EMC Cloud Tiering Appliance (CTA) 10 through SP1 allows remote attackers to read arbitrary files via an api/login request containing an XML external entity declaration in conjunction with an entity. Rated high severity (CVSS 7.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 74.0%.
XXE
Information Disclosure
Cloud Tiering Appliance Software
Cloud Tiering Appliance
NVD
GitHub
Exploit-DB
VulDB
CVSS 2.0
7.8
EPSS
74.0%
Threat
5.3
cups-browsed in cups-filters 1.0.41 before 1.0.51 allows remote IPP printers to execute arbitrary commands via shell metacharacters in the (1) model or (2) PDL, related to "System V interface scripts. Rated high severity (CVSS 8.3), this vulnerability is low attack complexity. No vendor patch available.
Command Injection
Cups Filters
NVD
VulDB
CVSS 2.0
8.3
EPSS
1.3%