EMC Cloud Tiering Appliance (CTA) 10 through SP1 allows remote attackers to read arbitrary files via an api/login request containing an XML external entity declaration in conjunction with an entity. Rated high severity (CVSS 7.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 74.0%.
Information Disclosure
XXE
Cloud Tiering Appliance
Cloud Tiering Appliance Software
Emc
NVD
GitHub
Exploit-DB
VulDB
CVSS 2.0
7.8
EPSS
74.0%
Threat
5.3
cups-browsed in cups-filters 1.0.41 before 1.0.51 allows remote IPP printers to execute arbitrary commands via shell metacharacters in the (1) model or (2) PDL, related to "System V interface scripts. Rated high severity (CVSS 8.3), this vulnerability is low attack complexity. No vendor patch available.
Command Injection
Cups Filters
Linuxfoundation
NVD
VulDB
CVSS 2.0
8.3
EPSS
1.3%