct": 0.40278, "name": "GnuBoard5 5.5.16 - Open Redirect", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-37656.yaml" @@ -35961,7 +35961,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.01852, -"epss_pct": 0.77631, +"epss_pct": 0.77657, "name": "OfficeWeb365 Indexs Interface - Arbitrary File Read", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-37728.yaml" @@ -35971,14 +35971,14 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.53242, -"epss_pct": 0.98904, +"epss_pct": 0.98906, "name": "Craft CMS <=v3.7.31 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-37843.yaml" }, "CVE-2024-37881": { "epss": 0.01184, -"epss_pct": 0.6561, +"epss_pct": 0.65648, "name": "SiteGuard WP Plugin <= 1.7.6 - Login Page Disclosure", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-37881.yaml" @@ -35988,21 +35988,21 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.00741, -"epss_pct": 0.52131, +"epss_pct": 0.52179, "name": "Base64 Encoder/Decoder <= 0.9.2 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-3822.yaml" }, "CVE-2024-38288": { "epss": 0.03216, -"epss_pct": 0.87321, +"epss_pct": 0.87336, "name": "TurboMeeting - Post-Authentication Command Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-38288.yaml" }, "CVE-2024-38289": { "epss": 0.40874, -"epss_pct": 0.98553, +"epss_pct": 0.98556, "name": "TurboMeeting - Boolean-based SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-38289.yaml" @@ -36012,7 +36012,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-338", "epss": 0.01158, -"epss_pct": 0.64879, +"epss_pct": 0.64916, "name": "CodiMD <2.5.4 - Insecure Filename Randomization", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-38353.yaml" @@ -36022,7 +36022,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-918", "epss": 0.6947, -"epss_pct": 0.99309, +"epss_pct": 0.99311, "name": "Apache HTTPd Windows UNC - Server-Side Request Forgery", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-38472.yaml" @@ -36032,7 +36032,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H", "cwe": "CWE-116", "epss": 0.25878, -"epss_pct": 0.97828, +"epss_pct": 0.97831, "name": "Apache HTTP Server - ACL Bypass", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-38473.yaml" @@ -36052,7 +36052,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-29", "epss": 0.43284, -"epss_pct": 0.98631, +"epss_pct": 0.98633, "name": "Mlflow < 2.11.0 - Path Traversal", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-3848.yaml" @@ -36062,7 +36062,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.009, -"epss_pct": 0.57211, +"epss_pct": 0.57253, "name": "Uniview NVR301-04S2-P4 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-3850.yaml" @@ -36072,7 +36072,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "cwe": "CWE-918", "epss": 0.02186, -"epss_pct": 0.81144, +"epss_pct": 0.81166, "name": "NextChat - Server-Side Request Forgery", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-38514.yaml" @@ -36081,7 +36081,7 @@ "cvss": 7.2, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:L", "epss": 0.03832, -"epss_pct": 0.89349, +"epss_pct": 0.89362, "name": "Polyfill Supply Chain Attack Malicious Code Execution", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/headless/cves/2024/CVE-2024-38526.yaml" @@ -36101,7 +36101,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.02004, -"epss_pct": 0.79394, +"epss_pct": 0.79419, "name": "FormLift for Infusionsoft Web Forms <= 7.5.17 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-38773.yaml" @@ -36110,7 +36110,7 @@ "cvss": 7.5, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "epss": 0.14718, -"epss_pct": 0.96425, +"epss_pct": 0.96429, "name": "WebMvc.fn/WebFlux.fn - Path Traversal", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-38816.yaml" @@ -36137,14 +36137,14 @@ }, "CVE-2024-3922": { "epss": 0.53196, -"epss_pct": 0.98902, +"epss_pct": 0.98904, "name": "Dokan Pro <= 3.10.3 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-3922.yaml" }, "CVE-2024-39250": { "epss": 0.04927, -"epss_pct": 0.91515, +"epss_pct": 0.91526, "name": "EfroTech Timetrax v8.3 - Sql Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-39250.yaml" @@ -36154,7 +36154,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", "cwe": "CWE-79", "epss": 0.00624, -"epss_pct": 0.47501, +"epss_pct": 0.47551, "name": "WordPress Custom 404 Pro <= 3.11.1 - Reflected XSS", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-39646.yaml" @@ -36164,7 +36164,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N", "cwe": "CWE-918", "epss": 0.03201, -"epss_pct": 0.87246, +"epss_pct": 0.87261, "name": "Rocket.Chat - Server-Side Request Forgery (SSRF)", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-39713.yaml" @@ -36174,7 +36174,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-89", "epss": 0.04433, -"epss_pct": 0.90696, +"epss_pct": 0.90708, "name": "Apache Superset < 4.0.2 - SQL Injection", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-39887.yaml" @@ -36184,7 +36184,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L", "cwe": "CWE-22", "epss": 0.02884, -"epss_pct": 0.85897, +"epss_pct": 0.85912, "name": "Solara <1.35.1 - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-39903.yaml" @@ -36194,7 +36194,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.29183, -"epss_pct": 0.98033, +"epss_pct": 0.98036, "name": "1Panel SQL Injection - Authenticated", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-39907.yaml" @@ -36204,7 +36204,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-77", "epss": 0.23237, -"epss_pct": 0.97608, +"epss_pct": 0.97611, "name": "FOG Project < 1.5.10.34 - Remote Command Execution", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-39914.yaml" @@ -36214,7 +36214,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L", "cwe": "CWE-22", "epss": 0.0829, -"epss_pct": 0.94521, +"epss_pct": 0.94528, "name": "Bazarr < 1.4.3 - Arbitrary File Read", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-40348.yaml" @@ -36233,7 +36233,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "cwe": "CWE-22", "epss": 0.11323, -"epss_pct": 0.9567, +"epss_pct": 0.95675, "name": "Devika v1 - Path Traversal", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-40422.yaml" @@ -36250,7 +36250,7 @@ }, "CVE-2024-41107": { "epss": 0.1776, -"epss_pct": 0.96946, +"epss_pct": 0.9695, "name": "Apache CloudStack - SAML Signature Exclusion", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-41107.yaml" @@ -36260,7 +36260,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.06517, -"epss_pct": 0.93291, +"epss_pct": 0.93299, "name": "Cluster Control CMON API - Directory Traversal", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-41628.yaml" @@ -36270,7 +36270,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-94", "epss": 0.03536, -"epss_pct": 0.88448, +"epss_pct": 0.88462, "name": "OpenAM<=15.0.3 FreeMarker - Template Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-41667.yaml" @@ -36290,7 +36290,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "cwe": "CWE-79", "epss": 0.01834, -"epss_pct": 0.77411, +"epss_pct": 0.77437, "name": "The Events Calendar < 6.4.0.1 - Cross-site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-4180.yaml" @@ -36299,7 +36299,7 @@ "cvss": 6.1, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "epss": 0.01176, -"epss_pct": 0.65389, +"epss_pct": 0.65425, "name": "Twisted - Open Redirect & XSS", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-41810.yaml" @@ -36309,7 +36309,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:H/A:N", "cwe": "CWE-601", "epss": 0.01, -"epss_pct": 0.60405, +"epss_pct": 0.60444, "name": "Open Redirect in Login Redirect - MobSF", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-41955.yaml" @@ -36329,7 +36329,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-502", "epss": 0.08322, -"epss_pct": 0.9454, +"epss_pct": 0.94546, "name": "Apache HertzBeat < 1.6.0 - SnakeYAML Deserialization Remote Code Execution", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-42323.yaml" @@ -36339,7 +36339,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "cwe": "CWE-89", "epss": 0.12051, -"epss_pct": 0.95842, +"epss_pct": 0.95848, "name": "BlueNet Technology Clinical Browsing System 1.2.1 - Sql Injection", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-4257.yaml" @@ -36349,7 +36349,7 @@ "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H", "cwe": "CWE-94", "epss": 0.45374, -"epss_pct": 0.98699, +"epss_pct": 0.98702, "name": "Angular-Base64-Upload - Remote Code Execution", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-42640.yaml" @@ -36359,7 +36359,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.00768, -"epss_pct": 0.53056, +"epss_pct": 0.53099, "name": "AcuToWeb server/10.5.0.7577c8b - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-42852.yaml" @@ -36369,7 +36369,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.10161, -"epss_pct": 0.95321, +"epss_pct": 0.95327, "name": "Email Subscribers by Icegram Express <= 5.7.20 - Unauthenticated SQL Injection via Hash", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-4295.yaml" @@ -36379,7 +36379,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.02002, -"epss_pct": 0.79368, +"epss_pct": 0.79392, "name": "Cost Calculator Builder <= 3.2.15 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-43144.yaml" @@ -36389,7 +36389,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "cwe": "CWE-434", "epss": 0.04624, -"epss_pct": 0.91047, +"epss_pct": 0.91058, "name": "BerqWP <= 1.7.6 - Arbitrary File Upload", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-43160.yaml" @@ -36399,7 +36399,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-29", "epss": 0.30987, -"epss_pct": 0.9813, +"epss_pct": 0.98132, "name": "LoLLMS WebUI < 9.8 - Path Traversal", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-4322.yaml" @@ -36409,7 +36409,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N", "cwe": "CWE-918", "epss": 0.37366, -"epss_pct": 0.98418, +"epss_pct": 0.98421, "name": "Gradio - Server-Side Request Forgery", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-4325.yaml" @@ -36419,7 +36419,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-200", "epss": 0.01104, -"epss_pct": 0.63473, +"epss_pct": 0.63512, "name": "Contest Gallery - Broken Access Control", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-43283.yaml" @@ -36429,7 +36429,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.06222, -"epss_pct": 0.93029, +"epss_pct": 0.93037, "name": "ZoneMinder - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-43360.yaml" @@ -36438,7 +36438,7 @@ "cvss": 7.5, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "epss": 0.03237, -"epss_pct": 0.87404, +"epss_pct": 0.87418, "name": "sqlparse - Denial of Service", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2024/CVE-2024-4340.yaml" @@ -36466,7 +36466,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "cwe": "CWE-79", "epss": 0.01828, -"epss_pct": 0.77328, +"epss_pct": 0.77354, "name": "osCommerce v4.0 - Cross-site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-4348.yaml" @@ -36483,7 +36483,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.22955, -"epss_pct": 0.97585, +"epss_pct": 0.97588, "name": "WordPress TI WooCommerce Wishlist Plugin <= 2.8.2 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-43917.yaml" @@ -36493,7 +36493,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-862", "epss": 0.44475, -"epss_pct": 0.98672, +"epss_pct": 0.98674, "name": "YARPP <= 5.30.10 - Missing Authorization", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-43919.yaml" @@ -36503,7 +36503,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.02019, -"epss_pct": 0.79567, +"epss_pct": 0.7959, "name": "SendGrid for WordPress <= 1.4 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-43965.yaml" @@ -36513,7 +36513,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.00624, -"epss_pct": 0.47501, +"epss_pct": 0.47551, "name": "Sunshine Photo Cart <= 3.2.5 - Reflected Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-43971.yaml" @@ -36523,7 +36523,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "cwe": "CWE-918", "epss": 0.01821, -"epss_pct": 0.77235, +"epss_pct": 0.77261, "name": "WordPress CAS Theme <= 1.0.0 - Server-Side Request Forgery", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-4399.yaml" @@ -36532,8 +36532,8 @@ "cvss": 7.5, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-532", -"epss": 0.82143, -"epss_pct": 0.99631, +"epss": 0.82335, +"epss_pct": 0.99637, "name": "LiteSpeed Cache <= 6.4.1 - Sensitive Information Exposure", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-44000.yaml" @@ -36542,7 +36542,7 @@ "cvss": 9.8, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "epss": 0.36925, -"epss_pct": 0.98403, +"epss_pct": 0.98405, "name": "LearnPress WordPress LMS Plugin <= 4.2.6.5 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-4434.yaml" @@ -36552,7 +36552,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.05778, -"epss_pct": 0.92563, +"epss_pct": 0.92572, "name": "AnteeoWMS < v4.7.34 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-44349.yaml" @@ -36562,7 +36562,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N", "cwe": "CWE-80", "epss": 0.70822, -"epss_pct": 0.99351, +"epss_pct": 0.99353, "name": "WordPress Core <6.5.2 - Cross-Site Scripting", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-4439.yaml" @@ -36571,7 +36571,7 @@ "cvss": 9.8, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "epss": 0.10355, -"epss_pct": 0.95387, +"epss_pct": 0.95393, "name": "Business Directory Plugin <= 6.4.2 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-4443.yaml" @@ -36581,7 +36581,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.0101, -"epss_pct": 0.60709, +"epss_pct": 0.60751, "name": "YITH WooCommerce Ajax Search <= 2.4.0 - Cross-Site Scripting", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-4455.yaml" @@ -36591,7 +36591,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-209", "epss": 0.02566, -"epss_pct": 0.8403, +"epss_pct": 0.84049, "name": "Usermin 2.100 - Username Enumeration", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-44762.yaml" @@ -36601,7 +36601,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-434", "epss": 0.46287, -"epss_pct": 0.98726, +"epss_pct": 0.98728, "name": "Qualitor <= 8.24 - Remote Code Execution", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-44849.yaml" @@ -36629,7 +36629,7 @@ "cvss": 7.5, "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "epss": 0.13623, -"epss_pct": 0.96201, +"epss_pct": 0.96206, "name": "CentralSquare CryWolf - Path Traversal", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-45241.yaml" @@ -36639,7 +36639,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "cwe": "CWE-611", "epss": 0.02799, -"epss_pct": 0.8547, +"epss_pct": 0.85487, "name": "TablePress < 2.4.3 - XXE Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-45293.yaml" @@ -36649,7 +36649,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.24531, -"epss_pct": 0.97719, +"epss_pct": 0.97721, "name": "OneDev.io < 11.0.9 - Arbitrary File Read", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-45309.yaml" @@ -36669,7 +36669,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-347", "epss": 0.10684, -"epss_pct": 0.95487, +"epss_pct": 0.95493, "name": "GitLab - SAML Authentication Bypass", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2024/CVE-2024-45409.yaml" @@ -36679,7 +36679,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-209", "epss": 0.09269, -"epss_pct": 0.95001, +"epss_pct": 0.95006, "name": "Drupal 11.x-dev - Full Path Disclosure", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-45440.yaml" @@ -36688,7 +36688,7 @@ "cvss": 9.8, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "epss": 0.50603, -"epss_pct": 0.98833, +"epss_pct": 0.98835, "name": "SafeGuard for Privileged Passwords < 7.5.2 - Authentication Bypass", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-45488.yaml" @@ -36714,7 +36714,7 @@ "cvss": 5.3, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "epss": 0.03417, -"epss_pct": 0.88058, +"epss_pct": 0.88072, "name": "XWiki Platform - Unauthorized Document History Access", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-45591.yaml" @@ -36724,7 +36724,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.36679, -"epss_pct": 0.98387, +"epss_pct": 0.9839, "name": "ASIS - SQL Injection Authentication Bypass", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-45622.yaml" @@ -36743,14 +36743,14 @@ "cvss": 9.8, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "epss": 0.03345, -"epss_pct": 0.8782, +"epss_pct": 0.87833, "name": "ArForms < 6.6 - Remote Code Execution", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-4620.yaml" }, "CVE-2024-46310": { "epss": 0.02482, -"epss_pct": 0.83453, +"epss_pct": 0.83472, "name": "FXServer < v9601 - Information Exposure", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-46310.yaml" @@ -36760,7 +36760,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "cwe": "CWE-306", "epss": 0.62045, -"epss_pct": 0.99114, +"epss_pct": 0.99117, "name": "NetAlertX 23.01.14\u201324.x < 24.10.12 - Remote Code Execution", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-46506.yaml" @@ -36775,7 +36775,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "cwe": "CWE-284", "epss": 0.04099, -"epss_pct": 0.90027, +"epss_pct": 0.9004, "name": "DATAGERRY - REST API Auth Bypass", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-46627.yaml" @@ -36783,8 +36783,8 @@ "CVE-2024-46938": { "cvss": 7.5, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", -"epss": 0.46063, -"epss_pct": 0.98719, +"epss": 0.46767, +"epss_pct": 0.9874, "name": "Sitecore Experience Platform <= 10.4 - Arbitrary File Read", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-46938.yaml" @@ -36793,14 +36793,14 @@ "cvss": 9.9, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "epss": 0.40956, -"epss_pct": 0.98556, +"epss_pct": 0.98558, "name": "Camaleon CMS < 2.8.1 Arbitrary File Write to RCE", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-46986.yaml" }, "CVE-2024-47062": { "epss": 0.04457, -"epss_pct": 0.90747, +"epss_pct": 0.90759, "name": "Navidrome < 0.53.0 - Authenticated SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-47062.yaml" @@ -36810,7 +36810,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "cwe": "CWE-347", "epss": 0.0125, -"epss_pct": 0.67335, +"epss_pct": 0.67369, "name": "DataEase v2.10.2 - JWT Signature Verification Bypass", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-47073.yaml" @@ -36820,7 +36820,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H", "cwe": "CWE-1327", "epss": 0.50605, -"epss_pct": 0.98833, +"epss_pct": 0.98836, "name": "CUPS - Remote Code Execution", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2024/CVE-2024-47176.yaml" @@ -36830,7 +36830,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L", "cwe": "CWE-862", "epss": 0.01744, -"epss_pct": 0.76185, +"epss_pct": 0.76212, "name": "Templately <= 3.1.2 - Broken Access Control", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-47308.yaml" @@ -36840,7 +36840,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", "cwe": "CWE-79", "epss": 0.0138, -"epss_pct": 0.70207, +"epss_pct": 0.70236, "name": "LiteSpeed Cache <= 6.5.0.2 - Stored XSS", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-47374.yaml" @@ -36850,7 +36850,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-287", "epss": 0.04003, -"epss_pct": 0.89816, +"epss_pct": 0.89828, "name": "Cobbler 'XML-RPC' - Authentication Bypass", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-47533.yaml" @@ -36860,7 +36860,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "cwe": "CWE-306", "epss": 0.9495, -"epss_pct": 0.99854, +"epss_pct": 0.99855, "name": "FortiManager Unauthenticated Remote Code Execution", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2024/CVE-2024-47575.yaml" @@ -36870,7 +36870,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H", "cwe": "CWE-125", "epss": 0.01575, -"epss_pct": 0.73713, +"epss_pct": 0.73743, "name": "Pure-FTPd < 1.0.52 - Buffer Overflow", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2024/CVE-2024-48208.yaml" @@ -36887,7 +36887,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "cwe": "CWE-89", "epss": 0.00907, -"epss_pct": 0.57433, +"epss_pct": 0.57477, "name": "Cloudlog - SQL Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-48259.yaml" @@ -36897,14 +36897,14 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.44349, -"epss_pct": 0.98667, +"epss_pct": 0.98669, "name": "JeecgBoot v3.7.1 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-48307.yaml" }, "CVE-2024-4836": { "epss": 0.02651, -"epss_pct": 0.84571, +"epss_pct": 0.84589, "name": "Edito CMS - Sensitive Data Leak", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-4836.yaml" @@ -36914,7 +36914,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-918", "epss": 0.03939, -"epss_pct": 0.89653, +"epss_pct": 0.89666, "name": "Qualitor <= v8.24 - Server-Side Request Forgery", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-48360.yaml" @@ -36924,7 +36924,7 @@ "cvss_vector": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-29", "epss": 0.00668, -"epss_pct": 0.49439, +"epss_pct": 0.4949, "name": "LoLLMS WebUI - Subfolder Prediction via Path Traversal", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-4841.yaml" @@ -36934,7 +36934,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-200", "epss": 0.06427, -"epss_pct": 0.93214, +"epss_pct": 0.93222, "name": "Netis Wifi Router - Information Disclosure", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-48455.yaml" @@ -36944,7 +36944,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-863", "epss": 0.02204, -"epss_pct": 0.81323, +"epss_pct": 0.81344, "name": "ProFTPD \u2264 1.3.8b - Privilege Escalation via mod_sql", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2024/CVE-2024-48651.yaml" @@ -36991,7 +36991,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-862", "epss": 0.04156, -"epss_pct": 0.90154, +"epss_pct": 0.90167, "name": "WordPress InstaWP Connect <= 0.1.0.38 - Unauthenticated User Creation", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-4898.yaml" @@ -37000,7 +37000,7 @@ "cvss": 7.5, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "epss": 0.23843, -"epss_pct": 0.97659, +"epss_pct": 0.97662, "name": "ZimaOS <= v1.2.4 - Sensitive Information Disclosure", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-49357.yaml" @@ -37010,7 +37010,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-78", "epss": 0.02705, -"epss_pct": 0.84902, +"epss_pct": 0.84921, "name": "Plenti < v0.7.2 - OS Command Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-49380.yaml" @@ -37020,7 +37020,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N", "cwe": "CWE-601", "epss": 0.01021, -"epss_pct": 0.6102, +"epss_pct": 0.61062, "name": "Gradio - Open Redirect", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-4940.yaml" @@ -37030,7 +37030,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.18245, -"epss_pct": 0.97008, +"epss_pct": 0.97012, "name": "Sonatype Nexus Repository Manager 3 - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-4956.yaml" @@ -37040,7 +37040,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-287", "epss": 0.02518, -"epss_pct": 0.8371, +"epss_pct": 0.8373, "name": "Zitadel - User Registration Bypass", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-49757.yaml" @@ -37050,7 +37050,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-288", "epss": 0.01035, -"epss_pct": 0.61489, +"epss_pct": 0.6153, "name": "Scoold < 1.64.0 - Authentication Bypass", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-50334.yaml" @@ -37059,8 +37059,8 @@ "cvss": 7.3, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "cwe": "CWE-74", -"epss": 0.6322, -"epss_pct": 0.99145, +"epss": 0.64429, +"epss_pct": 0.99177, "name": "Symfony Profiler - Remote Access via Injected Arguments", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-50340.yaml" @@ -37068,8 +37068,8 @@ "CVE-2024-50477": { "cvss": 9.8, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", -"epss": 0.08184, -"epss_pct": 0.94464, +"epss": 0.08118, +"epss_pct": 0.94433, "name": "WordPress Stacks Mobile App Builder <=5.2.3 - Authentication Bypass", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-50477.yaml" @@ -37089,7 +37089,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.02588, -"epss_pct": 0.84173, +"epss_pct": 0.84191, "name": "WordPress Easy Digital Downloads <= 3.2.12 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-5057.yaml" @@ -37116,7 +37116,7 @@ }, "CVE-2024-5082": { "epss": 0.01943, -"epss_pct": 0.78725, +"epss_pct": 0.78748, "name": "Nexus Repository 2 - Remote Code Execution", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-5082.yaml" @@ -37125,7 +37125,7 @@ "cvss": 9.8, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "epss": 0.50653, -"epss_pct": 0.98836, +"epss_pct": 0.98838, "name": "Hash Form <= 1.1.0 - Arbitrary File Upload", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-5084.yaml" @@ -37135,7 +37135,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01216, -"epss_pct": 0.66462, +"epss_pct": 0.66496, "name": "GestioIP - Reflected Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-50857.yaml" @@ -37143,7 +37143,7 @@ "CVE-2024-50967": { "cwe": "CWE-200", "epss": 0.01677, -"epss_pct": 0.75243, +"epss_pct": 0.75273, "name": "DATAGERRY - Improper Access Control", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-50967.yaml" @@ -37153,7 +37153,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.02256, -"epss_pct": 0.81731, +"epss_pct": 0.81752, "name": "openSIS Classic v9.1 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-51211.yaml" @@ -37163,7 +37163,7 @@ "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-78", "epss": 0.0379, -"epss_pct": 0.89218, +"epss_pct": 0.89232, "name": "TOTOLINK CX-A3002RU - Remote Code Execution", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-51228.yaml" @@ -37183,7 +37183,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.34979, -"epss_pct": 0.98318, +"epss_pct": 0.9832, "name": "ZoneMinder v1.37.* <= 1.37.64 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-51482.yaml" @@ -37191,7 +37191,7 @@ "CVE-2024-51483": { "cwe": "CWE-22", "epss": 0.02274, -"epss_pct": 0.81877, +"epss_pct": 0.81898, "name": "Changedetection.io <= 0.47.4 - Path Traversal", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-51483.yaml" @@ -37211,7 +37211,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "cwe": "CWE-78", "epss": 0.4546, -"epss_pct": 0.98701, +"epss_pct": 0.98704, "name": "CyberPanel - Command Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-51568.yaml" @@ -37221,14 +37221,14 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-200", "epss": 0.01232, -"epss_pct": 0.66885, +"epss_pct": 0.66917, "name": "iTop - User Enumeration via REST Endpoint", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-51739.yaml" }, "CVE-2024-51977": { "epss": 0.72618, -"epss_pct": 0.99401, +"epss_pct": 0.99402, "name": "Brother MFC-L9570CDW - Information Disclosure", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-51977.yaml" @@ -37238,7 +37238,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-1391", "epss": 0.18699, -"epss_pct": 0.97064, +"epss_pct": 0.97067, "name": "Brother Printers \u2013 Authentication Bypass via Default Admin Password", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-51978.yaml" @@ -37255,7 +37255,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-200", "epss": 0.18768, -"epss_pct": 0.97072, +"epss_pct": 0.97075, "name": "FleetCart 4.1.1 - Information Disclosure", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-5230.yaml" @@ -37265,7 +37265,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-502", "epss": 0.03049, -"epss_pct": 0.86622, +"epss_pct": 0.86638, "name": "My Geo Posts Free <= 1.2 - PHP Object Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-52433.yaml" @@ -37285,7 +37285,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.00736, -"epss_pct": 0.51973, +"epss_pct": 0.52021, "name": "Ganglia Web Interface (v3.7.3 - v3.7.6) - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-52762.yaml" @@ -37295,7 +37295,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.00615, -"epss_pct": 0.47048, +"epss_pct": 0.47098, "name": "Ganglia Web Interface (v3.7.3 - v3.7.5) - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-52763.yaml" @@ -37303,7 +37303,7 @@ "CVE-2024-52875": { "cwe": "CWE-74", "epss": 0.29558, -"epss_pct": 0.98056, +"epss_pct": 0.98058, "name": "Kerio Control v9.2.5 - CRLF Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-52875.yaml" @@ -37313,7 +37313,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "cwe": "CWE-89", "epss": 0.34522, -"epss_pct": 0.98299, +"epss_pct": 0.98301, "name": "Dolibarr ERP CMS `list.php` - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-5315.yaml" @@ -37323,7 +37323,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-639", "epss": 0.01092, -"epss_pct": 0.63087, +"epss_pct": 0.63127, "name": "WordPress Events Calendar 6.8.2.1 - Information Disclosure", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-5333.yaml" @@ -37333,7 +37333,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-73", "epss": 0.02073, -"epss_pct": 0.80128, +"epss_pct": 0.80149, "name": "Devika - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-5334.yaml" @@ -37353,7 +37353,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "cwe": "CWE-89", "epss": 0.03988, -"epss_pct": 0.89779, +"epss_pct": 0.8979, "name": "Mongoose < 8.8.3 - Remote Code Execution", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-53900.yaml" @@ -37363,7 +37363,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-200", "epss": 0.26788, -"epss_pct": 0.97884, +"epss_pct": 0.97887, "name": "Discourse Backup File Disclosure Via Default Nginx Configuration", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-53991.yaml" @@ -37373,7 +37373,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N", "cwe": "CWE-601", "epss": 0.0097, -"epss_pct": 0.59473, +"epss_pct": 0.59517, "name": "SickChill - Open Redirect", "severity": "low", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-53995.yaml" @@ -37383,7 +37383,7 @@ "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:L", "cwe": "CWE-79", "epss": 0.055, -"epss_pct": 0.92229, +"epss_pct": 0.92238, "name": "SEH utnserver Pro/ProMAX/INU-100 20.1.22 - Cross-Site Scripting", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-5420.yaml" @@ -37393,7 +37393,7 @@ "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:L", "cwe": "CWE-78", "epss": 0.03692, -"epss_pct": 0.88927, +"epss_pct": 0.88941, "name": "SEH utnserver Pro/ProMAX/INU-100 20.1.22 - File Exposure", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-5421.yaml" @@ -37403,7 +37403,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N", "cwe": "CWE-918", "epss": 0.01461, -"epss_pct": 0.71746, +"epss_pct": 0.71776, "name": "Hurrakify <= 2.4 - Server-Side Request Forgery", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-54330.yaml" @@ -37413,7 +37413,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N", "cwe": "CWE-918", "epss": 0.05213, -"epss_pct": 0.91918, +"epss_pct": 0.91928, "name": "Radio Player <= 2.0.82 - Server-Side Request Forgery", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-54385.yaml" @@ -37423,7 +37423,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-284", "epss": 0.00768, -"epss_pct": 0.53047, +"epss_pct": 0.5309, "name": "ipTIME A2004 - Unauthorized Access", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-54763.yaml" @@ -37433,7 +37433,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "cwe": "CWE-284", "epss": 0.01035, -"epss_pct": 0.61488, +"epss_pct": 0.61529, "name": "ipTIME A2004 - Unauthorized Access", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-54764.yaml" @@ -37443,7 +37443,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-203", "epss": 0.01823, -"epss_pct": 0.77264, +"epss_pct": 0.77289, "name": "AVM FRITZ!Box 7530 AX - Unauthorized Access", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-54767.yaml" @@ -37453,7 +37453,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-200", "epss": 0.01008, -"epss_pct": 0.60656, +"epss_pct": 0.60697, "name": "LearnPress < 4.2.6.8.1 - Information Disclosure", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-5483.yaml" @@ -37462,7 +37462,7 @@ "cvss": 9.8, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "epss": 0.03744, -"epss_pct": 0.89083, +"epss_pct": 0.89096, "name": "SEOPress < 7.9 - Authentication Bypass", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-5488.yaml" @@ -37472,7 +37472,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.00699, -"epss_pct": 0.50635, +"epss_pct": 0.50681, "name": "IceWarp Server 10.2.1 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-55218.yaml" @@ -37481,14 +37481,14 @@ "cvss": 9.8, "cwe": "CWE-89", "epss": 0.02618, -"epss_pct": 0.84367, +"epss_pct": 0.84384, "name": "WordPress HTML5 Video Player < 2.5.27 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-5522.yaml" }, "CVE-2024-55415": { "epss": 0.15543, -"epss_pct": 0.96579, +"epss_pct": 0.96583, "name": "DevDojo Voyager <=1.8.0 - Arbitrary File Read", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-55415.yaml" @@ -37496,14 +37496,14 @@ "CVE-2024-55416": { "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N", "epss": 0.20273, -"epss_pct": 0.9729, +"epss_pct": 0.97294, "name": "DevDojo Voyager <=1.8.0 - Cross-Site Scripting", "severity": "low", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-55416.yaml" }, "CVE-2024-55417": { "epss": 0.13066, -"epss_pct": 0.9607, +"epss_pct": 0.96075, "name": "DevDojo Voyager <= 1.8.0 - Arbitrary File Write vulnerability", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-55417.yaml" @@ -37513,7 +37513,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "cwe": "CWE-22", "epss": 0.03059, -"epss_pct": 0.86676, +"epss_pct": 0.86692, "name": "MasterSAM Star Gate v11 - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-55457.yaml" @@ -37523,7 +37523,7 @@ "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.37848, -"epss_pct": 0.9844, +"epss_pct": 0.98442, "name": "Mitel MiCollab - Arbitary File Read", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-55550.yaml" @@ -37533,7 +37533,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-502", "epss": 0.44126, -"epss_pct": 0.9866, +"epss_pct": 0.98663, "name": "InvoiceShelf <= 1.3.0 - PHP Deserialization", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2024/CVE-2024-55556.yaml" @@ -37552,7 +37552,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-95", "epss": 0.02303, -"epss_pct": 0.82126, +"epss_pct": 0.82147, "name": "D-Tale <= 3.16.0 - Pre-Auth RCE via Pandas Query Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-55890.yaml" @@ -37572,7 +37572,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "cwe": "CWE-434", "epss": 0.30783, -"epss_pct": 0.98116, +"epss_pct": 0.98119, "name": "WP SuperBackup <= 2.3.3 - Unauthenticated Arbitrary File Upload to RCE", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-56064.yaml" @@ -37592,7 +37592,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-219", "epss": 0.01495, -"epss_pct": 0.72373, +"epss_pct": 0.72403, "name": "Astro - Information Disclosure", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-56159.yaml" @@ -37619,7 +37619,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-22", "epss": 0.01829, -"epss_pct": 0.77334, +"epss_pct": 0.7736, "name": "Uptime-Kuma - Local File Inclusion (LFI)", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2024/CVE-2024-56331.yaml" @@ -37629,14 +37629,14 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-289", "epss": 0.44458, -"epss_pct": 0.9867, +"epss_pct": 0.98673, "name": "DataEase < 2.10.4 - Authentication Bypass via Whitelist Path Traversal", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-56511.yaml" }, "CVE-2024-56512": { "epss": 0.0313, -"epss_pct": 0.8696, +"epss_pct": 0.86975, "name": "Apache NiFi - Information Disclosure", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-56512.yaml" @@ -37646,7 +37646,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-200", "epss": 0.32222, -"epss_pct": 0.98196, +"epss_pct": 0.98198, "name": "D-Link DIR-859 - Information Disclosure", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-57045.yaml" @@ -37656,7 +37656,7 @@ "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-287", "epss": 0.02084, -"epss_pct": 0.80234, +"epss_pct": 0.80255, "name": "Netgear DGN2200 - Improper Authentication", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-57046.yaml" @@ -37676,7 +37676,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-601", "epss": 0.01135, -"epss_pct": 0.64238, +"epss_pct": 0.64277, "name": "DedeCMS - Open Redirect via download.php", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-57241.yaml" @@ -37686,7 +37686,7 @@ "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.00885, -"epss_pct": 0.56753, +"epss_pct": 0.56795, "name": "TP-Link Archer A20 v3 Router - Cross-site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-57514.yaml" @@ -37694,7 +37694,7 @@ "CVE-2024-5765": { "cwe": "CWE-89", "epss": 0.27232, -"epss_pct": 0.97911, +"epss_pct": 0.97915, "name": "WpStickyBar <= 2.1.0 - SQL Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-5765.yaml" @@ -37724,7 +37724,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-94", "epss": 0.8464, -"epss_pct": 0.99688, +"epss_pct": 0.99689, "name": "Yii2 PHP Framework < 2.0.52 - Remote Code Execution", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-58136.yaml" @@ -37734,7 +37734,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-434", "epss": 0.03424, -"epss_pct": 0.88078, +"epss_pct": 0.88092, "name": "Vanna - SQL injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-5827.yaml" @@ -37763,14 +37763,14 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "cwe": "CWE-601", "epss": 0.30074, -"epss_pct": 0.98082, +"epss_pct": 0.98084, "name": "PrivateGPT < 0.5.0 - Open Redirect", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-5936.yaml" }, "CVE-2024-5947": { "epss": 0.02418, -"epss_pct": 0.83005, +"epss_pct": 0.83026, "name": "Deep Sea Electronics DSE855 - Authentication Bypass", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-5947.yaml" @@ -37779,7 +37779,7 @@ "cvss": 9.1, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "epss": 0.01958, -"epss_pct": 0.78887, +"epss_pct": 0.78911, "name": "CZ Loan Management <= 1.1 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-5975.yaml" @@ -37789,7 +37789,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.11755, -"epss_pct": 0.95767, +"epss_pct": 0.95772, "name": "Quiz Maker <= 6.5.8.3 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-6028.yaml" @@ -37799,7 +37799,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-32", "epss": 0.04235, -"epss_pct": 0.90324, +"epss_pct": 0.90336, "name": "Lawo AG vsm LTC Time Sync (vTimeSync) - Path Traversal", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-6049.yaml" @@ -37809,7 +37809,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N", "cwe": "CWE-918", "epss": 0.0265, -"epss_pct": 0.84567, +"epss_pct": 0.84585, "name": "LocalAI - Partial Local File Read", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-6095.yaml" @@ -37818,14 +37818,14 @@ "cvss": 10.0, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "epss": 0.02758, -"epss_pct": 0.85224, +"epss_pct": 0.8524, "name": "Push Notification for Post and BuddyPress <= 1.93 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-6159.yaml" }, "CVE-2024-6188": { "epss": 0.02036, -"epss_pct": 0.79731, +"epss_pct": 0.79753, "name": "TrakSYS 11.x.x - Sensitive Data Exposure", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-6188.yaml" @@ -37835,7 +37835,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.04134, -"epss_pct": 0.90111, +"epss_pct": 0.90124, "name": "PayPlus Payment Gateway < 6.6.9 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-6205.yaml" @@ -37845,7 +37845,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-434", "epss": 0.35708, -"epss_pct": 0.98345, +"epss_pct": 0.98348, "name": "WordPress Keydatas \u2264 2.5.2 - Arbitrary File Upload", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-6220.yaml" @@ -37855,7 +37855,7 @@ "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-287", "epss": 0.21168, -"epss_pct": 0.9741, +"epss_pct": 0.97414, "name": "NetScaler Console - Sensitive Information Disclosure", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-6235.yaml" @@ -37865,7 +37865,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-36", "epss": 0.01941, -"epss_pct": 0.78704, +"epss_pct": 0.78728, "name": "LOLLMS WebUI - Absolute Path Traversal", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-6250.yaml" @@ -37877,7 +37877,7 @@ }, "CVE-2024-6289": { "epss": 0.00904, -"epss_pct": 0.57321, +"epss_pct": 0.57366, "name": "WPS Hide Login < 1.9.16.4 - Hidden Login Page Disclosure", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-6289.yaml" @@ -37891,7 +37891,7 @@ }, "CVE-2024-6366": { "epss": 0.28993, -"epss_pct": 0.98023, +"epss_pct": 0.98026, "name": "User Profile Builder < 3.11.8 - File Upload", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-6366.yaml" @@ -37901,7 +37901,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-29", "epss": 0.53113, -"epss_pct": 0.989, +"epss_pct": 0.98903, "name": "Aimhubio Aim Server 3.19.3 - Arbitrary File Overwrite", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-6396.yaml" @@ -37910,7 +37910,7 @@ "cvss": 8.6, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L", "epss": 0.018, -"epss_pct": 0.76948, +"epss_pct": 0.76975, "name": "Hide My WP Ghost < 5.2.02 - Hidden Login Page Disclosure", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-6420.yaml" @@ -37920,7 +37920,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-22", "epss": 0.04826, -"epss_pct": 0.91358, +"epss_pct": 0.9137, "name": "WordPress Grow by Tradedoubler Plugin < 2.0.22 - Unauthenticated Local File Inclusion", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-6460.yaml" @@ -37930,7 +37930,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.00665, -"epss_pct": 0.49326, +"epss_pct": 0.49377, "name": "Contact Form 7 Math Captcha <= 2.0.1 - Cross-site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-6517.yaml" @@ -37939,7 +37939,7 @@ "cvss": 5.3, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "epss": 0.00927, -"epss_pct": 0.58032, +"epss_pct": 0.58079, "name": "WP Popups - Information Disclosure", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-6555.yaml" @@ -37949,7 +37949,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-200", "epss": 0.00856, -"epss_pct": 0.5587, +"epss_pct": 0.55914, "name": "Campaign Monitor for WordPress - Information Disclosure", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-6569.yaml" @@ -37959,14 +37959,14 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N", "cwe": "CWE-201", "epss": 0.01933, -"epss_pct": 0.78613, +"epss_pct": 0.78637, "name": "Lightdash v0.1024.6 - Server-Side Request Forgery", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-6586.yaml" }, "CVE-2024-6587": { "epss": 0.35316, -"epss_pct": 0.98329, +"epss_pct": 0.98332, "name": "LiteLLM - Server-Side Request Forgery", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-6587.yaml" @@ -37976,7 +37976,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-200", "epss": 0.45681, -"epss_pct": 0.98707, +"epss_pct": 0.9871, "name": "Netgear-WN604 downloadFile.php - Information Disclosure", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-6646.yaml" @@ -37986,7 +37986,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N", "cwe": "CWE-79", "epss": 0.15012, -"epss_pct": 0.96471, +"epss_pct": 0.96474, "name": "WordPress File Upload Plugin < 4.24.8 - Cross-Site Scripting", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-6651.yaml" @@ -38006,7 +38006,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.18988, -"epss_pct": 0.971, +"epss_pct": 0.97103, "name": "WhatsUp Gold GetStatisticalMonitorList SQL Injection - Authentication Bypass", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-6671.yaml" @@ -38016,7 +38016,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-601", "epss": 0.0052, -"epss_pct": 0.42147, +"epss_pct": 0.422, "name": "WP Content Copy Protection & No Right Click - Open Redirect", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-6690.yaml" @@ -38026,7 +38026,7 @@ "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-24", "epss": 0.03305, -"epss_pct": 0.87679, +"epss_pct": 0.87693, "name": "EasySpider 0.6.2 - Arbitrary File Read", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-6746.yaml" @@ -38036,7 +38036,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.00822, -"epss_pct": 0.54802, +"epss_pct": 0.54842, "name": "Social Auto Poster <= 5.3.14 - Stored Cross-Site Scripting", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-6753.yaml" @@ -38046,7 +38046,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.62442, -"epss_pct": 0.99123, +"epss_pct": 0.99126, "name": "Calibre <= 7.14.0 Arbitrary File Read", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-6781.yaml" @@ -38066,7 +38066,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-200", "epss": 0.31102, -"epss_pct": 0.98138, +"epss_pct": 0.9814, "name": "AnythingLLM - Information Disclosure", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-6842.yaml" @@ -38076,7 +38076,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-862", "epss": 0.01104, -"epss_pct": 0.63465, +"epss_pct": 0.63504, "name": "SmartSearchWP < 2.4.6 - OpenAI Key Disclosure", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-6845.yaml" @@ -38085,7 +38085,7 @@ "cvss": 5.3, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "epss": 0.01252, -"epss_pct": 0.6737, +"epss_pct": 0.67404, "name": "SmartSearchWP <= 2.4.4 - Unauthenticated Log Purge", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-6846.yaml" @@ -38095,7 +38095,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:L", "cwe": "CWE-79", "epss": 0.32968, -"epss_pct": 0.98236, +"epss_pct": 0.98239, "name": "Gitea 1.22.0 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-6886.yaml" @@ -38104,7 +38104,7 @@ "cvss": 6.1, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "epss": 0.0075, -"epss_pct": 0.52435, +"epss_pct": 0.52483, "name": "Journyx 11.5.4 - Reflected Cross Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-6892.yaml" @@ -38114,7 +38114,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-611", "epss": 0.32916, -"epss_pct": 0.98235, +"epss_pct": 0.98237, "name": "Journyx - XML External Entities Injection (XXE)", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-6893.yaml" @@ -38124,21 +38124,21 @@ "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N", "cwe": "CWE-552", "epss": 0.04944, -"epss_pct": 0.91544, +"epss_pct": 0.91555, "name": "PerkinElmer ProcessPlus <= 1.11.6507.0 - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-6911.yaml" }, "CVE-2024-6922": { "epss": 0.30172, -"epss_pct": 0.98087, +"epss_pct": 0.9809, "name": "Automation Anywhere Automation 360 - Server-Side Request Forgery", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-6922.yaml" }, "CVE-2024-6924": { "epss": 0.03292, -"epss_pct": 0.87631, +"epss_pct": 0.87646, "name": "TrueBooker <= 1.0.2 - SQL Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-6924.yaml" @@ -38147,7 +38147,7 @@ "cvss": 9.8, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "epss": 0.03292, -"epss_pct": 0.87632, +"epss_pct": 0.87646, "name": "Viral Signup <= 2.1 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-6926.yaml" @@ -38156,14 +38156,14 @@ "cvss": 10.0, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "epss": 0.03292, -"epss_pct": 0.87632, +"epss_pct": 0.87646, "name": "Opti Marketing <= 2.0.9 - SQL Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-6928.yaml" }, "CVE-2024-7008": { "epss": 0.25607, -"epss_pct": 0.97808, +"epss_pct": 0.97811, "name": "Calibre <= 7.15.0 - Reflected Cross-Site Scripting (XSS)", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-7008.yaml" @@ -38173,14 +38173,14 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-77", "epss": 0.38739, -"epss_pct": 0.98475, +"epss_pct": 0.98477, "name": "AVTECH IP Camera - Command Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-7029.yaml" }, "CVE-2024-7097": { "epss": 0.00665, -"epss_pct": 0.49302, +"epss_pct": 0.49354, "name": "WSO2 User Registration - Arbitrary Account Creation", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-7097.yaml" @@ -38190,7 +38190,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "cwe": "CWE-78", "epss": 0.934, -"epss_pct": 0.99832, +"epss_pct": 0.99833, "name": "Raisecom MSG1200, MSG2100E, MSG2200 and MSG2300 3.90 - Command Injection", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-7120.yaml" @@ -38200,7 +38200,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "cwe": "CWE-89", "epss": 0.07016, -"epss_pct": 0.9371, +"epss_pct": 0.93718, "name": "Bylancer Quicklancer 2.4 G - SQL Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-7188.yaml" @@ -38210,7 +38210,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01551, -"epss_pct": 0.73352, +"epss_pct": 0.73383, "name": "Shield Security Plugin < 20.0.6 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-7313.yaml" @@ -38230,7 +38230,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-259", "epss": 0.20737, -"epss_pct": 0.9736, +"epss_pct": 0.97364, "name": "TOTOLINK CP450 v4.1.0cu.747_B20191224 - Hard-Coded Password Vulnerability", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-7332.yaml" @@ -38240,7 +38240,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-200", "epss": 0.32028, -"epss_pct": 0.98185, +"epss_pct": 0.98187, "name": "TVT DVR Sensitive Device - Information Disclosure", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-7339.yaml" @@ -38249,7 +38249,7 @@ "cvss": 8.8, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "epss": 0.05015, -"epss_pct": 0.91647, +"epss_pct": 0.91658, "name": "W&B Weave Server - Remote Arbitrary File Leak", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-7340.yaml" @@ -38259,7 +38259,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.00702, -"epss_pct": 0.50767, +"epss_pct": 0.50813, "name": "Ninja Forms 3.8.6-3.8.10 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-7354.yaml" @@ -38299,7 +38299,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "cwe": "CWE-284", "epss": 0.00848, -"epss_pct": 0.55593, +"epss_pct": 0.55636, "name": "AI Assistant with ChatGPT by AYS <= 2.0.9 - Unauthenticated AJAX Calls", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-7714.yaml" @@ -38308,7 +38308,7 @@ "cvss": 7.5, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "epss": 0.01745, -"epss_pct": 0.76203, +"epss_pct": 0.76229, "name": "Sensei LMS < 4.24.2 - Email Template Leak", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-7786.yaml" @@ -38318,7 +38318,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.04317, -"epss_pct": 0.90479, +"epss_pct": 0.90491, "name": "Woo Inquiry <= 0.1 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-7854.yaml" @@ -38328,7 +38328,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-22", "epss": 0.16882, -"epss_pct": 0.96827, +"epss_pct": 0.96831, "name": "FastAdmin < V1.3.4.20220530 - Path Traversal", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-7928.yaml" @@ -38345,7 +38345,7 @@ }, "CVE-2024-8021": { "epss": 0.00731, -"epss_pct": 0.51809, +"epss_pct": 0.51857, "name": "Gradio - Open Redirect", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-8021.yaml" @@ -38354,7 +38354,7 @@ "cvss": 7.3, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N", "epss": 0.4505, -"epss_pct": 0.98689, +"epss_pct": 0.98692, "name": "Flowise <= 1.8.2 Authentication Bypass", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-8181.yaml" @@ -38372,7 +38372,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "cwe": "CWE-502", "epss": 0.2872, -"epss_pct": 0.98002, +"epss_pct": 0.98004, "name": "GiveWP Donation Plugin <= 3.16.1 - Unauthenticated PHP Object Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-8353.yaml" @@ -38382,7 +38382,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-434", "epss": 0.04082, -"epss_pct": 0.89991, +"epss_pct": 0.90002, "name": "WooCommerce Ultimate Gift Card \u2264 2.6.0 - Arbitrary File Upload", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-8425.yaml" @@ -38392,7 +38392,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-89", "epss": 0.03792, -"epss_pct": 0.89228, +"epss_pct": 0.89241, "name": "REST API TO MiniProgram <= 4.7.1 - SQL Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-8484.yaml" @@ -38432,7 +38432,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-89", "epss": 0.11831, -"epss_pct": 0.95787, +"epss_pct": 0.95794, "name": "LearnPress < 4.2.7.1 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-8529.yaml" @@ -38442,7 +38442,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.02323, -"epss_pct": 0.82284, +"epss_pct": 0.82306, "name": "WordPress TS Poll < 2.4.0 - SQL Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-8625.yaml" @@ -38451,7 +38451,7 @@ "cvss": 3.5, "cwe": "CWE-79", "epss": 0.01792, -"epss_pct": 0.76839, +"epss_pct": 0.76866, "name": "Z-Downloads < 1.11.7 - Cross-Site Scripting", "severity": "low", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-8673.yaml" @@ -38461,7 +38461,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:L", "cwe": "CWE-347", "epss": 0.0203, -"epss_pct": 0.79676, +"epss_pct": 0.79698, "name": "Keycloak - SAML Core Package Signature Validation Flaw", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-8698.yaml" @@ -38470,7 +38470,7 @@ "cvss": 7.5, "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "epss": 0.11759, -"epss_pct": 0.95767, +"epss_pct": 0.95773, "name": "WebIQ 2.15.9 - Directory Traversal", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-8752.yaml" @@ -38480,7 +38480,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-532", "epss": 0.01207, -"epss_pct": 0.6618, +"epss_pct": 0.66215, "name": "All-in-One WP Migration < 7.87 - Unauthenticated Information Disclosure", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-8852.yaml" @@ -38497,7 +38497,7 @@ }, "CVE-2024-8859": { "epss": 0.02669, -"epss_pct": 0.84695, +"epss_pct": 0.84714, "name": "Mlflow < 2.17.0 - Local File Inclusion", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-8859.yaml" @@ -38517,7 +38517,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:N", "cwe": "CWE-601", "epss": 0.02076, -"epss_pct": 0.80152, +"epss_pct": 0.80173, "name": "Keycloak - Open Redirect", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-8883.yaml" @@ -38527,7 +38527,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.02904, -"epss_pct": 0.85996, +"epss_pct": 0.86013, "name": "LatePoint <= 5.0.11 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-8911.yaml" @@ -38537,7 +38537,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-287", "epss": 0.0308, -"epss_pct": 0.86749, +"epss_pct": 0.86765, "name": "LatePoint <= 5.0.12 - Authentication Bypass", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-8943.yaml" @@ -38557,7 +38557,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01006, -"epss_pct": 0.60594, +"epss_pct": 0.60635, "name": "123Solar 1.8.4.5 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-9007.yaml" @@ -38567,7 +38567,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "cwe": "CWE-522", "epss": 0.09685, -"epss_pct": 0.95156, +"epss_pct": 0.95162, "name": "pgAdmin 4 - Authentication Bypass", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-9014.yaml" @@ -38587,7 +38587,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "cwe": "CWE-94", "epss": 0.52266, -"epss_pct": 0.98877, +"epss_pct": 0.9888, "name": "WP Popup Builder Popup Forms and Marketing Lead Generation <= 1.3.5 - Arbitrary Shortcode Execution", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-9061.yaml" @@ -38597,7 +38597,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L", "cwe": "CWE-862", "epss": 0.02131, -"epss_pct": 0.80673, +"epss_pct": 0.80696, "name": "Rank Math SEO < 1.0.229 - Unauthenticated User and Term Metadata Insert/Update/Deletion", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-9161.yaml" @@ -38605,7 +38605,7 @@ "CVE-2024-9166": { "cwe": "CWE-78", "epss": 0.01578, -"epss_pct": 0.7375, +"epss_pct": 0.7378, "name": "TitanNit Web Control 2.01/Atemio 7600 - Remote Code Execution", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-9166.yaml" @@ -38615,7 +38615,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N", "cwe": "CWE-89", "epss": 0.02291, -"epss_pct": 0.82021, +"epss_pct": 0.82042, "name": "Automation By Autonami < 3.3.0 - SQL Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-9186.yaml" @@ -38625,7 +38625,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-98", "epss": 0.03292, -"epss_pct": 0.87631, +"epss_pct": 0.87645, "name": "WHMpress <= 6.3-revision-0 - Unauthenticated Local File Inclusion to Arbitrary Options Update", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-9193.yaml" @@ -38635,7 +38635,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-862", "epss": 0.10446, -"epss_pct": 0.95413, +"epss_pct": 0.95419, "name": "GutenKit <= 2.1.0 - Arbitrary File Upload", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-9234.yaml" @@ -38655,7 +38655,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.04274, -"epss_pct": 0.904, +"epss_pct": 0.90413, "name": "Polyaxon - Unauthenticated Directory Traversal", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-9362.yaml" @@ -38692,7 +38692,7 @@ }, "CVE-2024-9487": { "epss": 0.25607, -"epss_pct": 0.97808, +"epss_pct": 0.97811, "name": "GitHub Enterprise - SAML Authentication Bypass", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2024/CVE-2024-9487.yaml" @@ -38702,7 +38702,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L", "cwe": "CWE-94", "epss": 0.12312, -"epss_pct": 0.95902, +"epss_pct": 0.95907, "name": "Time Clock <= 1.2.2 & Time Clock Pro <= 1.1.4 - Remote Code Execution", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-9593.yaml" @@ -38712,7 +38712,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-284", "epss": 0.0166, -"epss_pct": 0.74987, +"epss_pct": 0.75016, "name": "Danswer - Insecure Direct Object Reference", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-9617.yaml" @@ -38722,7 +38722,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-798", "epss": 0.03039, -"epss_pct": 0.86586, +"epss_pct": 0.86601, "name": "Four-Faith F3x36 - Authentication Bypass", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-9643.yaml" @@ -38732,7 +38732,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-862", "epss": 0.09078, -"epss_pct": 0.94925, +"epss_pct": 0.9493, "name": "Hunk Companion <= 1.8.4 - Arbitrary Plugin Installation", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-9707.yaml" @@ -38741,7 +38741,7 @@ "cvss": 6.5, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "epss": 0.01554, -"epss_pct": 0.73396, +"epss_pct": 0.73427, "name": "EKC Tournament Manager WordPress plugin - Path Traversal", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-9765.yaml" @@ -38751,7 +38751,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "cwe": "CWE-94", "epss": 0.01458, -"epss_pct": 0.71685, +"epss_pct": 0.71715, "name": "WordPress UIX Shortcodes <= 1.9.7 - Unauthenticated Shortcode Execution", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-9772.yaml" @@ -38761,7 +38761,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.02996, -"epss_pct": 0.86404, +"epss_pct": 0.8642, "name": "WordPress WP-Advanced-Search <= 3.3.9 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-9796.yaml" @@ -38771,7 +38771,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "cwe": "CWE-78", "epss": 0.73617, -"epss_pct": 0.99429, +"epss_pct": 0.99431, "name": "HuangDou UTCMS V9 - OS Command Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-9916.yaml" @@ -38781,7 +38781,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.0749, -"epss_pct": 0.94043, +"epss_pct": 0.9405, "name": "PDF Generator Addon for Elementor Page Builder <= 1.7.5 - Arbitrary File Download", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-9935.yaml" @@ -38791,7 +38791,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-288", "epss": 0.0717, -"epss_pct": 0.93837, +"epss_pct": 0.93844, "name": "Crypto <= 2.15 - Authentication Bypass", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-9989.yaml" @@ -38817,7 +38817,7 @@ }, "CVE-2025-0133": { "epss": 0.46401, -"epss_pct": 0.98729, +"epss_pct": 0.98732, "name": "PAN-OS - Reflected Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-0133.yaml" @@ -38835,8 +38835,8 @@ "cvss": 9.4, "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L", "cwe": "CWE-434", -"epss": 0.02547, -"epss_pct": 0.83897, +"epss": 0.02609, +"epss_pct": 0.8433, "name": "ShowDoc - Remote Code Execution", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-0520.yaml" @@ -38846,14 +38846,14 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-288", "epss": 0.03654, -"epss_pct": 0.8882, +"epss_pct": 0.88834, "name": "Elber ESE DVB-S/S2 - Authentication Bypass", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-0674.yaml" }, "CVE-2025-0868": { "epss": 0.16953, -"epss_pct": 0.96841, +"epss_pct": 0.96844, "name": "DocsGPT - Unauthenticated Remote Code Execution", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-0868.yaml" @@ -38867,7 +38867,7 @@ "cvss": 7.3, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "epss": 0.01791, -"epss_pct": 0.76816, +"epss_pct": 0.76843, "name": "Jinher OA - SQL Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-10090.yaml" @@ -38877,7 +38877,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.03632, -"epss_pct": 0.88731, +"epss_pct": 0.88744, "name": "WordPress OrderConvo < 14 - Path Traversal", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-10162.yaml" @@ -38893,7 +38893,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "cwe": "CWE-89", "epss": 0.01297, -"epss_pct": 0.68379, +"epss_pct": 0.68414, "name": "ChanCMS <= 3.3.0 - SQL Injection", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-10210.yaml" @@ -38903,7 +38903,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "cwe": "CWE-918", "epss": 0.00705, -"epss_pct": 0.50844, +"epss_pct": 0.50891, "name": "ChanCMS <= 3.3.0 - Server-Side Request Forgery", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-10211.yaml" @@ -38913,7 +38913,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.02407, -"epss_pct": 0.82918, +"epss_pct": 0.82939, "name": "ChurchCRM - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-1023.yaml" @@ -38923,7 +38923,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "cwe": "CWE-434", "epss": 0.19493, -"epss_pct": 0.97181, +"epss_pct": 0.97184, "name": "Cockpit < 2.4.1 - Arbitrary File Upload", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-1025.yaml" @@ -38933,7 +38933,7 @@ "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.09861, -"epss_pct": 0.95221, +"epss_pct": 0.95227, "name": "KLog Server - Path Traversal", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-1035.yaml" @@ -38943,7 +38943,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-434", "epss": 0.02482, -"epss_pct": 0.83452, +"epss_pct": 0.83472, "name": "Melis Technology Melis Platform - Unrestricted File Upload & Remote Code Execution", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-10353.yaml" @@ -38953,7 +38953,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.01817, -"epss_pct": 0.77181, +"epss_pct": 0.77208, "name": "WooCommerce Designer Pro <= 1.9.28 - Arbitrary File Read", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-10897.yaml" @@ -38963,7 +38963,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-20", "epss": 0.35534, -"epss_pct": 0.98336, +"epss_pct": 0.98339, "name": "Ingress-Nginx Controller - Configuration Injection via Unsanitized `auth-tls-match-cn` Annotation", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-1097.yaml" @@ -38983,7 +38983,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "cwe": "CWE-79", "epss": 0.01846, -"epss_pct": 0.77553, +"epss_pct": 0.77579, "name": "WP Google Maps < 9.0.48 - Cross-Site Scripting", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-11307.yaml" @@ -38993,7 +38993,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-200", "epss": 0.00976, -"epss_pct": 0.59689, +"epss_pct": 0.59732, "name": "LearnPress < 4.3.0 - Arbitrary Callback Execution to Information Exposure", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-11368.yaml" @@ -39018,7 +39018,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-200", "epss": 0.02135, -"epss_pct": 0.80719, +"epss_pct": 0.80743, "name": "Export WP Page to Static HTML <= 4.3.4 - Cookie Exposure", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-11693.yaml" @@ -39032,7 +39032,7 @@ "cvss": 9.8, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "epss": 0.74759, -"epss_pct": 0.99466, +"epss_pct": 0.99467, "name": "WordPress AI Engine Plugin - Token Exposure", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-11749.yaml" @@ -39047,7 +39047,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-862", "epss": 0.51005, -"epss_pct": 0.98846, +"epss_pct": 0.98849, "name": "Post SMTP <= 3.6.0 - Email Log Disclosure", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-11833.yaml" @@ -39067,7 +39067,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.03572, -"epss_pct": 0.88553, +"epss_pct": 0.88567, "name": "MPDV Mikrolab GmbH HYDRA X, MIP 2 & FEDRA 2 - Path Traversal", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-12055.yaml" @@ -39081,7 +39081,7 @@ "cvss": 7.5, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "epss": 0.02328, -"epss_pct": 0.82327, +"epss_pct": 0.82349, "name": "Integrate Google Drive <= 1.5.3 - Information Disclosure", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-12139.yaml" @@ -39091,7 +39091,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "cwe": "CWE-79", "epss": 0.01877, -"epss_pct": 0.77947, +"epss_pct": 0.77972, "name": "Site Reviews < 7.2.5 - Unauthenticated Stored XSS", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-1232.yaml" @@ -39111,7 +39111,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-862", "epss": 0.00797, -"epss_pct": 0.53989, +"epss_pct": 0.54031, "name": "SureForms <= 1.13.1 - Sensitive Information Exposure", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-12536.yaml" @@ -39121,7 +39121,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L", "cwe": "CWE-862", "epss": 0.00715, -"epss_pct": 0.51234, +"epss_pct": 0.51281, "name": "WordPress Bookit < 2.5.1 - Unauthenticated Stripe Settings Update", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-12841.yaml" @@ -39131,7 +39131,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-94", "epss": 0.10395, -"epss_pct": 0.95398, +"epss_pct": 0.95405, "name": "JSONPath Plus < 10.3.0 - Remote Code Execution", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-1302.yaml" @@ -39151,7 +39151,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-89", "epss": 0.02856, -"epss_pct": 0.85762, +"epss_pct": 0.85778, "name": "WP-Recall \u2013 Plugin <= 16.26.10 - Unauthenticated SQL Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-1323.yaml" @@ -39166,7 +39166,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.02246, -"epss_pct": 0.81658, +"epss_pct": 0.8168, "name": "Hippoo Mobile App for WooCommerce <= 1.7.1 - Unauthenticated Arbitrary File Read", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-13339.yaml" @@ -39176,7 +39176,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-862", "epss": 0.02192, -"epss_pct": 0.81191, +"epss_pct": 0.81212, "name": "DynamiApps Frontend Admin <= 3.28.20 - Unauthenticated Arbitrary Options Update", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-13342.yaml" @@ -39194,7 +39194,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-287", "epss": 0.04593, -"epss_pct": 0.90994, +"epss_pct": 0.91005, "name": "WP Directory Kit <= 1.4.4 - Authentication Bypass", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-13390.yaml" @@ -39204,7 +39204,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.00611, -"epss_pct": 0.46875, +"epss_pct": 0.46927, "name": "Responsive Pricing Table <= 5.1.12 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-13418.yaml" @@ -39220,7 +39220,7 @@ "CVE-2025-13528": { "cwe": "CWE-862", "epss": 0.00729, -"epss_pct": 0.51729, +"epss_pct": 0.51775, "name": "Feedback Modal for Website <= 1.0.1 - Unauthenticated Feedback Export", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-13528.yaml" @@ -39230,7 +39230,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-862", "epss": 0.01287, -"epss_pct": 0.68158, +"epss_pct": 0.68193, "name": "IP2Location Country Blocker < 2.38.9 - Unauthenticated Information Disclosure", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-1361.yaml" @@ -39240,7 +39240,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-89", "epss": 0.01101, -"epss_pct": 0.63389, +"epss_pct": 0.63427, "name": "WordPress CBX Bookmark & Favorite Plugin <= 2.0.4 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-13652.yaml" @@ -39250,7 +39250,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-94", "epss": 0.03766, -"epss_pct": 0.89147, +"epss_pct": 0.8916, "name": "WordPress Print Invoice & Delivery Notes for WooCommerce <= 5.8.0 - Remote Code Execution", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-13773.yaml" @@ -39268,7 +39268,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-862", "epss": 0.00669, -"epss_pct": 0.49478, +"epss_pct": 0.4953, "name": "WP Directory Kit < 1.5.0 - Unauthenticated Email Exposure", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-13920.yaml" @@ -39278,7 +39278,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-862", "epss": 0.00906, -"epss_pct": 0.5739, +"epss_pct": 0.57434, "name": "LearnPress < 4.3.2 - Broken Access Control", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-13956.yaml" @@ -39288,7 +39288,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "cwe": "CWE-862", "epss": 0.00902, -"epss_pct": 0.57266, +"epss_pct": 0.57311, "name": "User Frontend <= 4.2.4 - Missing Authorization to Unauthenticated Attachment Deletion", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-14047.yaml" @@ -39297,8 +39297,8 @@ "cvss": 8.6, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L", "cwe": "CWE-89", -"epss": 0.01594, -"epss_pct": 0.73987, +"epss": 0.01704, +"epss_pct": 0.75678, "name": "Team WordPress Plugin (TLP Team) <= 5.0.9 - SQL Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-14124.yaml" @@ -39308,7 +39308,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-862", "epss": 0.00782, -"epss_pct": 0.53484, +"epss_pct": 0.53528, "name": "Premium Addons for Elementor - Unauthenticated Information Disclosure", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-14155.yaml" @@ -39318,7 +39318,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H", "cwe": "CWE-79", "epss": 0.01002, -"epss_pct": 0.60485, +"epss_pct": 0.60525, "name": "Payara Server - Cross-Site Scripting", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-14340.yaml" @@ -39328,7 +39328,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-532", "epss": 0.01944, -"epss_pct": 0.78742, +"epss_pct": 0.78765, "name": "WordPress Hummingbird <= 3.18.0 - Sensitive Information Exposure via Log File", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-14437.yaml" @@ -39338,7 +39338,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-200", "epss": 0.03991, -"epss_pct": 0.89786, +"epss_pct": 0.89798, "name": "D-Link DIR-803 - Authentication Bypass", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-14528.yaml" @@ -39355,7 +39355,7 @@ "cvss": 6.5, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L", "epss": 0.0083, -"epss_pct": 0.5505, +"epss_pct": 0.55089, "name": "WordPress Widgets for Social Photo Feed <= 1.8 - Information Disclosure", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-14726.yaml" @@ -39375,7 +39375,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-639", "epss": 0.0181, -"epss_pct": 0.77085, +"epss_pct": 0.77113, "name": "Branda WordPress plugin - Privilege Escalation", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-14998.yaml" @@ -39385,14 +39385,14 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-269", "epss": 0.01422, -"epss_pct": 0.71003, +"epss_pct": 0.71032, "name": "RegistrationMagic <= 6.0.7.1 - Privilege Escalation", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-15403.yaml" }, "CVE-2025-1550": { "epss": 0.02581, -"epss_pct": 0.84132, +"epss_pct": 0.84149, "name": "Keras Model.load_model - Arbitrary Code Execution", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2025/CVE-2025-1550.yaml" @@ -39400,7 +39400,7 @@ "CVE-2025-15503": { "cwe": "CWE-434", "epss": 0.01949, -"epss_pct": 0.788, +"epss_pct": 0.78823, "name": "Sangfor OSM - Arbitrary File Upload", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-15503.yaml" @@ -39410,7 +39410,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-862", "epss": 0.03021, -"epss_pct": 0.86516, +"epss_pct": 0.86531, "name": "Recover WooCommerce Cart Abandonment, Newsletter, Email Marketing, Marketing Automation By FunnelKit - Broken Access Control", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-1562.yaml" @@ -39420,7 +39420,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-200", "epss": 0.01094, -"epss_pct": 0.63193, +"epss_pct": 0.63232, "name": "EasyCVR <=2.1.2 - Information Disclosure", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-1595.yaml" @@ -39430,7 +39430,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-22", "epss": 0.56382, -"epss_pct": 0.98982, +"epss_pct": 0.98984, "name": "HUSKY \u2013 Products Filter Professional for WooCommerce <= 1.3.6.5 - Unauthenticated Local File Inclusion", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-1661.yaml" @@ -39447,7 +39447,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-22", "epss": 0.01628, -"epss_pct": 0.7449, +"epss_pct": 0.7452, "name": "Pichome 2.1.0 - Arbitrary File Read", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-1743.yaml" @@ -39467,7 +39467,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-89", "epss": 0.01737, -"epss_pct": 0.7609, +"epss_pct": 0.76116, "name": "WordPress JobWP Plugin <= 2.3.9 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-2010.yaml" @@ -39477,7 +39477,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-89", "epss": 0.46373, -"epss_pct": 0.98728, +"epss_pct": 0.9873, "name": "Slider & Popup Builder by Depicter <= 3.6.1 - Unauthenticated SQL Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-2011.yaml" @@ -39487,7 +39487,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "cwe": "CWE-798", "epss": 0.27136, -"epss_pct": 0.97908, +"epss_pct": 0.9791, "name": "Cisco IOS XE WLC - Arbitrary File Upload", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-20188.yaml" @@ -39507,7 +39507,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "cwe": "CWE-434", "epss": 0.27003, -"epss_pct": 0.97896, +"epss_pct": 0.97899, "name": "Cisco ISE < 3.4P2 - Unauthenticated Arbitrary File Upload", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-20282.yaml" @@ -39527,7 +39527,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-862", "epss": 0.02656, -"epss_pct": 0.84612, +"epss_pct": 0.84631, "name": "Uncanny Automator <= 6.3.0.2 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-2075.yaml" @@ -39537,7 +39537,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "cwe": "CWE-79", "epss": 0.00966, -"epss_pct": 0.59278, +"epss_pct": 0.59324, "name": "JoomlaUX JUX Real Estate 3.4.0 - Reflected XSS", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-2127.yaml" @@ -39547,7 +39547,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L", "cwe": "CWE-1188", "epss": 0.01056, -"epss_pct": 0.6208, +"epss_pct": 0.6212, "name": "Mage AI - Insecure Default Authentication Setup", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-2129.yaml" @@ -39557,7 +39557,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-89", "epss": 0.01691, -"epss_pct": 0.75459, +"epss_pct": 0.75485, "name": "WordPress WPCOM Member <= 1.7.6 - SQL Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-2221.yaml" @@ -39581,7 +39581,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.34548, -"epss_pct": 0.98301, +"epss_pct": 0.98303, "name": "Sante PACS Server.exe - Path Traversal Information Disclosure", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-2264.yaml" @@ -39606,7 +39606,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-918", "epss": 0.02899, -"epss_pct": 0.85976, +"epss_pct": 0.85993, "name": "Elestio Memos <= v0.24.0 - Server-Side Request Forgery", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-22952.yaml" @@ -39616,7 +39616,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H", "cwe": "CWE-94", "epss": 0.07284, -"epss_pct": 0.93918, +"epss_pct": 0.93926, "name": "Mongoose - NoSQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-23061.yaml" @@ -39625,7 +39625,7 @@ "cvss": 9.9, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "epss": 0.03593, -"epss_pct": 0.88621, +"epss_pct": 0.88635, "name": "Tandoor Recipes < 1.5.24 - Jinja2 SSTI RCE", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-23211.yaml" @@ -39645,7 +39645,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-918", "epss": 0.00875, -"epss_pct": 0.56489, +"epss_pct": 0.56531, "name": "Imgproxy < 3.27.2 - Server-Side Request Forgery (SSRF)", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-24354.yaml" @@ -39655,7 +39655,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-20", "epss": 0.32618, -"epss_pct": 0.98217, +"epss_pct": 0.98219, "name": "Ingress-Nginx Controller - Configuration Injection via Unsanitized `auth-url` Annotation", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-24514.yaml" @@ -39677,14 +39677,14 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.02442, -"epss_pct": 0.83169, +"epss_pct": 0.8319, "name": "Company Visitor Management System 1.0 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-2473.yaml" }, "CVE-2025-24752": { "epss": 0.01198, -"epss_pct": 0.65962, +"epss_pct": 0.65999, "name": "Essential Addons for Elementor < 6.0.15 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/headless/cves/2025/CVE-2025-24752.yaml" @@ -39694,7 +39694,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.02728, -"epss_pct": 0.85041, +"epss_pct": 0.85059, "name": "WhoDB < 0.45.0 - Path Traversal", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-24786.yaml" @@ -39704,7 +39704,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-89", "epss": 0.86348, -"epss_pct": 0.9972, +"epss_pct": 0.99721, "name": "GLPI < 10.0.17 - Pre-Auth SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-24799.yaml" @@ -39733,7 +39733,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.02384, -"epss_pct": 0.82737, +"epss_pct": 0.82759, "name": "Vitest Browser Mode - Local File Read", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-24963.yaml" @@ -39743,7 +39743,7 @@ "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "cwe": "CWE-502", "epss": 0.04516, -"epss_pct": 0.90846, +"epss_pct": 0.90857, "name": "SugarCRM - Unauthenticated Remote Code Execution via PHP Object Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-25034.yaml" @@ -39752,7 +39752,7 @@ "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:H/SA:H", "cwe": "CWE-200", "epss": 0.01454, -"epss_pct": 0.71603, +"epss_pct": 0.71633, "name": "Aquatronica Controller System <= 5.1.6 - Information Disclosure", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-25037.yaml" @@ -39762,7 +39762,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-98", "epss": 0.04802, -"epss_pct": 0.91322, +"epss_pct": 0.91333, "name": "WordPress Age Gate <= 3.5.3 - Unauthenticated Local File Inclusion", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-2505.yaml" @@ -39772,7 +39772,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01721, -"epss_pct": 0.7588, +"epss_pct": 0.75906, "name": "Backdrop CMS - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/headless/cves/2025/CVE-2025-25062.yaml" @@ -39787,7 +39787,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-78", "epss": 0.60344, -"epss_pct": 0.99074, +"epss_pct": 0.99075, "name": "Fortinet FortiSIEM - OS Command Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2025/CVE-2025-25256.yaml" @@ -39807,7 +39807,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-347", "epss": 0.2026, -"epss_pct": 0.97287, +"epss_pct": 0.97291, "name": "GitLab - SAML Authentication Bypass", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2025/CVE-2025-25291.yaml" @@ -39817,7 +39817,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01898, -"epss_pct": 0.78203, +"epss_pct": 0.78229, "name": "Label Studio < 1.16.0 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-25296.yaml" @@ -39827,7 +39827,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-327", "epss": 0.01624, -"epss_pct": 0.74436, +"epss_pct": 0.74466, "name": "File Away <= 3.9.9.0.1 - Missing Authorization to Unauthenticated Arbitrary File Read", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-2539.yaml" @@ -39837,7 +39837,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-798", "epss": 0.02056, -"epss_pct": 0.79949, +"epss_pct": 0.7997, "name": "Vue Vben Admin - Default Credentials", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-25570.yaml" @@ -39855,7 +39855,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-269", "epss": 0.46384, -"epss_pct": 0.9873, +"epss_pct": 0.98731, "name": "User Registration & Membership <= 4.1.1 - Unauthenticated Privilege Escalation", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-2563.yaml" @@ -39865,7 +39865,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N", "cwe": "CWE-79", "epss": 0.01101, -"epss_pct": 0.63382, +"epss_pct": 0.6342, "name": "MagnusBilling Login Logs - Cross-Site Scripting", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-2609.yaml" @@ -39875,7 +39875,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:N", "cwe": "CWE-79", "epss": 0.0092, -"epss_pct": 0.57827, +"epss_pct": 0.57874, "name": "MagnusBilling Alarm Module - Cross-Site Scripting", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-2610.yaml" @@ -39885,7 +39885,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-78", "epss": 0.05991, -"epss_pct": 0.928, +"epss_pct": 0.9281, "name": "ICTBroadcast - Command Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-2611.yaml" @@ -39895,7 +39895,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "cwe": "CWE-434", "epss": 0.55869, -"epss_pct": 0.98971, +"epss_pct": 0.98972, "name": "FlowiseAI Flowise <= 2.2.6 - Arbitrary File Upload", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-26319.yaml" @@ -39905,7 +39905,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-22", "epss": 0.10241, -"epss_pct": 0.95347, +"epss_pct": 0.95353, "name": "InstaWP Connect < 0.1.0.86 - Local PHP File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-2636.yaml" @@ -39922,7 +39922,7 @@ }, "CVE-2025-26793": { "epss": 0.02369, -"epss_pct": 0.82638, +"epss_pct": 0.8266, "name": "FREEDOM Administration - Default Login", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-26793.yaml" @@ -39932,7 +39932,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-266", "epss": 0.5148, -"epss_pct": 0.9886, +"epss_pct": 0.98862, "name": "OttoKit < 1.0.83 - SureTriggers allows Privilege Escalation", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-27007.yaml" @@ -39942,7 +39942,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.00938, -"epss_pct": 0.5844, +"epss_pct": 0.58486, "name": "Yonyou UFIDA ERP-NC V5.0 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-2709.yaml" @@ -39952,7 +39952,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.00938, -"epss_pct": 0.5844, +"epss_pct": 0.58485, "name": "Yonyou UFIDA ERP-NC V5.0 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-2710.yaml" @@ -39962,7 +39962,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.00938, -"epss_pct": 0.5844, +"epss_pct": 0.58485, "name": "Yonyou UFIDA ERP-NC V5.0 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-2711.yaml" @@ -39972,7 +39972,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "cwe": "CWE-287", "epss": 0.00963, -"epss_pct": 0.59228, +"epss_pct": 0.59274, "name": "Navidrome <=0.54.5 - Authentication Bypass in Subsonic API", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-27112.yaml" @@ -39982,7 +39982,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.00825, -"epss_pct": 0.54892, +"epss_pct": 0.54931, "name": "Yonyou UFIDA ERP-NC V5.0 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-2712.yaml" @@ -39992,7 +39992,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-284", "epss": 0.02065, -"epss_pct": 0.80047, +"epss_pct": 0.80069, "name": "Joplin 3.3.3 Server - Privilege Escalation", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-27134.yaml" @@ -40002,7 +40002,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-94", "epss": 0.65003, -"epss_pct": 0.9919, +"epss_pct": 0.99192, "name": "Sitecore Experience Manager (XM)/Experience Platform (XP) 10.4 - Insecure Deserialization", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-27218.yaml" @@ -40022,7 +40022,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-288", "epss": 0.17222, -"epss_pct": 0.96877, +"epss_pct": 0.9688, "name": "TRUfusion Enterprise <= 7.10.4.0 - Admin Contact Portal", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-27225.yaml" @@ -40032,7 +40032,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-287", "epss": 0.59052, -"epss_pct": 0.99043, +"epss_pct": 0.99045, "name": "Kentico Xperience 13 CMS - Staging Service Authentication Bypass (WT-2025-0011)", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-2746.yaml" @@ -40062,7 +40062,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-862", "epss": 0.01103, -"epss_pct": 0.6344, +"epss_pct": 0.63479, "name": "GeoServer - Missing Authorization on REST API Index", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-27505.yaml" @@ -40072,7 +40072,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.00685, -"epss_pct": 0.5014, +"epss_pct": 0.50191, "name": "NocoDB < 0.258.0 - Reflected XSS in Password Reset", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-27506.yaml" @@ -40082,7 +40082,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L", "cwe": "CWE-611", "epss": 0.42952, -"epss_pct": 0.98623, +"epss_pct": 0.98625, "name": "SysAid On-Prem <= 23.3.40 - XML External Entity", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-2775.yaml" @@ -40102,7 +40102,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L", "cwe": "CWE-611", "epss": 0.72202, -"epss_pct": 0.99389, +"epss_pct": 0.99391, "name": "SysAid On-Prem <= 23.3.40 - XML External Entity", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-2777.yaml" @@ -40112,14 +40112,14 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-918", "epss": 0.65905, -"epss_pct": 0.99214, +"epss_pct": 0.99216, "name": "Apache Kafka Client - Arbitrary File Read", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-27817.yaml" }, "CVE-2025-27888": { "epss": 0.01726, -"epss_pct": 0.75935, +"epss_pct": 0.75961, "name": "Apache Druid - Server-Side Request Forgery", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-27888.yaml" @@ -40129,7 +40129,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:L", "cwe": "CWE-89", "epss": 0.119, -"epss_pct": 0.95804, +"epss_pct": 0.95811, "name": "Shopware < 6.5.8.13 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-27892.yaml" @@ -40139,7 +40139,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.03918, -"epss_pct": 0.8959, +"epss_pct": 0.89603, "name": "Zimbra - Cross-Site Scripting via ICS Files", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-27915.yaml" @@ -40149,7 +40149,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-522", "epss": 0.01754, -"epss_pct": 0.76339, +"epss_pct": 0.76365, "name": "Electrolink FM/DAB/TV Transmitter - Credentials Disclosure", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-28228.yaml" @@ -40167,7 +40167,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N", "cwe": "CWE-284", "epss": 0.02092, -"epss_pct": 0.80331, +"epss_pct": 0.80353, "name": "mojoPortal <=2.9.0.1 - Directory Traversal", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-28367.yaml" @@ -40177,7 +40177,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L", "cwe": "CWE-79", "epss": 0.00498, -"epss_pct": 0.40711, +"epss_pct": 0.40763, "name": "Skitter Slideshow <= 2.5.2 - Authenticated (Administrator+) Stored Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-28906.yaml" @@ -40187,7 +40187,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-862", "epss": 0.01372, -"epss_pct": 0.70031, +"epss_pct": 0.70062, "name": "Order Delivery Date Pro for WooCommerce < 12.3.1 - Arbitrary Option Update", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-2907.yaml" @@ -40197,7 +40197,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.29346, -"epss_pct": 0.98043, +"epss_pct": 0.98045, "name": "Vipshop Saturn Console <= 3.5.1 - SQL Injection via ClusterKey Component", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-29085.yaml" @@ -40254,7 +40254,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:L", "cwe": "CWE-611", "epss": 0.46131, -"epss_pct": 0.98721, +"epss_pct": 0.98723, "name": "GeoServer WFS - XXE Processing Vulnerability", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-30220.yaml" @@ -40274,7 +40274,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.02786, -"epss_pct": 0.854, +"epss_pct": 0.85417, "name": "WordPress WP01 - Path Traversal", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-30567.yaml" @@ -40294,7 +40294,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N", "cwe": "CWE-200", "epss": 0.58462, -"epss_pct": 0.99031, +"epss_pct": 0.99033, "name": "Vite Development Server - Path Traversal", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-31125.yaml" @@ -40304,7 +40304,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.05382, -"epss_pct": 0.921, +"epss_pct": 0.9211, "name": "Yeswiki < 4.5.2 - Unauthenticated Path Traversal", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-31131.yaml" @@ -40313,8 +40313,8 @@ "cvss": 9.8, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-287", -"epss": 0.99951, -"epss_pct": 0.99973, +"epss": 0.99976, +"epss_pct": 0.99978, "name": "CrushFTP - Authentication Bypass", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-31161.yaml" @@ -40324,7 +40324,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "cwe": "CWE-434", "epss": 0.99512, -"epss_pct": 0.99942, +"epss_pct": 0.99943, "name": "SAP NetWeaver Visual Composer Metadata Uploader - Deserialization", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-31324.yaml" @@ -40334,14 +40334,14 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N", "cwe": "CWE-200", "epss": 0.40175, -"epss_pct": 0.98533, +"epss_pct": 0.98535, "name": "Vite server.fs.deny Bypass - Local File Inclusion", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-31486.yaml" }, "CVE-2025-31489": { "epss": 0.02428, -"epss_pct": 0.83085, +"epss_pct": 0.83106, "name": "MinIO - Incomplete Signature Validation for Unsigned-Trailer Uploads", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-31489.yaml" @@ -40361,7 +40361,7 @@ "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N", "cwe": "CWE-200", "epss": 0.01725, -"epss_pct": 0.7593, +"epss_pct": 0.75956, "name": "Vite - Path Traversal", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-32395.yaml" @@ -40381,7 +40381,7 @@ "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H", "cwe": "CWE-79", "epss": 0.00634, -"epss_pct": 0.47941, +"epss_pct": 0.47989, "name": "XWiki Platform - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-32430.yaml" @@ -40411,7 +40411,7 @@ "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "cwe": "CWE-426", "epss": 0.59417, -"epss_pct": 0.99053, +"epss_pct": 0.99055, "name": "Sudo - Local Privilege Escalation via chroot", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2025/CVE-2025-32463.yaml" @@ -40431,7 +40431,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-98", "epss": 0.0187, -"epss_pct": 0.77876, +"epss_pct": 0.77902, "name": "EventON Lite <= 2.4 - Authenticated Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-32614.yaml" @@ -40441,7 +40441,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-78", "epss": 0.19326, -"epss_pct": 0.97151, +"epss_pct": 0.97153, "name": "Web-Check < 2.0.1 Screenshot API - OS Command Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-32778.yaml" @@ -40451,7 +40451,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-77", "epss": 0.43894, -"epss_pct": 0.98653, +"epss_pct": 0.98656, "name": "Infoblox NetMRI < 7.6.1 - Unauthenticated Command Injection in get_saml_request", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-32813.yaml" @@ -40461,7 +40461,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.36408, -"epss_pct": 0.98375, +"epss_pct": 0.98377, "name": "NetMRI Unauthenticated SQL Injection via skipjackUsername", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-32814.yaml" @@ -40471,7 +40471,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N", "cwe": "CWE-287", "epss": 0.40935, -"epss_pct": 0.98555, +"epss_pct": 0.98557, "name": "NetMRI < 7.6.1 - Authentication Bypass via Hardcoded Credentials", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-32815.yaml" @@ -40481,7 +40481,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-94", "epss": 0.04396, -"epss_pct": 0.90631, +"epss_pct": 0.90643, "name": "DataEase 2.10.4-2.10.7 - Remote Code Execution", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-32966.yaml" @@ -40509,7 +40509,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.01452, -"epss_pct": 0.71568, +"epss_pct": 0.71597, "name": "Karel IP Phone IP1211 Web Management Panel - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-34023.yaml" @@ -40527,7 +40527,7 @@ "CVE-2025-34027": { "cwe": "CWE-367", "epss": 0.4522, -"epss_pct": 0.98694, +"epss_pct": 0.98696, "name": "Versa Concerto API Path Based - Authentication Bypass", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-34027.yaml" @@ -40547,7 +40547,7 @@ "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H", "cwe": "CWE-78", "epss": 0.60298, -"epss_pct": 0.99072, +"epss_pct": 0.99074, "name": "sar2html <=3.2.2 Plot Parameter - Remote Code Execution", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-34030.yaml" @@ -40557,7 +40557,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N", "cwe": "CWE-22", "epss": 0.02809, -"epss_pct": 0.85517, +"epss_pct": 0.85534, "name": "Moodle Jmol Filter 6.1 - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-34031.yaml" @@ -40567,7 +40567,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-80", "epss": 0.00684, -"epss_pct": 0.50092, +"epss_pct": 0.50142, "name": "Moodle LMS Jmol Plugin <= 6.1 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-34032.yaml" @@ -40577,7 +40577,7 @@ "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H", "cwe": "CWE-78", "epss": 0.12334, -"epss_pct": 0.95906, +"epss_pct": 0.95911, "name": "EnGenius EnShare IoT Gigabit Cloud Service 1.4.11 Root Remote Code Execution", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-34035.yaml" @@ -40592,7 +40592,7 @@ }, "CVE-2025-34040": { "epss": 0.14813, -"epss_pct": 0.96439, +"epss_pct": 0.96443, "name": "Zhiyuan OA Platform - Arbitrary File Upload", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-34040.yaml" @@ -40612,7 +40612,7 @@ }, "CVE-2025-34077": { "epss": 0.14307, -"epss_pct": 0.96344, +"epss_pct": 0.96348, "name": "WordPress Pie Register <= 3.7.1.4 - Authentication Bypass", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-34077.yaml" @@ -40622,7 +40622,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01852, -"epss_pct": 0.77638, +"epss_pct": 0.77664, "name": "ETQ Reliance - Reflected XSS via SQLConverterServlet", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-34141.yaml" @@ -40632,14 +40632,14 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-287", "epss": 0.30353, -"epss_pct": 0.98096, +"epss_pct": 0.98099, "name": "ETQ Reliance - Authentication Bypass via Trailing Space", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-34143.yaml" }, "CVE-2025-3415": { "epss": 0.00956, -"epss_pct": 0.58975, +"epss_pct": 0.59019, "name": "Grafana - Exposes DingDing API Keys", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-3415.yaml" @@ -40673,7 +40673,7 @@ "cvss": 9.8, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "epss": 0.50696, -"epss_pct": 0.98836, +"epss_pct": 0.98839, "name": "SawtoothSoftware Lighthouse Studio < 9.16.14 - Pre-Auth Remote Code Execution", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-34300.yaml" @@ -40683,7 +40683,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N", "cwe": "CWE-798", "epss": 0.54577, -"epss_pct": 0.98941, +"epss_pct": 0.98943, "name": "Sitecore Experience Manager (XM) and Experience Platform (XP) - Hardcoded Credentials", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-34509.yaml" @@ -40693,7 +40693,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "cwe": "CWE-94", "epss": 0.01933, -"epss_pct": 0.78611, +"epss_pct": 0.78635, "name": "Ocean Extra <= 2.4.6 - Unauthenticated Shortcode Execution", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-3472.yaml" @@ -40703,7 +40703,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-434", "epss": 0.0509, -"epss_pct": 0.91757, +"epss_pct": 0.91768, "name": "Contact Form 7 Drag and Drop Multiple File Upload - Arbitrary File Upload", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-3515.yaml" @@ -40713,7 +40713,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-639", "epss": 0.06937, -"epss_pct": 0.93641, +"epss_pct": 0.93649, "name": "WordPress Frontend Login and Registration Blocks Plugin 1.0.7 - Privilege Escalation", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-3605.yaml" @@ -40723,7 +40723,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-78", "epss": 0.62645, -"epss_pct": 0.9913, +"epss_pct": 0.99131, "name": "Dell UnityVSA < 5.5 - Remote Command Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-36604.yaml" @@ -40751,7 +40751,7 @@ "cvss": 9.3, "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/S:N/AU:Y/V:C", "epss": 0.7144, -"epss_pct": 0.99368, +"epss_pct": 0.9937, "name": "Evertz SDVN 3080ipx-10G - Unauthenticated Arbitrary Command Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-4009.yaml" @@ -40801,7 +40801,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-601", "epss": 0.00471, -"epss_pct": 0.3894, +"epss_pct": 0.38991, "name": "IceWarp Mail Server \u226411.4.0 - Open Redirect", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-40630.yaml" @@ -40825,7 +40825,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.02054, -"epss_pct": 0.7993, +"epss_pct": 0.79952, "name": "Spring Framework - Path Traversal", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-41242.yaml" @@ -40835,7 +40835,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "cwe": "CWE-94", "epss": 0.03548, -"epss_pct": 0.88484, +"epss_pct": 0.88498, "name": "Spring Cloud Gateway Server Webflux - Broken Access Control", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-41243.yaml" @@ -40845,7 +40845,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.00692, -"epss_pct": 0.50394, +"epss_pct": 0.50442, "name": "Ricoh Web Image Monitor - Reflected XSS", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-41393.yaml" @@ -40855,7 +40855,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-704", "epss": 0.49051, -"epss_pct": 0.98795, +"epss_pct": 0.98798, "name": "RevPi Webstatus <= v2.4.5 - Authentication Bypass", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-41646.yaml" @@ -40865,7 +40865,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "cwe": "CWE-285", "epss": 0.01841, -"epss_pct": 0.77498, +"epss_pct": 0.77524, "name": "Casdoor - Authorization Bypass", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-4210.yaml" @@ -40874,7 +40874,7 @@ "cvss": 5.3, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "epss": 0.00888, -"epss_pct": 0.56844, +"epss_pct": 0.56886, "name": "Stop User Enumeration WordPress plugin - Authentication Bypass", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-4302.yaml" @@ -40884,7 +40884,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-620", "epss": 0.15647, -"epss_pct": 0.96601, +"epss_pct": 0.96605, "name": "Motors <= 5.6.67 - Unauthenticated Privilege Escalation via Password Update/Account Takeover", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-4322.yaml" @@ -40894,7 +40894,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-269", "epss": 0.02138, -"epss_pct": 0.80741, +"epss_pct": 0.80764, "name": "Simple User Registration <= 6.3 - Unauthenticated Privilege Escalation", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-4334.yaml" @@ -40904,7 +40904,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-98", "epss": 0.40352, -"epss_pct": 0.9854, +"epss_pct": 0.98542, "name": "Ads Pro Plugin <= 4.89 - Local File Inclusion", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-4380.yaml" @@ -40914,7 +40914,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.03794, -"epss_pct": 0.89231, +"epss_pct": 0.89245, "name": "Liferay Portal - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-4388.yaml" @@ -40924,7 +40924,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-89", "epss": 0.02667, -"epss_pct": 0.84687, +"epss_pct": 0.84706, "name": "Relevanssi <= 4.24.4 (Free) - Unauthenticated SQL Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-4396.yaml" @@ -40934,7 +40934,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.02507, -"epss_pct": 0.83625, +"epss_pct": 0.83644, "name": "MapTiler Tileserver-php v2.0 - Unauthenticated XSS", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-44136.yaml" @@ -40944,7 +40944,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.0136, -"epss_pct": 0.69777, +"epss_pct": 0.69808, "name": "MapTiler Tileserver-php v2.0 - Unauthenticated File Read", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-44137.yaml" @@ -40954,7 +40954,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.60579, -"epss_pct": 0.99079, +"epss_pct": 0.9908, "name": "MailEnable Mail Service < v10 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-44148.yaml" @@ -40964,7 +40964,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:N", "cwe": "CWE-22", "epss": 0.04173, -"epss_pct": 0.90189, +"epss_pct": 0.90202, "name": "White Star Software ProTop - Directory Traversal", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-44177.yaml" @@ -40984,7 +40984,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-22", "epss": 0.10373, -"epss_pct": 0.95392, +"epss_pct": 0.95398, "name": "WordPress Madara Theme < 2.2.2.1 - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-4524.yaml" @@ -40994,7 +40994,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.00588, -"epss_pct": 0.45771, +"epss_pct": 0.45822, "name": "Liferay Portal & DXP - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-4576.yaml" @@ -41003,7 +41003,7 @@ "cvss": 10.0, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "epss": 0.03012, -"epss_pct": 0.86474, +"epss_pct": 0.86488, "name": "JEHC-BPM - Remote Code Execute", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-45854.yaml" @@ -41013,7 +41013,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-77", "epss": 0.07163, -"epss_pct": 0.93831, +"epss_pct": 0.93838, "name": "Blink Router - Command Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-45985.yaml" @@ -41023,7 +41023,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-22", "epss": 0.24295, -"epss_pct": 0.97698, +"epss_pct": 0.97701, "name": "Samsung MagicINFO 9 Server - File Upload & Remote Code Execution", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-4632.yaml" @@ -41032,7 +41032,7 @@ "cvss": 6.1, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "epss": 0.00625, -"epss_pct": 0.47576, +"epss_pct": 0.47625, "name": "YesWiki Reflected XSS via File Upload", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-46349.yaml" @@ -41042,7 +41042,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.00493, -"epss_pct": 0.40377, +"epss_pct": 0.40428, "name": "Broadstreet WordPress plugin - Reflected XSS", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-4652.yaml" @@ -41057,7 +41057,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "cwe": "CWE-79", "epss": 0.00535, -"epss_pct": 0.43063, +"epss_pct": 0.43113, "name": "YesWiki < 4.5.4 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-46550.yaml" @@ -41075,7 +41075,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-22", "epss": 0.01157, -"epss_pct": 0.64834, +"epss_pct": 0.64871, "name": "Vite Dev Server - Information Exposure", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-46565.yaml" @@ -41097,7 +41097,7 @@ }, "CVE-2025-46822": { "epss": 0.04028, -"epss_pct": 0.89866, +"epss_pct": 0.89878, "name": "Java-springboot-codebase 1.1 - Arbitrary File Read", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-46822.yaml" @@ -41106,14 +41106,14 @@ "cvss": 6.5, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "epss": 0.50237, -"epss_pct": 0.98823, +"epss_pct": 0.98826, "name": "Mitel 6000 - OS Command Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-47188.yaml" }, "CVE-2025-47204": { "epss": 0.00438, -"epss_pct": 0.36606, +"epss_pct": 0.36656, "name": "Bootstrap Multiselect <= 1.1.2 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-47204.yaml" @@ -41123,7 +41123,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N", "cwe": "CWE-24", "epss": 0.01996, -"epss_pct": 0.79305, +"epss_pct": 0.79331, "name": "Personal Weather Station Dashboard 12 - Directory Traversal", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-47423.yaml" @@ -41133,7 +41133,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-23", "epss": 0.05145, -"epss_pct": 0.91826, +"epss_pct": 0.91837, "name": "WordPress Eventin (Themewinter) \u2264 4.0.26 - Arbitrary File Download", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-47445.yaml" @@ -41143,7 +41143,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-269", "epss": 0.27878, -"epss_pct": 0.97955, +"epss_pct": 0.97957, "name": "Eventin <= 4.0.26 - Privilege Escalation", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-47539.yaml" @@ -41153,7 +41153,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-434", "epss": 0.04643, -"epss_pct": 0.91075, +"epss_pct": 0.91086, "name": "TI WooCommerce Wishlist <= 2.9.2 - Arbitrary File Upload", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-47577.yaml" @@ -41163,7 +41163,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-640", "epss": 0.24936, -"epss_pct": 0.97753, +"epss_pct": 0.97756, "name": "PSW Front-end Login & Registration 1.13 - Weak Password Recovery", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-47646.yaml" @@ -41190,7 +41190,7 @@ "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:NH", "cwe": "CWE-209", "epss": 0.59403, -"epss_pct": 0.99051, +"epss_pct": 0.99053, "name": "Wing FTP Server <= 7.4.3 - Path Disclosure via Overlong UID Cookie", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-47813.yaml" @@ -41210,7 +41210,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-98", "epss": 0.02733, -"epss_pct": 0.85069, +"epss_pct": 0.85087, "name": "WordPress Formality Plugin <= 1.5.9 - Local File Inclusion", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-48157.yaml" @@ -41220,7 +41220,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.01388, -"epss_pct": 0.70348, +"epss_pct": 0.70378, "name": "MyStyle Custom Product Designer <= 3.21.1 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-48281.yaml" @@ -41250,7 +41250,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "cwe": "CWE-424", "epss": 0.5764, -"epss_pct": 0.99012, +"epss_pct": 0.99014, "name": "vBulletin replaceAdTemplate - Remote Code Execution", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-48828.yaml" @@ -41260,7 +41260,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N", "cwe": "CWE-79", "epss": 0.00685, -"epss_pct": 0.50151, +"epss_pct": 0.50201, "name": "Discourse OAuth Social Login - Cross-site Scripting", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-48954.yaml" @@ -41270,7 +41270,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-287", "epss": 0.2288, -"epss_pct": 0.97575, +"epss_pct": 0.97578, "name": "DataEase < 2.10.10 - JWT Authentication Bypass", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-49001.yaml" @@ -41278,14 +41278,14 @@ "CVE-2025-49002": { "cwe": "CWE-290", "epss": 0.47001, -"epss_pct": 0.98745, +"epss_pct": 0.98748, "name": "DataEase - Remote Code Execution", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-49002.yaml" }, "CVE-2025-49029": { "epss": 0.02197, -"epss_pct": 0.81259, +"epss_pct": 0.81281, "name": "WordPress Custom Login And Signup Widget Plugin <= 1.0 - Arbitrary Code Execution", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-49029.yaml" @@ -41305,7 +41305,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "cwe": "CWE-20", "epss": 0.53389, -"epss_pct": 0.98909, +"epss_pct": 0.98911, "name": "Pterodactyl Panel - Remote Code Execution", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-49132.yaml" @@ -41315,7 +41315,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "cwe": "CWE-611", "epss": 0.03404, -"epss_pct": 0.88017, +"epss_pct": 0.8803, "name": "Akamai CloudTest < 60 2025.06.02 - XML External Entity (XXE)", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-49493.yaml" @@ -41347,7 +41347,7 @@ "cvss": 9.8, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "epss": 0.07804, -"epss_pct": 0.94239, +"epss_pct": 0.94246, "name": "Teleport - Authentication Bypass", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-49825.yaml" @@ -41392,7 +41392,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-94", "epss": 0.01862, -"epss_pct": 0.77778, +"epss_pct": 0.77804, "name": "Letta Letta 0.7.12 - Remote Code Execution", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-51482.yaml" @@ -41417,8 +41417,8 @@ "cvss": 9.8, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", -"epss": 0.00439, -"epss_pct": 0.36678, +"epss": 0.018, +"epss_pct": 0.76981, "name": "mJobTime <= 15.7.2 - Unauthenticated Blind SQL Injection to RCE", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-51683.yaml" @@ -41436,7 +41436,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H", "cwe": "CWE-94", "epss": 0.03605, -"epss_pct": 0.88656, +"epss_pct": 0.8867, "name": "XWiki <= 17.3.0 - Server-Side Template Injection (SSTI)", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-51991.yaml" @@ -41446,7 +41446,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L", "cwe": "CWE-23", "epss": 0.01499, -"epss_pct": 0.72461, +"epss_pct": 0.72491, "name": "MikoPBX - Unrestricted File Upload", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-52207.yaml" @@ -41456,7 +41456,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.02207, -"epss_pct": 0.81341, +"epss_pct": 0.81362, "name": "XWiki - HQL Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-52472.yaml" @@ -41466,7 +41466,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N", "cwe": "CWE-200", "epss": 0.35197, -"epss_pct": 0.98326, +"epss_pct": 0.98328, "name": "DNN (DotNetNuke) - Unicode Path Normalization NTLM Hash Disclosure", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-52488.yaml" @@ -41476,7 +41476,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "cwe": "CWE-306", "epss": 0.40972, -"epss_pct": 0.98557, +"epss_pct": 0.98559, "name": "UniFi Access - Broken Access Control", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-52665.yaml" @@ -41491,7 +41491,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.38542, -"epss_pct": 0.98467, +"epss_pct": 0.98469, "name": "Advantech WISE-IoTSuite/SaaS - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-52694.yaml" @@ -41501,7 +41501,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-89", "epss": 0.02355, -"epss_pct": 0.82547, +"epss_pct": 0.82567, "name": "Likes and Dislikes Plugin <= 1.0.0 - Unauthenticated SQL Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-5287.yaml" @@ -41511,7 +41511,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-223", "epss": 0.09825, -"epss_pct": 0.95209, +"epss_pct": 0.95215, "name": "Fortinet FortiWeb - Authentication Bypass to Admin Privilege", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-52970.yaml" @@ -41520,8 +41520,8 @@ "cvss": 6.1, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", -"epss": 0.45502, -"epss_pct": 0.98703, +"epss": 0.46099, +"epss_pct": 0.98722, "name": "ONLYOFFICE Docs (DocumentServer) - Reflected Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-5301.yaml" @@ -41541,7 +41541,7 @@ "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L", "cwe": "CWE-79", "epss": 0.00574, -"epss_pct": 0.45111, +"epss_pct": 0.45161, "name": "WSO2 - Server Side Request Forgery", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-5350.yaml" @@ -41551,7 +41551,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.00556, -"epss_pct": 0.44152, +"epss_pct": 0.44199, "name": "Pi-hole Reflected XSS in 404-Error Page", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-53533.yaml" @@ -41566,7 +41566,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L", "cwe": "CWE-200", "epss": 0.01908, -"epss_pct": 0.78314, +"epss_pct": 0.7834, "name": "Docusaurus Gists Plugin < 4.0.0 - GitHub Personal Access Token Exposure", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-53624.yaml" @@ -41596,7 +41596,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "cwe": "CWE-1336", "epss": 0.09342, -"epss_pct": 0.95025, +"epss_pct": 0.95031, "name": "LaRecipe < 2.8.1 Remote Code Execution via SSTI", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-53833.yaml" @@ -41606,7 +41606,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-200", "epss": 0.00884, -"epss_pct": 0.56728, +"epss_pct": 0.5677, "name": "Directus < 11.9.0 - Version Disclosure", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-53887.yaml" @@ -41621,7 +41621,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "cwe": "CWE-502", "epss": 0.96473, -"epss_pct": 0.99876, +"epss_pct": 0.99877, "name": "Laravel Livewire v3 - Remote Command Execution", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-54068.yaml" @@ -41654,7 +41654,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "cwe": "CWE-91", "epss": 0.01724, -"epss_pct": 0.7592, +"epss_pct": 0.75946, "name": "Adobe Experience Manager \u2264 6.5.23.0 - XML Injection", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-54251.yaml" @@ -41673,7 +41673,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L", "cwe": "CWE-79", "epss": 0.02373, -"epss_pct": 0.8267, +"epss_pct": 0.82691, "name": "Copyparty <=1.18.6 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-54589.yaml" @@ -41683,7 +41683,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.00565, -"epss_pct": 0.44646, +"epss_pct": 0.44695, "name": "Heimdall Application Dashboard < 2.7.3 - Reflected XSS", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-54597.yaml" @@ -41693,7 +41693,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-89", "epss": 0.01514, -"epss_pct": 0.72721, +"epss_pct": 0.72751, "name": "WordPress JS Archive List <= 6.1.5 - SQL Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-54726.yaml" @@ -41702,7 +41702,7 @@ "cvss": 9.4, "cvss_vector": "CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H", "epss": 0.49994, -"epss_pct": 0.98818, +"epss_pct": 0.9882, "name": "NestJS DevTools Integration - Remote Code Execution", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-54782.yaml" @@ -41712,7 +41712,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-601", "epss": 0.00614, -"epss_pct": 0.47024, +"epss_pct": 0.47075, "name": "Astro SSR - Open Redirect", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-54793.yaml" @@ -41722,7 +41722,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-611", "epss": 0.15038, -"epss_pct": 0.96476, +"epss_pct": 0.9648, "name": "Apache Tika - XXE Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-54988.yaml" @@ -41732,7 +41732,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-918", "epss": 0.01701, -"epss_pct": 0.75605, +"epss_pct": 0.7563, "name": "Stirling-PDF < 1.1.0 - Server-Side Request Forgery", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-55150.yaml" @@ -41742,7 +41742,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L", "cwe": "CWE-918", "epss": 0.01982, -"epss_pct": 0.79148, +"epss_pct": 0.79172, "name": "Stirling-PDF SSRF via Markdown", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-55161.yaml" @@ -41772,7 +41772,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "cwe": "CWE-200", "epss": 0.0534, -"epss_pct": 0.92054, +"epss_pct": 0.92064, "name": "ArgoCD Project API Token Repository Credentials Exposure", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-55190.yaml" @@ -41782,7 +41782,7 @@ "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N", "cwe": "CWE-79", "epss": 0.00637, -"epss_pct": 0.48074, +"epss_pct": 0.48123, "name": "Astro - Unauthorized Third-Party Image Access", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-55303.yaml" @@ -41800,7 +41800,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.01451, -"epss_pct": 0.71536, +"epss_pct": 0.71565, "name": "IdeaCMS <= 1.7 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-5569.yaml" @@ -41810,7 +41810,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:L", "cwe": "CWE-73", "epss": 0.01334, -"epss_pct": 0.69183, +"epss_pct": 0.69218, "name": "Directus - Unauthenticated File Modification", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-55746.yaml" @@ -41820,7 +41820,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "cwe": "CWE-23", "epss": 0.01668, -"epss_pct": 0.75115, +"epss_pct": 0.75144, "name": "XWiki Platform - Information Disclosure", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-55747.yaml" @@ -41830,7 +41830,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-23", "epss": 0.01771, -"epss_pct": 0.76572, +"epss_pct": 0.766, "name": "XWiki Platform - Path Traversal", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-55748.yaml" @@ -41840,7 +41840,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-284", "epss": 0.01471, -"epss_pct": 0.71961, +"epss_pct": 0.71991, "name": "XWiki - Information Disclosure", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-55749.yaml" @@ -41855,7 +41855,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "cwe": "CWE-305", "epss": 0.00695, -"epss_pct": 0.50506, +"epss_pct": 0.50553, "name": "LiquidFiles < 4.2 - User Enumeration via Password Reset", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-56132.yaml" @@ -41870,7 +41870,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N", "cwe": "CWE-918", "epss": 0.00696, -"epss_pct": 0.50525, +"epss_pct": 0.50572, "name": "Dify v1.6.0 - Server-Side Request Forgery", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-56520.yaml" @@ -41880,7 +41880,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-78", "epss": 0.03196, -"epss_pct": 0.87228, +"epss_pct": 0.87243, "name": "Datart v1.0.0-rc.3 - Remote Code Execution", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-56819.yaml" @@ -41890,7 +41890,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-862", "epss": 0.01888, -"epss_pct": 0.78076, +"epss_pct": 0.78102, "name": "HyperComments <= 1.2.2 - Arbitrary Options Update", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-5701.yaml" @@ -41934,7 +41934,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N", "cwe": "CWE-918", "epss": 0.02495, -"epss_pct": 0.83538, +"epss_pct": 0.83557, "name": "Next.js Middleware - Server-Side Request Forgery", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-57822.yaml" @@ -41944,7 +41944,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-601", "epss": 0.00488, -"epss_pct": 0.40081, +"epss_pct": 0.40131, "name": "JumpServer - Open Redirect via Referer Header", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-58044.yaml" @@ -41954,7 +41954,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N", "cwe": "CWE-918", "epss": 0.00829, -"epss_pct": 0.5501, +"epss_pct": 0.5505, "name": "Astro Cloudflare Adapter - Server Side Request Forgery", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-58179.yaml" @@ -41976,7 +41976,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L", "cwe": "CWE-611", "epss": 0.64874, -"epss_pct": 0.99187, +"epss_pct": 0.99189, "name": "GeoServer - XML External Entity Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-58360.yaml" @@ -41986,7 +41986,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-306", "epss": 0.49894, -"epss_pct": 0.98814, +"epss_pct": 0.98816, "name": "Flowise <= 3.0.5 - Account Takeover", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-58434.yaml" @@ -41996,7 +41996,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "cwe": "CWE-287", "epss": 0.18687, -"epss_pct": 0.97064, +"epss_pct": 0.97067, "name": "FOGProject <= 1.5.10.1673 - Authentication Bypass", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-58443.yaml" @@ -42013,7 +42013,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.01224, -"epss_pct": 0.66698, +"epss_pct": 0.66731, "name": "Vite Dev Server - Path Traversal", "severity": "low", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-58751.yaml" @@ -42023,7 +42023,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.01779, -"epss_pct": 0.76679, +"epss_pct": 0.76705, "name": "Mockoon < 9.2.0 - Path Traversal", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-59049.yaml" @@ -42048,7 +42048,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-23", "epss": 0.01636, -"epss_pct": 0.74639, +"epss_pct": 0.7467, "name": "esm.sh <= v136 - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-59341.yaml" @@ -42058,7 +42058,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "cwe": "CWE-24", "epss": 0.03031, -"epss_pct": 0.86559, +"epss_pct": 0.86573, "name": "esm.sh <= v136 - Arbitrary File Write via Path Traversal", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-59342.yaml" @@ -42068,7 +42068,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-639", "epss": 0.04469, -"epss_pct": 0.90766, +"epss_pct": 0.90778, "name": "Service Finder Bookings - Authentication Bypass", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-5947.yaml" @@ -42097,8 +42097,8 @@ "cvss": 8.8, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-434", -"epss": 0.5253, -"epss_pct": 0.98882, +"epss": 0.57566, +"epss_pct": 0.99012, "name": "WordPress WPvivid Backup & Migration Plugin <= 0.9.116 - Authenticated Arbitrary File Upload", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-5961.yaml" @@ -42107,8 +42107,8 @@ "cvss": 5.3, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-203", -"epss": 0.00895, -"epss_pct": 0.57055, +"epss": 0.00888, +"epss_pct": 0.56862, "name": "ownCloud Guests - User Enumeration", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-59716.yaml" @@ -42120,7 +42120,7 @@ }, "CVE-2025-6058": { "epss": 0.05497, -"epss_pct": 0.92226, +"epss_pct": 0.92235, "name": "WPBookit <= 1.0.4 - Unauthenticated Arbitrary File Upload", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-6058.yaml" @@ -42130,7 +42130,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01357, -"epss_pct": 0.69713, +"epss_pct": 0.69745, "name": "DokuWiki <= 2025-05-14a Librarian - Reflected Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-61224.yaml" @@ -42145,7 +42145,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.0046, -"epss_pct": 0.38167, +"epss_pct": 0.38215, "name": "WordPress Qwizcards < 3.95 - Cross-Site Scripting (Reflected)", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-6174.yaml" @@ -42210,7 +42210,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-200", "epss": 0.00721, -"epss_pct": 0.51434, +"epss_pct": 0.51481, "name": "WordPress Varnish/Nginx Proxy Caching <= 1.8.3 - Information Exposure", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-62126.yaml" @@ -42220,7 +42220,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-640", "epss": 0.35127, -"epss_pct": 0.98323, +"epss_pct": 0.98326, "name": "Allegra - Authentication Bypass via Predictable Password Reset Token", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2025/CVE-2025-6216.yaml" @@ -42230,7 +42230,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-209", "epss": 0.62871, -"epss_pct": 0.99135, +"epss_pct": 0.99136, "name": "Squid Proxy - HTTP Authentication Credentials Disclosure", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-62168.yaml" @@ -42240,7 +42240,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-204", "epss": 0.00766, -"epss_pct": 0.53004, +"epss_pct": 0.53047, "name": "Piwigo - User Enumeration via Password Reset", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-62512.yaml" @@ -42255,7 +42255,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01083, -"epss_pct": 0.62846, +"epss_pct": 0.62888, "name": "VDO.Ninja - DOM-Based Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-62613.yaml" @@ -42265,7 +42265,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.00431, -"epss_pct": 0.35987, +"epss_pct": 0.36035, "name": "ChangeDetection.io <= v0.50.33 - Stored XSS via Watch API", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-62780.yaml" @@ -42273,7 +42273,7 @@ "CVE-2025-63387": { "cwe": "CWE-287", "epss": 0.30318, -"epss_pct": 0.98094, +"epss_pct": 0.98098, "name": "Dify v1.9.1 - Broken Access Control", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-63387.yaml" @@ -42293,7 +42293,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-74", "epss": 0.01754, -"epss_pct": 0.7634, +"epss_pct": 0.76366, "name": "Code-Projects School Fees Payment System 1.0 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-6403.yaml" @@ -42327,7 +42327,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "cwe": "CWE-647", "epss": 0.01325, -"epss_pct": 0.68965, +"epss_pct": 0.69001, "name": "Symfony HttpFoundation - Access Control Bypass via PATH_INFO", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-64500.yaml" @@ -42347,7 +42347,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-80", "epss": 0.00519, -"epss_pct": 0.42099, +"epss_pct": 0.42151, "name": "XWiki DeleteApplication - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-66472.yaml" @@ -42366,7 +42366,7 @@ "cvss": 7.5, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "epss": 0.01478, -"epss_pct": 0.72068, +"epss_pct": 0.72098, "name": "Yonyou YonBIP - Path Traversal", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-66744.yaml" @@ -42375,8 +42375,8 @@ "cvss": 9.8, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-420", -"epss": 0.01393, -"epss_pct": 0.70453, +"epss": 0.01412, +"epss_pct": 0.70859, "name": "ComfyUI-Manager < 3.38 - Configuration Overwrite", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-67303.yaml" @@ -42393,7 +42393,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "cwe": "CWE-862", "epss": 0.00588, -"epss_pct": 0.45772, +"epss_pct": 0.45822, "name": "LottieFiles WordPress Plugin <= 3.0.0 - Missing Authorization", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-68043.yaml" @@ -42403,7 +42403,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H", "cwe": "CWE-611", "epss": 0.39504, -"epss_pct": 0.98506, +"epss_pct": 0.98509, "name": "Apache Struts XWork - XML External Entity Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-68493.yaml" @@ -42418,7 +42418,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-918", "epss": 0.00654, -"epss_pct": 0.48831, +"epss_pct": 0.48881, "name": "WordPress Broken Link Notifier < 1.3.1 - Unauthenticated SSRF", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-6851.yaml" @@ -42428,7 +42428,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N", "cwe": "CWE-601", "epss": 0.00498, -"epss_pct": 0.40707, +"epss_pct": 0.40759, "name": "Accept Donations with PayPal <= 1.5.2 - Open Redirect", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-68602.yaml" @@ -42453,7 +42453,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-798", "epss": 0.31362, -"epss_pct": 0.9815, +"epss_pct": 0.98152, "name": "RustFS < 1.0.0-alpha.77 - Hardcoded gRPC Authentication Token", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2025/CVE-2025-68926.yaml" @@ -42463,7 +42463,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-202", "epss": 0.02191, -"epss_pct": 0.81185, +"epss_pct": 0.81207, "name": "phpMyFAQ - Configuration Backup Disclosure", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-69200.yaml" @@ -42473,7 +42473,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-269", "epss": 0.26442, -"epss_pct": 0.97862, +"epss_pct": 0.97864, "name": "The Opal Estate Pro \u2013 Property Management <= 1.7.5 - Unauthenticated Privilege Escalation", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-6934.yaml" @@ -42483,7 +42483,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.01609, -"epss_pct": 0.74206, +"epss_pct": 0.74236, "name": "ionCube Tester Plus <= 1.3 - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-69411.yaml" @@ -42503,7 +42503,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-200", "epss": 0.01661, -"epss_pct": 0.75009, +"epss_pct": 0.75039, "name": "langchain-ai langchain - XML External Entity Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2025/CVE-2025-6984.yaml" @@ -42513,7 +42513,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-321", "epss": 0.02036, -"epss_pct": 0.79736, +"epss_pct": 0.79758, "name": "FUXA <= 1.2.7 - Hardcoded JWT Secret Authentication Bypass", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-69971.yaml" @@ -42523,7 +42523,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-94", "epss": 0.05126, -"epss_pct": 0.91799, +"epss_pct": 0.91809, "name": "SPIP Saisies - Remote Code Execution", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-71243.yaml" @@ -42533,7 +42533,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N", "cwe": "CWE-287", "epss": 0.44576, -"epss_pct": 0.98675, +"epss_pct": 0.98677, "name": "BMC FootPrints - Authentication Bypass", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-71257.yaml" @@ -42543,7 +42543,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N", "cwe": "CWE-918", "epss": 0.1743, -"epss_pct": 0.96905, +"epss_pct": 0.9691, "name": "BMC FootPrints 'searchWeb' - Server-Side Request Forgery", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-71258.yaml" @@ -42553,7 +42553,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N", "cwe": "CWE-918", "epss": 0.12916, -"epss_pct": 0.96028, +"epss_pct": 0.96033, "name": "BMC FootPrints 'feedUrl' - Server-Side Request Forgery", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-71259.yaml" @@ -42568,7 +42568,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-73", "epss": 0.0157, -"epss_pct": 0.73628, +"epss_pct": 0.73659, "name": "Flowise - Path Traversal", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-71324.yaml" @@ -42578,7 +42578,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-73", "epss": 0.0436, -"epss_pct": 0.90561, +"epss_pct": 0.90573, "name": "Flowise - Path Traversal", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-71334.yaml" @@ -42588,7 +42588,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.01707, -"epss_pct": 0.75699, +"epss_pct": 0.75725, "name": "Zoo Management System 1.0 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-7160.yaml" @@ -42618,7 +42618,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.01684, -"epss_pct": 0.75356, +"epss_pct": 0.75384, "name": "Swagger UI >=3.14.1 < 3.38.0 - DOM Based Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/headless/cves/2025/CVE-2025-8191.yaml" @@ -42633,7 +42633,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-306", "epss": 0.01217, -"epss_pct": 0.66482, +"epss_pct": 0.66516, "name": "G\u00fcralp Systems FMUS Series - Unauthenticated Access", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2025/CVE-2025-8286.yaml" @@ -42643,7 +42643,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.00417, -"epss_pct": 0.34753, +"epss_pct": 0.34797, "name": "LibreChat <= 0.7.9 - HTML Injection via Accept-Language Header", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-8848.yaml" @@ -42653,7 +42653,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.24317, -"epss_pct": 0.97699, +"epss_pct": 0.97703, "name": "Chef Automate < 4.13.295 \u2014 SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-8868.yaml" @@ -42673,7 +42673,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-200", "epss": 0.00937, -"epss_pct": 0.58413, +"epss_pct": 0.58458, "name": "Trinity Audio <= 5.21.0 - Information Exposure", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-9196.yaml" @@ -42683,7 +42683,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-287", "epss": 0.02196, -"epss_pct": 0.81248, +"epss_pct": 0.81269, "name": "RestroPress 3.0.0-3.2.1 - Authentication Bypass", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-9209.yaml" @@ -42707,7 +42707,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.01806, -"epss_pct": 0.77026, +"epss_pct": 0.77053, "name": "Loan Management System 1.0 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-9744.yaml" @@ -42727,7 +42727,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "cwe": "CWE-565", "epss": 0.93905, -"epss_pct": 0.99837, +"epss_pct": 0.99838, "name": "Palo Alto Networks PAN-OS - Authentication Bypass", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2026/CVE-2026-0257.yaml" @@ -42737,7 +42737,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "cwe": "CWE-306", "epss": 0.04392, -"epss_pct": 0.90626, +"epss_pct": 0.90638, "name": "MLflow Job API - Authentication Bypass", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-0545.yaml" @@ -42747,7 +42747,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-287", "epss": 0.01936, -"epss_pct": 0.7865, +"epss_pct": 0.78674, "name": "LolLMS <= 2.2.0 - Unauthenticated File Upload", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-0558.yaml" @@ -42757,7 +42757,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-918", "epss": 0.01765, -"epss_pct": 0.76479, +"epss_pct": 0.76506, "name": "LolLMS < 2.2.0 - Server-Side Request Forgery", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-0560.yaml" @@ -42768,8 +42768,8 @@ "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-0594.yaml" }, "CVE-2026-0717": { -"epss": 0.0062, -"epss_pct": 0.47335, +"epss": 0.00634, +"epss_pct": 0.48011, "name": "LottieFiles for Gutenberg <= 3.0.0 - Unauthenticated Settings Disclosure", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-0717.yaml" @@ -42779,7 +42779,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-434", "epss": 0.62903, -"epss_pct": 0.99136, +"epss_pct": 0.99138, "name": "Ninja Forms File Uploads <= 3.3.26 - Arbitrary File Upload", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-0740.yaml" @@ -42789,7 +42789,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.00576, -"epss_pct": 0.45169, +"epss_pct": 0.4522, "name": "WP Content Permission <= 1.2 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-0743.yaml" @@ -42809,7 +42809,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-862", "epss": 0.00682, -"epss_pct": 0.49991, +"epss_pct": 0.50041, "name": "Frontend File Manager Plugin <= 23.5 - Unauthenticated Arbitrary Email Sending", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-0829.yaml" @@ -42819,7 +42819,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-98", "epss": 0.09396, -"epss_pct": 0.95051, +"epss_pct": 0.95057, "name": "Prodigy Commerce <= 3.3.0 - Local File Inclusion", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-0926.yaml" @@ -42834,7 +42834,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-285", "epss": 0.02948, -"epss_pct": 0.86197, +"epss_pct": 0.86214, "name": "Hippoo Mobile App for WooCommerce <= 1.9.4 - Authentication Bypass to Admin Account Takeover", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-10580.yaml" @@ -42844,7 +42844,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-862", "epss": 0.01873, -"epss_pct": 0.77903, +"epss_pct": 0.77929, "name": "Drupal LocalGov Workflows < 1.6.0 - Information Disclosure", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-10768.yaml" @@ -42854,7 +42854,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-347", "epss": 0.03578, -"epss_pct": 0.88575, +"epss_pct": 0.88589, "name": "UpdraftPlus WP Backup & Migration Plugin - Authentication Bypass", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2026/CVE-2026-10795.yaml" @@ -42864,7 +42864,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-200", "epss": 0.01524, -"epss_pct": 0.72862, +"epss_pct": 0.72892, "name": "YMC Filter WordPress - Unauthenticated Post Disclosure", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-10823.yaml" @@ -42874,7 +42874,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H", "cwe": "CWE-79", "epss": 0.0121, -"epss_pct": 0.66321, +"epss_pct": 0.66354, "name": "parisneo/lollms < 2.2.0 - Authenticated Stored XSS", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-1115.yaml" @@ -42884,7 +42884,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-287", "epss": 0.02208, -"epss_pct": 0.81348, +"epss_pct": 0.81369, "name": "SMS Alert \u2013 SMS & OTP for WooCommerce - Privilege Escalation", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-11387.yaml" @@ -42894,7 +42894,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-862", "epss": 0.00967, -"epss_pct": 0.5938, +"epss_pct": 0.59426, "name": "WPAdverts <= 2.3.2 - Information Disclosure", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-11801.yaml" @@ -42904,7 +42904,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L", "cwe": "CWE-89", "epss": 0.12976, -"epss_pct": 0.96042, +"epss_pct": 0.96047, "name": "Django RasterField - SQL Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-1207.yaml" @@ -42914,7 +42914,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-269", "epss": 0.01492, -"epss_pct": 0.72321, +"epss_pct": 0.7235, "name": "WordPress MemberGlut < 1.1.5 - Unauthenticated Privilege Escalation", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-12394.yaml" @@ -42931,7 +42931,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N", "cwe": "CWE-601", "epss": 0.00592, -"epss_pct": 0.45968, +"epss_pct": 0.46019, "name": "URL Shortify <= 1.12.1 - Open Redirect", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-1277.yaml" @@ -42941,7 +42941,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L", "cwe": "CWE-22", "epss": 0.01352, -"epss_pct": 0.69602, +"epss_pct": 0.69636, "name": "All-in-One WP Migration and Backup < 7.106 - Arbitrary Log File Write", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-12898.yaml" @@ -42951,7 +42951,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-601", "epss": 0.0046, -"epss_pct": 0.38159, +"epss_pct": 0.38207, "name": "Frontend Post Submission Manager Lite <= 1.2.7 - Open Redirect", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-1296.yaml" @@ -42961,7 +42961,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-20", "epss": 0.03757, -"epss_pct": 0.8912, +"epss_pct": 0.89133, "name": "Podlove Podcast Publisher <= 4.5.1 - Arbitrary File Upload", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-13001.yaml" @@ -42971,7 +42971,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-434", "epss": 0.04458, -"epss_pct": 0.90749, +"epss_pct": 0.90761, "name": "WordPress midi-Synth <= 1.1.0 - Unauthenticated Arbitrary File Upload", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-1306.yaml" @@ -42981,7 +42981,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-862", "epss": 0.00892, -"epss_pct": 0.5697, +"epss_pct": 0.57012, "name": "WordPress 3D FlipBook <= 1.16.17 - Information Disclosure", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-1314.yaml" @@ -42991,7 +42991,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-918", "epss": 0.00912, -"epss_pct": 0.57568, +"epss_pct": 0.57611, "name": "WordPress Kirki < 6.0.12 - Server-Side Request Forgery", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-13147.yaml" @@ -43001,7 +43001,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-434", "epss": 0.32714, -"epss_pct": 0.98221, +"epss_pct": 0.98225, "name": "WPvivid Backup & Migration <= 0.9.123 - Arbitrary File Upload", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-1357.yaml" @@ -43011,7 +43011,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-862", "epss": 0.01211, -"epss_pct": 0.66336, +"epss_pct": 0.66369, "name": "Video Conferencing with Zoom API < 4.6.6 - Unauthenticated SDK Signature Generation", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-1368.yaml" @@ -43021,7 +43021,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.00889, -"epss_pct": 0.56861, +"epss_pct": 0.56904, "name": "WPBot <= 8.4.9 - Cross-Site Scripting", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-13731.yaml" @@ -43031,7 +43031,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-434", "epss": 0.03177, -"epss_pct": 0.87149, +"epss_pct": 0.87163, "name": "WordPress Slider Future <= 1.0.5 - Unauthenticated Arbitrary File Upload", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-1405.yaml" @@ -43041,7 +43041,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-434", "epss": 0.03639, -"epss_pct": 0.88755, +"epss_pct": 0.88769, "name": "Realtyna Organic IDX/WPL <= 5.2.0 - Unauthenticated Arbitrary File Upload", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-14483.yaml" @@ -43051,7 +43051,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-434", "epss": 0.03484, -"epss_pct": 0.88292, +"epss_pct": 0.88307, "name": "WordPress Super Forms <= 6.3.313 - Arbitrary File Upload", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-14894.yaml" @@ -43061,7 +43061,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-269", "epss": 0.24229, -"epss_pct": 0.97691, +"epss_pct": 0.97694, "name": "WordPress User Registration & Membership <= 5.1.2 - Unauthenticated Privilege Escalation", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-1492.yaml" @@ -43078,7 +43078,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.00686, -"epss_pct": 0.50179, +"epss_pct": 0.50229, "name": "WP Hotel Booking <= 2.3.2 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-15094.yaml" @@ -43111,7 +43111,7 @@ "cvss": 7.5, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "epss": 0.01722, -"epss_pct": 0.75889, +"epss_pct": 0.75915, "name": "WP Responsive Images <= 1.0 - Arbitrary File Read", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-1557.yaml" @@ -43121,7 +43121,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-78", "epss": 0.13545, -"epss_pct": 0.96182, +"epss_pct": 0.96186, "name": "WGDashboard <= 4.3.2 - Authenticated OS Command Injection /etc/passwd Read", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-15733.yaml" @@ -43131,7 +43131,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-89", "epss": 0.01727, -"epss_pct": 0.7595, +"epss_pct": 0.75976, "name": "wpForo Forum <= 2.4.14 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-1581.yaml" @@ -43141,7 +43141,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-704", "epss": 0.03911, -"epss_pct": 0.89555, +"epss_pct": 0.89568, "name": "User Profile Builder 3.16.4 - Unauthenticated Authentication Bypass", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-15826.yaml" @@ -43171,7 +43171,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N", "cwe": "CWE-918", "epss": 0.00437, -"epss_pct": 0.36552, +"epss_pct": 0.36602, "name": "Newsletters < 4.16 - Unauthenticated SSRF via SNS Bounce Handler", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-16268.yaml" @@ -43196,7 +43196,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.00804, -"epss_pct": 0.54224, +"epss_pct": 0.54265, "name": "WordPress TranslatePress < 3.2.6 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-17505.yaml" @@ -43206,7 +43206,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.00817, -"epss_pct": 0.54628, +"epss_pct": 0.5467, "name": "Seraphinite Accelerator <= 2.29.18 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-17532.yaml" @@ -43216,7 +43216,7 @@ "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:N/SC:N/SI:H/SA:N", "cwe": "CWE-863", "epss": 0.00613, -"epss_pct": 0.46963, +"epss_pct": 0.47014, "name": "Sonatype Nexus Repository < 3.95.0 - Privilege Escalation via Repository Format Mismatch", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-17594.yaml" @@ -43226,7 +43226,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-862", "epss": 0.08095, -"epss_pct": 0.9441, +"epss_pct": 0.94417, "name": "Quick Playground <= 1.3.1 - Missing Authorization to Unauthenticated Arbitrary File Upload", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-1830.yaml" @@ -43253,7 +43253,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "cwe": "CWE-862", "epss": 0.00682, -"epss_pct": 0.49991, +"epss_pct": 0.50041, "name": "LeadConnector < 3.0.22 - Unauthenticated Arbitrary Data Write", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-1890.yaml" @@ -43263,7 +43263,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "cwe": "CWE-640", "epss": 0.03239, -"epss_pct": 0.87411, +"epss_pct": 0.87426, "name": "Keycloak < 26.7.2 - Unauthenticated Account Takeover via Reset-Credentials Bypass", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-18963.yaml" @@ -43272,8 +43272,8 @@ "cvss": 9.8, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-74", -"epss": 0.00352, -"epss_pct": 0.27998, +"epss": 0.01498, +"epss_pct": 0.72465, "name": "Tutor LMS < 4.0.6 - Unauthenticated Arbitrary PHP Function Invocation", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-19092.yaml" @@ -43283,7 +43283,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H", "cwe": "CWE-94", "epss": 0.06001, -"epss_pct": 0.92812, +"epss_pct": 0.92821, "name": "GitLab CE/EE - GraphQL @gl_introduced Arbitrary Method Invocation", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-19478.yaml" @@ -43293,7 +43293,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-863", "epss": 0.02791, -"epss_pct": 0.85421, +"epss_pct": 0.85437, "name": "Pods <= 3.3.9 - Unauthenticated Privilege Escalation via pods_admin AJAX Router", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-19598.yaml" @@ -43303,7 +43303,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-200", "epss": 0.00829, -"epss_pct": 0.5501, +"epss_pct": 0.5505, "name": "WPBookit <= 1.0.8 - Unauthenticated Customer Information Disclosure", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-1980.yaml" @@ -43313,7 +43313,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-77", "epss": 0.02243, -"epss_pct": 0.81637, +"epss_pct": 0.8166, "name": "LB-LINK Routers - Unauthenticated Command Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-19900.yaml" @@ -43323,7 +43323,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "cwe": "CWE-288", "epss": 0.35946, -"epss_pct": 0.98357, +"epss_pct": 0.98359, "name": "Cisco Secure Firewall Management Center - Authentication Bypass", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-20079.yaml" @@ -43343,7 +43343,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-200", "epss": 0.01379, -"epss_pct": 0.70181, +"epss_pct": 0.70211, "name": "Mail Mint < 1.19.5 - Unauthenticated Email Disclosure", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-2025.yaml" @@ -43358,7 +43358,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-290", "epss": 0.02755, -"epss_pct": 0.85206, +"epss_pct": 0.85222, "name": "Gitea Docker Image <= 1.26.2 - Reverse Proxy Header Authentication Bypass", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-20896.yaml" @@ -43368,7 +43368,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "cwe": "CWE-306", "epss": 0.3371, -"epss_pct": 0.98267, +"epss_pct": 0.9827, "name": "Langflow - Broken Access Control", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-21445.yaml" @@ -43377,7 +43377,7 @@ "cvss": 5.3, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "epss": 0.00779, -"epss_pct": 0.53412, +"epss_pct": 0.53457, "name": "AnythingLLM - Username Enumeration via Password Recovery", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-21484.yaml" @@ -43397,7 +43397,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N", "cwe": "CWE-20", "epss": 0.78197, -"epss_pct": 0.99543, +"epss_pct": 0.99545, "name": "n8n Webhooks - Remote Code Execution", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-21858.yaml" @@ -43407,7 +43407,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N", "cwe": "CWE-918", "epss": 0.00772, -"epss_pct": 0.53157, +"epss_pct": 0.53198, "name": "Mailpit < 1.28.3 - Server-Side Request Forgery", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-21859.yaml" @@ -43417,7 +43417,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "cwe": "CWE-434", "epss": 0.05373, -"epss_pct": 0.9209, +"epss_pct": 0.921, "name": "n8n >= 0.123.0 and < 1.121.3 - Remote Code Execution", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-21877.yaml" @@ -43427,7 +43427,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L", "cwe": "CWE-287", "epss": 0.02217, -"epss_pct": 0.81422, +"epss_pct": 0.81444, "name": "ZimaOS - Authentication Bypass", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-21891.yaml" @@ -43445,7 +43445,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "cwe": "CWE-22", "epss": 0.28116, -"epss_pct": 0.97967, +"epss_pct": 0.9797, "name": "UniFi Network Application - Path Traversal", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-22557.yaml" @@ -43455,7 +43455,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-284", "epss": 0.0239, -"epss_pct": 0.82793, +"epss_pct": 0.82815, "name": "Easy Appointments <= 3.12.21 - Information Disclosure", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-2262.yaml" @@ -43465,7 +43465,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "cwe": "CWE-862", "epss": 0.02609, -"epss_pct": 0.84316, +"epss_pct": 0.84333, "name": "Windmill < 1.603.3 - Operator Authorization Bypass", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-22683.yaml" @@ -43475,7 +43475,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L", "cwe": "CWE-22", "epss": 0.0122, -"epss_pct": 0.66575, +"epss_pct": 0.66609, "name": "Spring Cloud Config Server - Path Traversal", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-22739.yaml" @@ -43485,7 +43485,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-209", "epss": 0.03723, -"epss_pct": 0.8902, +"epss_pct": 0.89034, "name": "vLLM 0.8.3 - 0.14.0 - Information Disclosure", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-22778.yaml" @@ -43495,7 +43495,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-306", "epss": 0.17326, -"epss_pct": 0.96889, +"epss_pct": 0.96893, "name": "OpenCode < 1.0.216 - Unauthenticated Remote Code Execution", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-22812.yaml" @@ -43505,7 +43505,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.01523, -"epss_pct": 0.72849, +"epss_pct": 0.72879, "name": "Blinko < 1.8.4 - Path Traversal", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-23482.yaml" @@ -43515,7 +43515,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-22", "epss": 0.00771, -"epss_pct": 0.53155, +"epss_pct": 0.53195, "name": "Blinko <= 1.8.3 - Path Traversal via /plugins", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-23483.yaml" @@ -43525,7 +43525,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-200", "epss": 0.00711, -"epss_pct": 0.51101, +"epss_pct": 0.51149, "name": "Blinko <= 1.8.3 - User Information Leak", "severity": "low", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-23486.yaml" @@ -43535,7 +43535,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.04108, -"epss_pct": 0.90051, +"epss_pct": 0.90063, "name": "InvoicePlane <= 1.6.3 - Arbitrary File Read", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-23491.yaml" @@ -43545,7 +43545,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.01912, -"epss_pct": 0.78368, +"epss_pct": 0.78393, "name": "Feast Feature Server <=0.58.0 - Arbitrary File Read", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-23536.yaml" @@ -43560,7 +43560,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.16017, -"epss_pct": 0.96677, +"epss_pct": 0.9668, "name": "Windmill < 1.603.3 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-23696.yaml" @@ -43585,7 +43585,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "cwe": "CWE-93", "epss": 0.01441, -"epss_pct": 0.71354, +"epss_pct": 0.71383, "name": "Mailpit < 1.28.2 - SMTP CRLF Injection", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2026/CVE-2026-23829.yaml" @@ -43595,7 +43595,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-88", "epss": 0.97878, -"epss_pct": 0.99903, +"epss_pct": 0.99904, "name": "GNU Inetutils telnetd - Authentication Bypass", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/code/cves/2026/CVE-2026-24061.yaml" @@ -43605,7 +43605,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.00503, -"epss_pct": 0.4101, +"epss_pct": 0.41062, "name": "XWiki Platform Distribution Flavor Main - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-24128.yaml" @@ -43614,7 +43614,7 @@ "cvss": 7.5, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "epss": 0.02331, -"epss_pct": 0.82353, +"epss_pct": 0.82375, "name": "Ally \u2013 Web Accessibility & Usability <= 4.0.3 - SQL Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-2413.yaml" @@ -43624,7 +43624,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-89", "epss": 0.01392, -"epss_pct": 0.70432, +"epss_pct": 0.70463, "name": "Geo Mashup <= 1.13.17 - SQL Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-2416.yaml" @@ -43634,7 +43634,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-288", "epss": 0.02552, -"epss_pct": 0.83933, +"epss_pct": 0.83952, "name": "NVIDIA Triton Inference Server <= 26.02 - Authentication Bypass", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-24207.yaml" @@ -43644,7 +43644,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-306", "epss": 0.87693, -"epss_pct": 0.99747, +"epss_pct": 0.99748, "name": "SmarterMail - Remote Code Execution", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-24423.yaml" @@ -43674,7 +43674,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "cwe": "CWE-78", "epss": 0.18536, -"epss_pct": 0.97045, +"epss_pct": 0.97048, "name": "Group-Office < 26.0.5 - Remote Code Execution", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-25512.yaml" @@ -43684,7 +43684,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-22", "epss": 0.0092, -"epss_pct": 0.57819, +"epss_pct": 0.57865, "name": "changedetection.io <= 0.52.9 - Unauthenticated Path Traversal", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-25527.yaml" @@ -43694,7 +43694,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N", "cwe": "CWE-918", "epss": 0.01769, -"epss_pct": 0.76551, +"epss_pct": 0.76579, "name": "Astro SSR - Server-Side Request Forgery", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-25545.yaml" @@ -43704,7 +43704,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-287", "epss": 0.01824, -"epss_pct": 0.77275, +"epss_pct": 0.77301, "name": "OpenBullet2 <= 0.3.2 - Authentication Bypass", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-25555.yaml" @@ -43714,7 +43714,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.00383, -"epss_pct": 0.31329, +"epss_pct": 0.31379, "name": "Blesta <= 5.13.1 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-25616.yaml" @@ -43724,7 +43724,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "cwe": "CWE-20", "epss": 0.01586, -"epss_pct": 0.73864, +"epss_pct": 0.73894, "name": "Adminer 4.6.2 - 5.4.1 Unauthenticated Persistent DoS", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-25892.yaml" @@ -43734,7 +43734,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-22", "epss": 0.11195, -"epss_pct": 0.95641, +"epss_pct": 0.95647, "name": "FUXA <= 1.2.9 - Unauthenticated Path Traversal to Arbitrary File Write", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-25895.yaml" @@ -43744,7 +43744,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.02982, -"epss_pct": 0.86347, +"epss_pct": 0.86363, "name": "MLflow <= 3.9.0 - Arbitrary File Read", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-2614.yaml" @@ -43754,14 +43754,14 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-306", "epss": 0.36912, -"epss_pct": 0.98401, +"epss_pct": 0.98403, "name": "Milvus - Unauthenticated Metrics API Access", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-26190.yaml" }, "CVE-2026-26217": { "epss": 0.01914, -"epss_pct": 0.78394, +"epss_pct": 0.7842, "name": "Crawl4AI < 0.8.0 - Local File Inclusion", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-26217.yaml" @@ -43771,7 +43771,7 @@ "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "cwe": "CWE-1392", "epss": 0.02663, -"epss_pct": 0.84654, +"epss_pct": 0.84672, "name": "Tattile Camera < 1.181.5 - Default Login", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-26341.yaml" @@ -43781,7 +43781,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L", "cwe": "CWE-306", "epss": 0.20783, -"epss_pct": 0.97367, +"epss_pct": 0.9737, "name": "MLflow < 3.10.0 - Authentication Bypass on FastAPI Routes", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-2652.yaml" @@ -43791,7 +43791,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L", "cwe": "CWE-89", "epss": 0.70208, -"epss_pct": 0.9933, +"epss_pct": 0.99331, "name": "Ghost CMS Content API - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-26980.yaml" @@ -43801,7 +43801,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-284", "epss": 0.59506, -"epss_pct": 0.99055, +"epss_pct": 0.99057, "name": "Progress ShareFile Storage Zones Controller - Authentication Bypass", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-2699.yaml" @@ -43811,7 +43811,7 @@ "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "cwe": "CWE-94", "epss": 0.06996, -"epss_pct": 0.93696, +"epss_pct": 0.93703, "name": "MajorDoMo - Unauthenticated RCE", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-27174.yaml" @@ -43821,7 +43821,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.00449, -"epss_pct": 0.37463, +"epss_pct": 0.37515, "name": "MajorDoMo - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-27176.yaml" @@ -43831,7 +43831,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-22", "epss": 0.11113, -"epss_pct": 0.95622, +"epss_pct": 0.95628, "name": "MindsDB - Remote Code Execution", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-27483.yaml" @@ -43841,7 +43841,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-266", "epss": 0.01737, -"epss_pct": 0.76098, +"epss_pct": 0.76125, "name": "WooCommerce Wholesale Lead Capture <= 2.0.3.1 - Unauthenticated Privilege Escalation", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-27542.yaml" @@ -43851,7 +43851,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.00445, -"epss_pct": 0.37174, +"epss_pct": 0.37226, "name": "Changedetection.io RSS Single Watch - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-27645.yaml" @@ -43861,7 +43861,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-94", "epss": 0.34629, -"epss_pct": 0.98304, +"epss_pct": 0.98306, "name": "OpenCATS - Command Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-27760.yaml" @@ -43871,7 +43871,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-862", "epss": 0.01393, -"epss_pct": 0.70455, +"epss_pct": 0.70486, "name": "Gitea Container Registry - Unauthorized Private Image Access", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-27771.yaml" @@ -43881,7 +43881,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-200", "epss": 0.01154, -"epss_pct": 0.6477, +"epss_pct": 0.64808, "name": "Homarr < 1.54.0 - Information Disclosure", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-27796.yaml" @@ -43891,7 +43891,7 @@ "cvss_vector": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N", "cwe": "CWE-918", "epss": 0.13632, -"epss_pct": 0.96204, +"epss_pct": 0.96209, "name": "mcp-atlassian < 0.17.0 - Server-Side Request Forgery", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-27826.yaml" @@ -43901,7 +43901,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-862", "epss": 0.01641, -"epss_pct": 0.74717, +"epss_pct": 0.74748, "name": "Piwigo < 16.3.0 - Unauthenticated Information Disclosure via History API", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-27833.yaml" @@ -43911,7 +43911,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-306", "epss": 0.22162, -"epss_pct": 0.97501, +"epss_pct": 0.97505, "name": "Nginx UI < 2.3.3 - Information Disclosure", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-27944.yaml" @@ -43921,7 +43921,7 @@ "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "cwe": "CWE-502", "epss": 0.05416, -"epss_pct": 0.92138, +"epss_pct": 0.92148, "name": "Qwik - Unauthenticated RCE via server$ Deserialization", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-27971.yaml" @@ -43931,7 +43931,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-204", "epss": 0.00635, -"epss_pct": 0.48019, +"epss_pct": 0.48067, "name": "Dify User Enumeration via Observable Response Discrepancy", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-28288.yaml" @@ -43941,7 +43941,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-204", "epss": 0.00601, -"epss_pct": 0.4639, +"epss_pct": 0.46442, "name": "NocoDB - User Enumeration", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-28358.yaml" @@ -43951,7 +43951,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "cwe": "CWE-78", "epss": 0.03315, -"epss_pct": 0.87712, +"epss_pct": 0.87726, "name": "WeGIA <= 3.6.4 - Remote Code Execution", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-28409.yaml" @@ -43961,7 +43961,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-36", "epss": 0.03098, -"epss_pct": 0.86824, +"epss_pct": 0.86841, "name": "Gradio - Absolute Path Traversal", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-28414.yaml" @@ -43976,7 +43976,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-94", "epss": 0.3949, -"epss_pct": 0.98506, +"epss_pct": 0.98508, "name": "MetInfo CMS <= 8.1 - Remote Code Execution", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-29014.yaml" @@ -43986,7 +43986,7 @@ "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H", "cwe": "CWE-22", "epss": 0.02945, -"epss_pct": 0.86183, +"epss_pct": 0.862, "name": "Windmill/Nextcloud Flow < 1.603.3 - Unauthenticated Path Traversal", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-29059.yaml" @@ -43996,7 +43996,7 @@ "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-200", "epss": 0.01025, -"epss_pct": 0.6117, +"epss_pct": 0.6121, "name": "TinaCMS - Path Traversal", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-29066.yaml" @@ -44006,7 +44006,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.00625, -"epss_pct": 0.47575, +"epss_pct": 0.47625, "name": "SiYuan Note - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-29183.yaml" @@ -44016,7 +44016,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.00473, -"epss_pct": 0.39041, +"epss_pct": 0.39091, "name": "Gutenverse Plugin <= 3.4.6 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-3001.yaml" @@ -44026,7 +44026,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-89", "epss": 0.01382, -"epss_pct": 0.70239, +"epss_pct": 0.70269, "name": "WordPress Newsletters <= 4.13 - Unauthenticated SQL Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-3018.yaml" @@ -44039,7 +44039,7 @@ "CVE-2026-30623": { "cwe": "CWE-77", "epss": 0.04997, -"epss_pct": 0.91623, +"epss_pct": 0.91634, "name": "LiteLLM 1.18.10 - Command Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-30623.yaml" @@ -44066,7 +44066,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-200", "epss": 0.01657, -"epss_pct": 0.74936, +"epss_pct": 0.74966, "name": "Glances - Information Disclosure", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-30928.yaml" @@ -44076,7 +44076,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N", "cwe": "CWE-22", "epss": 0.01139, -"epss_pct": 0.64352, +"epss_pct": 0.64391, "name": "OneUptime < 10.0.21 - Path Traversal", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-30958.yaml" @@ -44086,7 +44086,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N", "cwe": "CWE-863", "epss": 0.01329, -"epss_pct": 0.69057, +"epss_pct": 0.69093, "name": "Parse Server < 8.6.21 / 9.x < 9.5.2 - Session Token Exfiltration", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-30965.yaml" @@ -44106,7 +44106,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N", "cwe": "CWE-79", "epss": 0.00445, -"epss_pct": 0.37168, +"epss_pct": 0.3722, "name": "SiYuan <= v3.5.9 - SVG Animate Element XSS", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-31807.yaml" @@ -44116,7 +44116,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N", "cwe": "CWE-79", "epss": 0.00505, -"epss_pct": 0.41161, +"epss_pct": 0.41214, "name": "SiYuan <= v3.5.9 - Cross Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-31809.yaml" @@ -44126,7 +44126,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "cwe": "CWE-74", "epss": 0.15339, -"epss_pct": 0.9653, +"epss_pct": 0.96534, "name": "Budibase - Authentication Bypass", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-31816.yaml" @@ -44136,7 +44136,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.01965, -"epss_pct": 0.78955, +"epss_pct": 0.78979, "name": "Tautulli <= 2.16.1 - Path Traversal", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-31831.yaml" @@ -44146,7 +44146,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-862", "epss": 0.00905, -"epss_pct": 0.57353, +"epss_pct": 0.57398, "name": "Uptime-Kuma < v1.23.0 - Improper Access Control", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-32230.yaml" @@ -44156,7 +44156,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N", "cwe": "CWE-918", "epss": 0.20776, -"epss_pct": 0.97366, +"epss_pct": 0.9737, "name": "Kan <= 0.5.4 - Server-Side Request Forgery", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-32255.yaml" @@ -44180,7 +44180,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-434", "epss": 0.02374, -"epss_pct": 0.82678, +"epss_pct": 0.82699, "name": "Elementor Pro <=4.2.1 - Unauthenticated Arbitrary File Upload via Form Handler", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-32475.yaml" @@ -44197,7 +44197,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "cwe": "CWE-862", "epss": 0.007, -"epss_pct": 0.50672, +"epss_pct": 0.50718, "name": "Webnus Inc. Modern Events Calendar - Broken Access Control", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-32583.yaml" @@ -44207,7 +44207,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-200", "epss": 0.0155, -"epss_pct": 0.73326, +"epss_pct": 0.73357, "name": "Glances - Information Disclosure", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-32596.yaml" @@ -44217,7 +44217,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-502", "epss": 0.03469, -"epss_pct": 0.88243, +"epss_pct": 0.88257, "name": "Everest Forms WordPress Plugin <= 3.4.3 - PHP Object Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-3296.yaml" @@ -44227,7 +44227,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-94", "epss": 0.39159, -"epss_pct": 0.9849, +"epss_pct": 0.98492, "name": "Everest Forms Pro <= 1.9.12 - Unauthenticated RCE via Calculation Formula Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-3300.yaml" @@ -44247,7 +44247,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-306", "epss": 0.36299, -"epss_pct": 0.98369, +"epss_pct": 0.98371, "name": "Nginx UI - Broken Access Control", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-33032.yaml" @@ -44257,7 +44257,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-94", "epss": 0.05289, -"epss_pct": 0.92003, +"epss_pct": 0.92014, "name": "Mesop AI Sandbox <= 1.2.2 - Remote Code Execution", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-33057.yaml" @@ -44267,7 +44267,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N", "cwe": "CWE-89", "epss": 0.01866, -"epss_pct": 0.77815, +"epss_pct": 0.77841, "name": "XStore Theme < 9.7.3 - SQL Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-3326.yaml" @@ -44277,7 +44277,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "cwe": "CWE-306", "epss": 0.21629, -"epss_pct": 0.97453, +"epss_pct": 0.97456, "name": "LoLLMs WEBUI - Server-Side Request Forgery", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-33340.yaml" @@ -44287,7 +44287,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "cwe": "CWE-862", "epss": 0.01142, -"epss_pct": 0.64427, +"epss_pct": 0.64464, "name": "Canto <= 3.1.1 - Missing Authorization to Unauthenticated File Upload", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-3335.yaml" @@ -44297,7 +44297,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-502", "epss": 0.10005, -"epss_pct": 0.95272, +"epss_pct": 0.95279, "name": "OpenAM <= 16.0.5 - Pre-Auth RCE via jato.clientSession Deserialization", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-33439.yaml" @@ -44307,7 +44307,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "cwe": "CWE-915", "epss": 0.06157, -"epss_pct": 0.92968, +"epss_pct": 0.92977, "name": "Apache Camel camel-coap - Remote Code Execution", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2026/CVE-2026-33453.yaml" @@ -44317,7 +44317,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.03256, -"epss_pct": 0.87483, +"epss_pct": 0.87498, "name": "SiYuan <= v3.6.1 - Path Traversal", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-33476.yaml" @@ -44332,7 +44332,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.19584, -"epss_pct": 0.97192, +"epss_pct": 0.97195, "name": "Langflow < 1.7.0 - Path Traversal", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-33497.yaml" @@ -44342,7 +44342,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-918", "epss": 0.01978, -"epss_pct": 0.79097, +"epss_pct": 0.79121, "name": "EspoCRM <= 9.3.3 - Server-Side Request Forgery", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-33534.yaml" @@ -44362,7 +44362,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "cwe": "CWE-601", "epss": 0.00473, -"epss_pct": 0.39116, +"epss_pct": 0.39167, "name": "Mastodon - Open Redirect", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-33868.yaml" @@ -44372,7 +44372,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "cwe": "CWE-94", "epss": 0.0388, -"epss_pct": 0.89478, +"epss_pct": 0.89491, "name": "MaxSite CMS <=109.1 - Remote Code Execution", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-3395.yaml" @@ -44382,7 +44382,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-89", "epss": 0.01473, -"epss_pct": 0.7199, +"epss_pct": 0.7202, "name": "WCAPF WooCommerce Ajax Product Filter - SQL Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-3396.yaml" @@ -44392,7 +44392,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-98", "epss": 0.01464, -"epss_pct": 0.71814, +"epss_pct": 0.71845, "name": "Dolibarr <=22.0.4 - Local File Inclusion", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-34036.yaml" @@ -44422,7 +44422,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-306", "epss": 0.0311, -"epss_pct": 0.86869, +"epss_pct": 0.86884, "name": "Xerte Online Toolkits <= 3.15 - Remote Code Execution", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-34413.yaml" @@ -44432,7 +44432,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-863", "epss": 0.01227, -"epss_pct": 0.66766, +"epss_pct": 0.66799, "name": "SiYuan <= v3.6.1 - Bookmark Data Disclosure", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-34453.yaml" @@ -44452,7 +44452,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.00469, -"epss_pct": 0.38786, +"epss_pct": 0.38835, "name": "SiYuan Note - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-34605.yaml" @@ -44462,7 +44462,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N", "cwe": "CWE-601", "epss": 0.00401, -"epss_pct": 0.33263, +"epss_pct": 0.33312, "name": "Hoppscotch <= 2026.2.1 - Open Redirect", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-34847.yaml" @@ -44472,7 +44472,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L", "cwe": "CWE-89", "epss": 0.01668, -"epss_pct": 0.7511, +"epss_pct": 0.75138, "name": "WordPress Media Library Assistant <= 3.34 - SQL Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-34885.yaml" @@ -44501,7 +44501,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "cwe": "CWE-862", "epss": 0.02036, -"epss_pct": 0.79732, +"epss_pct": 0.79753, "name": "Dgraph <=v25.3.0 - Admin Mutation Missing Authorization", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-34976.yaml" @@ -44510,8 +44510,8 @@ "cvss": 8.8, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-863", -"epss": 0.26409, -"epss_pct": 0.9786, +"epss": 0.25068, +"epss_pct": 0.97768, "name": "LiteLLM - Arbitrary File Read", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-35029.yaml" @@ -44521,7 +44521,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N", "cwe": "CWE-918", "epss": 0.00618, -"epss_pct": 0.47196, +"epss_pct": 0.47247, "name": "Ech0 < 4.2.8 - Server-Side Request Forgery", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-35037.yaml" @@ -44549,7 +44549,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N", "cwe": "CWE-20", "epss": 0.12943, -"epss_pct": 0.96035, +"epss_pct": 0.96039, "name": "Planyo Online Reservation System <= 3.0 - Arbitrary File Read", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-3576.yaml" @@ -44559,7 +44559,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-94", "epss": 0.07239, -"epss_pct": 0.93885, +"epss_pct": 0.93891, "name": "WordPress Kali Forms <= 2.4.9 - Remote Code Execution", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-3584.yaml" @@ -44569,7 +44569,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-22", "epss": 0.05982, -"epss_pct": 0.9279, +"epss_pct": 0.928, "name": "dash-uploader 0.1.0 - 0.7.0a2 - Unauthenticated Arbitrary File Write via Path Traversal", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-38360.yaml" @@ -44579,7 +44579,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "cwe": "CWE-400", "epss": 0.02643, -"epss_pct": 0.84528, +"epss_pct": 0.84546, "name": "dash-uploader 0.1.0 - 0.7.0a2 - Denial-of-Service via flowTotalChunks", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-38361.yaml" @@ -44589,7 +44589,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-434", "epss": 0.27701, -"epss_pct": 0.97944, +"epss_pct": 0.97946, "name": "Breeze <= 2.4.4 - Arbitrary File Upload", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-3844.yaml" @@ -44599,7 +44599,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-434", "epss": 0.2506, -"epss_pct": 0.97763, +"epss_pct": 0.97767, "name": "Pix for WooCommerce <= 1.5.0 - Unauthenticated Arbitrary File Upload", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-3891.yaml" @@ -44616,7 +44616,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "cwe": "CWE-284", "epss": 0.01351, -"epss_pct": 0.69579, +"epss_pct": 0.69612, "name": "ChurchCRM - API Authentication Bypass via URL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-39339.yaml" @@ -44626,7 +44626,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.01279, -"epss_pct": 0.6799, +"epss_pct": 0.68026, "name": "Frappe Framework < 16.15.0 - Arbitrary File Read via render_include Path Traversal", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-39352.yaml" @@ -44635,7 +44635,7 @@ "cvss": 8.2, "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N", "epss": 0.03396, -"epss_pct": 0.87992, +"epss_pct": 0.88005, "name": "Vite Dev Server - Arbitrary File Read", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2026/CVE-2026-39363.yaml" @@ -44645,7 +44645,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.02095, -"epss_pct": 0.80359, +"epss_pct": 0.80382, "name": "Vite Dev Server - Directory Traversal", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-39364.yaml" @@ -44655,7 +44655,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-22", "epss": 0.00914, -"epss_pct": 0.57658, +"epss_pct": 0.57705, "name": "Vite Dev Server - Path Traversal in Optimized Deps .map Handling", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-39365.yaml" @@ -44685,7 +44685,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.00549, -"epss_pct": 0.4379, +"epss_pct": 0.43835, "name": "XWiki - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-40105.yaml" @@ -44695,7 +44695,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-200", "epss": 0.00758, -"epss_pct": 0.52706, +"epss_pct": 0.52753, "name": "PraisonAI AgentOS - Information Disclosure", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-40151.yaml" @@ -44705,7 +44705,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-200", "epss": 0.39975, -"epss_pct": 0.98523, +"epss_pct": 0.98526, "name": "Gravity SMTP WordPress Plugin - Sensitive Information Exposure", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-4020.yaml" @@ -44715,7 +44715,7 @@ "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "cwe": "CWE-94", "epss": 0.15056, -"epss_pct": 0.96481, +"epss_pct": 0.96484, "name": "LiteLLM < 1.25.0 - Remote Code Execution", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-40217.yaml" @@ -44725,7 +44725,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N", "cwe": "CWE-918", "epss": 0.00621, -"epss_pct": 0.47355, +"epss_pct": 0.47404, "name": "Arcane <= 1.17.2 - Server-Side Request Forgery", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-40242.yaml" @@ -44735,7 +44735,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N", "cwe": "CWE-918", "epss": 0.01559, -"epss_pct": 0.73467, +"epss_pct": 0.73498, "name": "Gotenberg <= 8.30.1 - Server Side Request Forgery", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-40280.yaml" @@ -44743,7 +44743,7 @@ "CVE-2026-40308": { "cwe": "CWE-639", "epss": 0.00932, -"epss_pct": 0.58234, +"epss_pct": 0.58279, "name": "My Calendar WordPress Plugin - Information Disclosure", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-40308.yaml" @@ -44752,7 +44752,7 @@ "cvss": 8.8, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "epss": 0.04783, -"epss_pct": 0.91298, +"epss_pct": 0.91309, "name": "Apache ActiveMQ - Remote Code Execution via HTTP Discovery Transport Bypass", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-40466.yaml" @@ -44762,7 +44762,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-89", "epss": 0.01422, -"epss_pct": 0.71004, +"epss_pct": 0.71032, "name": "Geo Mashup <= 1.13.18 - SQL Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-4060.yaml" @@ -44771,7 +44771,7 @@ "cvss": 3.1, "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L", "epss": 0.00805, -"epss_pct": 0.54269, +"epss_pct": 0.54309, "name": "Mailcow < 2026-03b - Href Link Injection", "severity": "low", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-40878.yaml" @@ -44781,7 +44781,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H", "cwe": "CWE-89", "epss": 0.01762, -"epss_pct": 0.76448, +"epss_pct": 0.76475, "name": "Vendure Core - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-40887.yaml" @@ -44791,7 +44791,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "cwe": "CWE-20", "epss": 0.01512, -"epss_pct": 0.72687, +"epss_pct": 0.72718, "name": "Apache Gravitino < 1.2.1 - Unauthenticated Remote Code Execution", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-41042.yaml" @@ -44800,7 +44800,7 @@ "cvss": 7.5, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "epss": 0.00742, -"epss_pct": 0.5219, +"epss_pct": 0.52237, "name": "HT Mega < 3.0.7 - Sensitive Information Disclosure", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-4106.yaml" @@ -44809,7 +44809,7 @@ "cvss": 9.2, "cwe": "CWE-306", "epss": 0.32715, -"epss_pct": 0.98223, +"epss_pct": 0.98225, "name": "Rclone RC - Broken Access Control", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-41176.yaml" @@ -44819,7 +44819,7 @@ "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "cwe": "CWE-78", "epss": 0.08585, -"epss_pct": 0.94688, +"epss_pct": 0.94695, "name": "RClone RC - Command Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-41179.yaml" @@ -44829,7 +44829,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L", "cwe": "CWE-345", "epss": 0.0085, -"epss_pct": 0.55661, +"epss_pct": 0.55703, "name": "New API < v0.12.10 - Stripe Webhook Bypass", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-41432.yaml" @@ -44839,7 +44839,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-200", "epss": 0.03082, -"epss_pct": 0.86764, +"epss_pct": 0.8678, "name": "Dgraph <= 25.3.2 - Admin Token Disclosure", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-41492.yaml" @@ -44849,7 +44849,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.01875, -"epss_pct": 0.77926, +"epss_pct": 0.77952, "name": "NocoBase - SQL Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-41640.yaml" @@ -44859,7 +44859,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.01833, -"epss_pct": 0.7739, +"epss_pct": 0.77416, "name": "NocoBase - SQL Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-41641.yaml" @@ -44874,7 +44874,7 @@ "cvss_vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.01817, -"epss_pct": 0.77179, +"epss_pct": 0.77205, "name": "CKAN DataStore SQL Search - SQL Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-42031.yaml" @@ -44884,7 +44884,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.07389, -"epss_pct": 0.93984, +"epss_pct": 0.93991, "name": "ProFTPD mod_sql - Preauth User Backdoor", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2026/CVE-2026-42167.yaml" @@ -44914,7 +44914,7 @@ "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N", "cwe": "CWE-918", "epss": 0.01623, -"epss_pct": 0.7443, +"epss_pct": 0.7446, "name": "MagicMirror <= 2.35.0 - Server-Side Request Forgery", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-42281.yaml" @@ -44924,7 +44924,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-306", "epss": 0.01283, -"epss_pct": 0.68075, +"epss_pct": 0.6811, "name": "Arcane < 1.18.0 - Unauthenticated Template and Env Disclosure", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-42461.yaml" @@ -44933,7 +44933,7 @@ "cvss": 9.4, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H", "epss": 0.01173, -"epss_pct": 0.65313, +"epss_pct": 0.65349, "name": "phpVMS < 7.0.6 - Legacy Importer Authorization Bypass", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-42569.yaml" @@ -44943,7 +44943,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-94", "epss": 0.41475, -"epss_pct": 0.98575, +"epss_pct": 0.98577, "name": "WordPress Contact Form by Supsystic - Server-Side Template Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-4257.yaml" @@ -44953,7 +44953,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-78", "epss": 0.03013, -"epss_pct": 0.86479, +"epss_pct": 0.86493, "name": "Gotenberg - Command Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-42589.yaml" @@ -44963,7 +44963,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-918", "epss": 0.01239, -"epss_pct": 0.67024, +"epss_pct": 0.67057, "name": "Gotenberg < 8.31.0 - Server-Side Request Forgery", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-42596.yaml" @@ -44973,7 +44973,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L", "cwe": "CWE-89", "epss": 0.01323, -"epss_pct": 0.68926, +"epss_pct": 0.68962, "name": "JoomSport <= 5.7.7 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-42647.yaml" @@ -44983,7 +44983,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-306", "epss": 0.02747, -"epss_pct": 0.85158, +"epss_pct": 0.85175, "name": "Arelle < 2.39.10 - Remote Code Execution", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-42796.yaml" @@ -44993,7 +44993,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-200", "epss": 0.00552, -"epss_pct": 0.43957, +"epss_pct": 0.44002, "name": "FacturaScripts - Unauthenticated phpinfo Disclosure", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-42878.yaml" @@ -45003,7 +45003,7 @@ "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N", "cwe": "CWE-22", "epss": 0.0177, -"epss_pct": 0.76569, +"epss_pct": 0.76596, "name": "Kirby CMS 5.3.0-5.4.0 - Path Traversal", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-44177.yaml" @@ -45013,7 +45013,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L", "cwe": "CWE-94", "epss": 0.0586, -"epss_pct": 0.92673, +"epss_pct": 0.92682, "name": "Scramble Laravel - Remote Code Execution", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-44262.yaml" @@ -45023,7 +45023,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "cwe": "CWE-306", "epss": 0.28571, -"epss_pct": 0.97994, +"epss_pct": 0.97996, "name": "PraisonAI - Authentication Bypass", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-44338.yaml" @@ -45033,7 +45033,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "cwe": "CWE-89", "epss": 0.00666, -"epss_pct": 0.49333, +"epss_pct": 0.49384, "name": "MISP < 2.5.37 - SQL Injection", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-44381.yaml" @@ -45043,7 +45043,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "cwe": "CWE-287", "epss": 0.01461, -"epss_pct": 0.71742, +"epss_pct": 0.71772, "name": "Open WebUI 'LDAP Empty Password' - Authentication Bypass", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-44551.yaml" @@ -45053,7 +45053,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N", "cwe": "CWE-918", "epss": 0.38872, -"epss_pct": 0.98481, +"epss_pct": 0.98483, "name": "Next.js WebSocket Upgrade Handler - SSRF", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2026/CVE-2026-44578.yaml" @@ -45063,7 +45063,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-78", "epss": 0.1393, -"epss_pct": 0.96272, +"epss_pct": 0.96277, "name": "Samba Printing Subsystem - Remote Code Execution", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2026/CVE-2026-4480.yaml" @@ -45073,7 +45073,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-798", "epss": 0.02892, -"epss_pct": 0.8594, +"epss_pct": 0.85955, "name": "Apache Solr 9.4.0-9.10.1 / 10.0.0 - Hardcoded Default Credentials", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-44825.yaml" @@ -45083,7 +45083,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N", "cwe": "CWE-918", "epss": 0.01491, -"epss_pct": 0.72299, +"epss_pct": 0.72329, "name": "Dozzle - Server Side Request Forgery", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-45298.yaml" @@ -45093,7 +45093,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-200", "epss": 0.0134, -"epss_pct": 0.69329, +"epss_pct": 0.69364, "name": "Automad < 2.0.0-beta.28 - Unauthenticated Admin Password Hash Disclosure", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-45332.yaml" @@ -45103,7 +45103,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-862", "epss": 0.0075, -"epss_pct": 0.52439, +"epss_pct": 0.52487, "name": "Open WebUI < 0.9.5 - Information Disclosure", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-45397.yaml" @@ -45113,7 +45113,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-88", "epss": 0.0161, -"epss_pct": 0.74227, +"epss_pct": 0.74257, "name": "Kopia Server 0.23.0 - Remote Code Execution", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-45695.yaml" @@ -45123,7 +45123,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-78", "epss": 0.1548, -"epss_pct": 0.96555, +"epss_pct": 0.96559, "name": "Cockpit Web Console < 360 - Remote Code Execution", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-4631.yaml" @@ -45133,7 +45133,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "cwe": "CWE-78", "epss": 0.03352, -"epss_pct": 0.87842, +"epss_pct": 0.87855, "name": "9Router <= 0.4.36 - Unauthenticated RCE", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-46339.yaml" @@ -45143,7 +45143,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.01709, -"epss_pct": 0.75719, +"epss_pct": 0.75745, "name": "phpMyFAQ <= 4.1.1 - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-46364.yaml" @@ -45153,7 +45153,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N", "cwe": "CWE-918", "epss": 0.00866, -"epss_pct": 0.56181, +"epss_pct": 0.56226, "name": "SillyTavern - Server-Side Request Forgery", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-46372.yaml" @@ -45173,7 +45173,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.01654, -"epss_pct": 0.74888, +"epss_pct": 0.74918, "name": "YesWiki < 4.6.4 - Unauthenticated SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-46670.yaml" @@ -45183,7 +45183,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-502", "epss": 0.02625, -"epss_pct": 0.84411, +"epss_pct": 0.84429, "name": "TYPO3 ceselector Extension - Insecure Deserialization", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-46725.yaml" @@ -45193,7 +45193,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-94", "epss": 0.03882, -"epss_pct": 0.89485, +"epss_pct": 0.89499, "name": "DbGate - Remote Code Execution via Anonymous JWT", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-47668.yaml" @@ -45203,7 +45203,7 @@ "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H", "cwe": "CWE-77", "epss": 0.01714, -"epss_pct": 0.75792, +"epss_pct": 0.75819, "name": "DbGate - Remote Code Execution via Dynamic Import Bypass", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-47670.yaml" @@ -45213,7 +45213,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-201", "epss": 0.01204, -"epss_pct": 0.66111, +"epss_pct": 0.66146, "name": "FUXA 1.3.0 - Unauthenticated ICS/SCADA Project Data Disclosure", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-47717.yaml" @@ -45237,7 +45237,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "cwe": "CWE-78", "epss": 0.05849, -"epss_pct": 0.92655, +"epss_pct": 0.92665, "name": "Pheditor 2.0.1-2.0.3 - OS Command Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-48030.yaml" @@ -45246,7 +45246,7 @@ "cvss": 9.3, "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P/U:Amber", "epss": 0.01818, -"epss_pct": 0.77195, +"epss_pct": 0.77221, "name": "Google ADK-Python - Unauthenticated Builder Endpoint", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-4810.yaml" @@ -45256,7 +45256,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "cwe": "CWE-22", "epss": 0.42388, -"epss_pct": 0.98602, +"epss_pct": 0.98605, "name": "Adobe ColdFusion - RDS Arbitrary File Write", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-48282.yaml" @@ -45271,7 +45271,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-287", "epss": 0.0386, -"epss_pct": 0.89431, +"epss_pct": 0.89444, "name": "phpBB < 3.3.17 - Authentication Bypass", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-48611.yaml" @@ -45281,7 +45281,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N", "cwe": "CWE-1289", "epss": 0.02099, -"epss_pct": 0.80395, +"epss_pct": 0.80418, "name": "Starlette - Improper Validation of Unsafe Equivalence in Input", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-48710.yaml" @@ -45301,7 +45301,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-284", "epss": 0.14824, -"epss_pct": 0.96442, +"epss_pct": 0.96446, "name": "Joomla SP Page Builder <= 6.6.1 - Unauthenticated Arbitrary File Upload RCE", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2026/CVE-2026-48908.yaml" @@ -45311,7 +45311,7 @@ "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H", "cwe": "CWE-502", "epss": 0.04941, -"epss_pct": 0.91539, +"epss_pct": 0.9155, "name": "Joomla SP LMS <= 4.1.3 - Remote Code Execution", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2026/CVE-2026-48909.yaml" @@ -45321,7 +45321,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-434", "epss": 0.19727, -"epss_pct": 0.97213, +"epss_pct": 0.97217, "name": "Joomla iCagenda < 3.9.10 - Unauthenticated Arbitrary File Upload RCE", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-48939.yaml" @@ -45331,7 +45331,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "cwe": "CWE-284", "epss": 0.00992, -"epss_pct": 0.60128, +"epss_pct": 0.60169, "name": "JoomShaper Helix3 <=3.1.0 - Unauthenticated Arbitrary JSON File Write", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-49049.yaml" @@ -45341,7 +45341,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L", "cwe": "CWE-79", "epss": 0.01171, -"epss_pct": 0.65261, +"epss_pct": 0.65298, "name": "WPZOOM Portfolio <= 1.4.21 - Reflected Cross-Site Scripting", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-49069.yaml" @@ -45351,7 +45351,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "cwe": "CWE-506", "epss": 0.01656, -"epss_pct": 0.74919, +"epss_pct": 0.74949, "name": "WordPress Product Slider Pro for WooCommerce < 3.5.4 - Supply Chain Backdoor RCE", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-49777.yaml" @@ -45361,7 +45361,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "cwe": "CWE-20", "epss": 0.00955, -"epss_pct": 0.58961, +"epss_pct": 0.59006, "name": "SureForms <= 2.5.2 - Unauthenticated Payment Amount Validation Bypass via form_id", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-4987.yaml" @@ -45371,7 +45371,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "cwe": "CWE-323", "epss": 0.04717, -"epss_pct": 0.91192, +"epss_pct": 0.91203, "name": "Discuz! X5.0 - Authentication Bypass", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-49952.yaml" @@ -45381,7 +45381,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N", "cwe": "CWE-915", "epss": 0.01701, -"epss_pct": 0.75604, +"epss_pct": 0.7563, "name": "Hoppscotch <= 2026.4.1 - Mass Assignment JWT_SECRET Overwrite", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-50160.yaml" @@ -45389,7 +45389,7 @@ "CVE-2026-50229": { "cwe": "CWE-80", "epss": 0.04091, -"epss_pct": 0.90011, +"epss_pct": 0.90023, "name": "Apache Tomcat - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-50229.yaml" @@ -45399,7 +45399,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.00406, -"epss_pct": 0.33734, +"epss_pct": 0.33782, "name": "Lyrion Music Server <= 9.2.0 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-50230.yaml" @@ -45409,7 +45409,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-22", "epss": 0.36141, -"epss_pct": 0.98363, +"epss_pct": 0.98365, "name": "Langflow <= 1.8.4 - Path Traversal to RCE via File Upload", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-5027.yaml" @@ -45419,7 +45419,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-200", "epss": 0.03057, -"epss_pct": 0.86667, +"epss_pct": 0.86683, "name": "W3 Total Cache <= 2.9.3 - Unauthenticated Dynamic Security Token Disclosure", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-5032.yaml" @@ -45429,7 +45429,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-89", "epss": 0.01383, -"epss_pct": 0.70256, +"epss_pct": 0.70286, "name": "WordPress ARMember Premium <= 7.3.1 - Unauthenticated SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-5073.yaml" @@ -45438,7 +45438,7 @@ "cvss": 10.0, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N", "epss": 0.83771, -"epss_pct": 0.99669, +"epss_pct": 0.9967, "name": "Check Point IKEv1 Remote-Access VPN - Certificate Authentication Bypass", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-50751.yaml" @@ -45464,7 +45464,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H", "cwe": "CWE-77", "epss": 0.07934, -"epss_pct": 0.94319, +"epss_pct": 0.94327, "name": "Gogs <= 0.14.2 - Authenticated RCE via git rebase Argument Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-52806.yaml" @@ -45474,7 +45474,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-200", "epss": 0.01488, -"epss_pct": 0.72249, +"epss_pct": 0.72279, "name": "Gogs < 0.14.3 - Unauthenticated Organization Teams Disclosure", "severity": "low", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-52815.yaml" @@ -45492,7 +45492,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "cwe": "CWE-22", "epss": 0.01928, -"epss_pct": 0.78552, +"epss_pct": 0.78576, "name": "Nezha Dashboard < 2.0.13 - Path Traversal", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-53519.yaml" @@ -45502,7 +45502,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-306", "epss": 0.03296, -"epss_pct": 0.87643, +"epss_pct": 0.87657, "name": "Kestra <= 1.3.20 - Remote Code Execution", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-53576.yaml" @@ -45520,7 +45520,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "cwe": "CWE-94", "epss": 0.029, -"epss_pct": 0.8598, +"epss_pct": 0.85997, "name": "Crawl4AI <= 0.8.6 - Remote Code Execution", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-53753.yaml" @@ -45538,7 +45538,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-434", "epss": 0.05638, -"epss_pct": 0.92413, +"epss_pct": 0.92424, "name": "Magento 2 Amasty Order Attributes < 4.0.0 - Unauthenticated Arbitrary File Upload", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-53787.yaml" @@ -45548,7 +45548,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "cwe": "CWE-22", "epss": 0.01899, -"epss_pct": 0.78216, +"epss_pct": 0.78242, "name": "OpenChamber <1.13.0 - Unauthenticated Arbitrary File Read", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-53976.yaml" @@ -45558,7 +45558,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.02386, -"epss_pct": 0.82759, +"epss_pct": 0.8278, "name": "SiYuan <= 3.6.5 - Unauthenticated Path Traversal", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-54066.yaml" @@ -45568,7 +45568,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "cwe": "CWE-346", "epss": 0.00579, -"epss_pct": 0.4535, +"epss_pct": 0.45401, "name": "SiYuan Note <= 3.6.5 - Authentication Bypass", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-54069.yaml" @@ -45576,7 +45576,7 @@ "CVE-2026-54157": { "cwe": "CWE-918", "epss": 0.0183, -"epss_pct": 0.77346, +"epss_pct": 0.77372, "name": "LobeHub LobeChat <= 2.1.56 - Server-Side Request Forgery", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-54157.yaml" @@ -45600,7 +45600,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-532", "epss": 0.00927, -"epss_pct": 0.58044, +"epss_pct": 0.58091, "name": "vLLM <= 0.23.0 - Anthropic Router Heap Address Information Leak", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-54236.yaml" @@ -45610,7 +45610,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L", "cwe": "CWE-89", "epss": 0.01343, -"epss_pct": 0.69389, +"epss_pct": 0.69423, "name": "YMC Filter - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-54836.yaml" @@ -45620,7 +45620,7 @@ "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N", "cwe": "CWE-22", "epss": 0.01219, -"epss_pct": 0.66548, +"epss_pct": 0.66582, "name": "SeaweedFS <= 4.29 - Path Traversal File Write", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-54917.yaml" @@ -45630,7 +45630,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "cwe": "CWE-1390", "epss": 0.39652, -"epss_pct": 0.98514, +"epss_pct": 0.98516, "name": "Microsoft SharePoint Server - JWT Authentication Bypass", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/javascript/cves/2026/CVE-2026-55040.yaml" @@ -45639,7 +45639,7 @@ "cvss": 6.1, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "epss": 0.00523, -"epss_pct": 0.42337, +"epss_pct": 0.42388, "name": "Etherpad 2.1.0 <= 3.0.0 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-55087.yaml" @@ -45657,7 +45657,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-918", "epss": 0.01514, -"epss_pct": 0.72712, +"epss_pct": 0.72742, "name": "Gotenberg < 8.34.0 - Local File Disclosure", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-55229.yaml" @@ -45666,7 +45666,7 @@ "cvss": 9.3, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:H", "epss": 0.0119, -"epss_pct": 0.65769, +"epss_pct": 0.65806, "name": "Langflow < 1.9.1 - Unauthenticated File Upload", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-55450.yaml" @@ -45676,7 +45676,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-79", "epss": 0.00284, -"epss_pct": 0.20544, +"epss_pct": 0.20563, "name": "Dashy <= 4.3.6 - Reflected XSS via Workspace", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-55592.yaml" @@ -45693,7 +45693,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "cwe": "CWE-79", "epss": 0.00773, -"epss_pct": 0.53203, +"epss_pct": 0.53243, "name": "VvvebJs <= 2.0.5 - Cross-Site Scripting", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-5615.yaml" @@ -45703,7 +45703,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-798", "epss": 0.02639, -"epss_pct": 0.84503, +"epss_pct": 0.8452, "name": "Crawl4AI < 0.8.7 - Hardcoded JWT Signing Key Authentication Bypass", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-56265.yaml" @@ -45713,7 +45713,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-306", "epss": 0.02048, -"epss_pct": 0.7986, +"epss_pct": 0.79882, "name": "Flowise <= 3.0.13 - Unauthenticated OAuth Configuration Disclosure", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-56270.yaml" @@ -45723,7 +45723,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-434", "epss": 0.30375, -"epss_pct": 0.98098, +"epss_pct": 0.98101, "name": "Page Builder CK <= 3.5.10 - Unauthenticated Arbitrary File Upload", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-56290.yaml" @@ -45733,7 +45733,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-434", "epss": 0.14595, -"epss_pct": 0.96399, +"epss_pct": 0.96403, "name": "Balbooa Forms < 2.4.1 - Unauthenticated Arbitrary File Upload", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-56291.yaml" @@ -45743,7 +45743,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-306", "epss": 0.03559, -"epss_pct": 0.88511, +"epss_pct": 0.88525, "name": "Gorse < 0.5.10 - Unauthenticated Database Dump", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-56782.yaml" @@ -45753,7 +45753,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-434", "epss": 0.04175, -"epss_pct": 0.90194, +"epss_pct": 0.90207, "name": "Drag and Drop Multiple File Upload - CF7 <= 1.3.9.6 - Remote Code Execution", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-5718.yaml" @@ -45763,7 +45763,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-522", "epss": 0.01988, -"epss_pct": 0.79219, +"epss_pct": 0.79244, "name": "RabbitMQ Management - OAuth 2 Client Secret Disclosure", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-57219.yaml" @@ -45781,7 +45781,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-434", "epss": 0.02328, -"epss_pct": 0.82324, +"epss_pct": 0.82346, "name": "RSFiles! for Joomla - Arbitrary File Upload", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-57827.yaml" @@ -45791,7 +45791,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-94", "epss": 0.09143, -"epss_pct": 0.9495, +"epss_pct": 0.94955, "name": "Orkes Conductor 3.21.21-3.30.1 - Remote Code Execution", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-58138.yaml" @@ -45801,7 +45801,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-78", "epss": 0.0804, -"epss_pct": 0.94376, +"epss_pct": 0.94384, "name": "Dockwatch <= 0.6.567 - OS Command Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-58455.yaml" @@ -45811,7 +45811,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-502", "epss": 0.15873, -"epss_pct": 0.96645, +"epss_pct": 0.96649, "name": "Microsoft SharePoint Server - WS-Federation BinaryFormatter Deserialization RCE", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-58644.yaml" @@ -45851,7 +45851,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-94", "epss": 0.02304, -"epss_pct": 0.82134, +"epss_pct": 0.82155, "name": "AstrBot <= 4.22.1 - Command Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-6118.yaml" @@ -45877,7 +45877,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "cwe": "CWE-601", "epss": 0.00663, -"epss_pct": 0.49222, +"epss_pct": 0.49274, "name": "User Registration & Membership WordPress plugin - Open Redirect", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-6203.yaml" @@ -45913,7 +45913,7 @@ "cvss": 9.8, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "epss": 0.01195, -"epss_pct": 0.65876, +"epss_pct": 0.65913, "name": "FlipperCode Custom CSS, JS & PHP <= 2.0.7 - Remote Code Execution", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-6433.yaml" @@ -45923,7 +45923,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "cwe": "CWE-79", "epss": 0.31204, -"epss_pct": 0.98143, +"epss_pct": 0.98145, "name": "WordPress Core < 7.0.3 - Preauth Reflected XSS (XSS2Shell)", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-64638.yaml" @@ -45933,7 +45933,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N", "cwe": "CWE-918", "epss": 0.1641, -"epss_pct": 0.96751, +"epss_pct": 0.96755, "name": "MLflow Webhook SSRF - Unauthenticated Full-Read via Redirect Bypass", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-64849.yaml" @@ -45943,7 +45943,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N", "cwe": "CWE-918", "epss": 0.00419, -"epss_pct": 0.3496, +"epss_pct": 0.35004, "name": "FormCraft3 <= 3.9.15 - Server-Side Request Forgery", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-65442.yaml" @@ -45960,7 +45960,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.03394, -"epss_pct": 0.8798, +"epss_pct": 0.87993, "name": "Microweber CMS <= 2.0.20 - Unauthenticated Arbitrary File Read", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-65694.yaml" @@ -45970,7 +45970,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.00928, -"epss_pct": 0.58065, +"epss_pct": 0.58112, "name": "Joomla Easy Store - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-65761.yaml" @@ -45980,7 +45980,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.01918, -"epss_pct": 0.78442, +"epss_pct": 0.78468, "name": "Meshery <1.0.57 - Arbitrary File Read", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-65919.yaml" @@ -45990,7 +45990,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-306", "epss": 0.05285, -"epss_pct": 0.92, +"epss_pct": 0.9201, "name": "Juggle <= 1.6.0 - Unauthenticated Exposed H2 Database Console", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-67208.yaml" @@ -46000,7 +46000,7 @@ "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N", "cwe": "CWE-862", "epss": 0.01461, -"epss_pct": 0.71754, +"epss_pct": 0.71784, "name": "Concrete CMS <9.5.1 - Unauthenticated File Usage Disclosure", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-6826.yaml" @@ -46008,7 +46008,7 @@ "CVE-2026-6854": { "cwe": "CWE-89", "epss": 0.01577, -"epss_pct": 0.73741, +"epss_pct": 0.73771, "name": "My Calendar < 3.7.9 - Unauthenticated SQL Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-6854.yaml" @@ -46028,7 +46028,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N", "cwe": "CWE-89", "epss": 0.01104, -"epss_pct": 0.63461, +"epss_pct": 0.635, "name": "SiYuan - SQL Execution", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-69084.yaml" @@ -46038,7 +46038,7 @@ "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H", "cwe": "CWE-94", "epss": 0.01058, -"epss_pct": 0.62134, +"epss_pct": 0.62174, "name": "Flowise < 3.1.3 - Remote Code Execution", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-69251.yaml" @@ -46048,7 +46048,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-287", "epss": 0.02005, -"epss_pct": 0.79433, +"epss_pct": 0.79457, "name": "Audiobookshelf - Authentication Bypass", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-71209.yaml" @@ -46058,7 +46058,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N", "cwe": "CWE-863", "epss": 0.25136, -"epss_pct": 0.97774, +"epss_pct": 0.97778, "name": "Adobe Commerce/Magento - Customer Session Identity Switch", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-71362.yaml" @@ -46078,7 +46078,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-22", "epss": 0.05122, -"epss_pct": 0.91792, +"epss_pct": 0.91802, "name": "DB-GPT <= 0.8.1 - Arbitrary File Write", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-73034.yaml" @@ -46088,7 +46088,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L", "cwe": "CWE-78", "epss": 0.20528, -"epss_pct": 0.97333, +"epss_pct": 0.97337, "name": "Zimbra Collaboration Suite < 10.1.20 - OS Command Injection", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2026/CVE-2026-73570.yaml" @@ -46098,7 +46098,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-269", "epss": 0.01242, -"epss_pct": 0.67113, +"epss_pct": 0.67148, "name": "Read More & Accordion <= 3.5.7 - Authenticated Privilege Escalation", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-7467.yaml" @@ -46108,7 +46108,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", "epss": 0.01791, -"epss_pct": 0.76825, +"epss_pct": 0.76852, "name": "GeoServer jsonArrayContains CQL Filter - SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-76904.yaml" @@ -46118,7 +46118,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-94", "epss": 0.04201, -"epss_pct": 0.90247, +"epss_pct": 0.90259, "name": "SPIP < 4.4.22 - Unauthenticated RCE", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-77806.yaml" @@ -46128,7 +46128,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N", "cwe": "CWE-918", "epss": 0.00695, -"epss_pct": 0.50508, +"epss_pct": 0.50555, "name": "WordPress FluentCRM <= 2.9.87 - Unauthenticated Blind SSRF", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-7798.yaml" @@ -46148,7 +46148,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-287", "epss": 0.14608, -"epss_pct": 0.96401, +"epss_pct": 0.96405, "name": "WordPress Burst Statistics 3.4.0-3.4.1.1 - Authentication Bypass", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-8181.yaml" @@ -46157,8 +46157,8 @@ "cvss": 9.8, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-287", -"epss": 0.00377, -"epss_pct": 0.30675, +"epss": 0.01242, +"epss_pct": 0.67157, "name": "JFrog Artifactory Access Blank Join Key Authentication Bypass", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-82329.yaml" @@ -46168,7 +46168,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-862", "epss": 0.00523, -"epss_pct": 0.42336, +"epss_pct": 0.42388, "name": "Concrete CMS <9.5.1 - Unauthenticated File-Usage Internal Metadata Disclosure", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-8236.yaml" @@ -46178,7 +46178,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-862", "epss": 0.0064, -"epss_pct": 0.4821, +"epss_pct": 0.48259, "name": "Concrete CMS <= 9.5.0 - Unauthenticated Conversation Message Disclosure (IDOR)", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-8237.yaml" @@ -46188,7 +46188,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-862", "epss": 0.07623, -"epss_pct": 0.94131, +"epss_pct": 0.94138, "name": "LearnPress < 4.3.7 - Information Disclosure", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-8383.yaml" @@ -46198,7 +46198,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-200", "epss": 0.00801, -"epss_pct": 0.54102, +"epss_pct": 0.54143, "name": "WordPress WP Go Maps < 10.0.10 - Unauthenticated Marker Data Disclosure", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-8385.yaml" @@ -46208,7 +46208,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "cwe": "CWE-862", "epss": 0.007, -"epss_pct": 0.50686, +"epss_pct": 0.50732, "name": "WP Go Maps < 10.0.10 - Unauthenticated Marker Information Disclosure", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-8386.yaml" @@ -46218,7 +46218,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-639", "epss": 0.01566, -"epss_pct": 0.7357, +"epss_pct": 0.73601, "name": "WordPress AudioIgniter <= 2.0.2 - Unauthenticated IDOR", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-8679.yaml" @@ -46228,7 +46228,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H", "cwe": "CWE-22", "epss": 0.02669, -"epss_pct": 0.84699, +"epss_pct": 0.84718, "name": "Avada (Fusion) Builder <= 3.15.3 - Unauthenticated Arbitrary File Deletion", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-8713.yaml" @@ -46238,7 +46238,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-862", "epss": 0.21511, -"epss_pct": 0.97442, +"epss_pct": 0.97446, "name": "WP Maps Pro (wp-google-map-gold) <= 6.1.0 - Unauthenticated Administrator Account Creation", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-8732.yaml" @@ -46248,7 +46248,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "cwe": "CWE-639", "epss": 0.01018, -"epss_pct": 0.60941, +"epss_pct": 0.60982, "name": "WordPress MapPress Maps <= 2.96.6 - Unauthenticated IDOR", "severity": "medium", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-8839.yaml" @@ -46258,7 +46258,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-94", "epss": 0.02098, -"epss_pct": 0.80389, +"epss_pct": 0.80411, "name": "MediaWiki EasyTimeline - Code Injection RCE", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-8857.yaml" @@ -46278,7 +46278,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N", "cwe": "CWE-489", "epss": 0.01039, -"epss_pct": 0.61591, +"epss_pct": 0.61633, "name": "Amazon rabbitmq-aws 0.1.0 through 0.2.0 - Arbitrary File Read", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-9133.yaml" @@ -46287,8 +46287,8 @@ "cvss": 9.8, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-94", -"epss": 0.34734, -"epss_pct": 0.98307, +"epss": 0.45213, +"epss_pct": 0.98696, "name": "IBM Langflow - Remote Code Execution", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-9198.yaml" @@ -46298,7 +46298,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.02861, -"epss_pct": 0.85785, +"epss_pct": 0.85801, "name": "W3 Total Cache <= 2.9.4 - Unauthenticated Arbitrary File Read", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-9282.yaml" @@ -46308,7 +46308,7 @@ "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "cwe": "CWE-22", "epss": 0.02502, -"epss_pct": 0.83587, +"epss_pct": 0.83606, "name": "WP User Manager \u2013 User Profile Builder & Membership - Local File Inclusion", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-9290.yaml" @@ -46318,7 +46318,7 @@ "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N", "cwe": "CWE-22", "epss": 0.01238, -"epss_pct": 0.67002, +"epss_pct": 0.67035, "name": "Bagisto <= 2.4.1 - Unauthenticated Arbitrary File Read", "severity": "high", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-9506.yaml" @@ -46327,8 +46327,8 @@ "cvss": 9.8, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "cwe": "CWE-89", -"epss": 0.00434, -"epss_pct": 0.36259, +"epss": 0.01088, +"epss_pct": 0.63028, "name": "Sangoma Switchvox < 8.4.0.2 - Unauthenticated SQL Injection", "severity": "critical", "url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2026/CVE-2026-9586.yaml"