CXSECURITY.COM Free Security List

Bugtraq Stats

Yesterday: {{ x.iyest }}
Last month: {{ x.imont }}
Current month: {{ x.icurr }}
Total: {{ x.itotal }}

CVE database

Last Update: {{ x.cyest }}
Last month: {{ x.cmont }}
Current month: {{ x.ccur }}
Total CVE: {{ x.ctotal }}

Affected

{{te.id}}. {{te.nameDis}} ({{te.count}})

Random comment

{{ x.title }}
{{ x.auth }}

Voted

{{ x.nameSh }} +{{x.pos}} {{x.neg}}

Check the Bugtraq

2024-10-08
Med.	PHP-Nuke Top Module SQL Injection Emiliano Febbi
2024-10-07
Low	Acronis Cyber Infrastructure Default Password Remote Code Execution h00die-gr3y
Med.	Online Complete - Blind Sql Injection Vulnerability behrouz mansoori
Med.	MSI RTCore64.sys Privilege escalation CVE-2019-16098 NSA
Med.	SCRMS 2024-10-07 Multiple-SQLi nu11secur1ty
Low	Book Recording App 2024-09-24 Cross Site Scripting Arif Ari
Med.	ManageEngine ADManager Plus Privilege Escalation CVE-2024-24409 Metin Yunus Kandemir
2024-10-05
High	dizqueTV 1.5.3 Remote Code Execution Ahmed Said Saud Al-Busaidi
High	LMS2024-1.0 XSS-Reflected Information Disclosure nu11secur1ty
Med.	ABB Cylon Aspect 3.07.02 Authenticated File Disclosure LiquidWorm
High	MD-Pro 1.0.76 Shell Upload / SQL Injection Emiliano Febbi
High	fastrpc_mmap_find Information Leak CVE-2024-33060 Google Security Research
Med.	Android qrtr_bpf_filter_detach Double-Free / Use-After-Free CVE-2024-38401 Google Security Research

Dorks

2024-10-12
CVE-2024-9592	The Easy PayPal Gift Certificate plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.2.3. This is due to missing or incorrect nonce validation on the 'wpppgc_plugin_options' function. This makes it possible for unauthenticated attackers to update the plugin's settings and inject malici...
CVE-2024-9821	The Bot for Telegram on WooCommerce plugin for WordPress is vulnerable to sensitive information disclosure due to missing authorization checks on the 'stm_wpcfto_get_settings' AJAX action in all versions up to, and including, 1.2.4. This makes it possible for authenticated attackers, with subscriber-level access and above, to view the Tel...
CVE-2024-9860	The Bridge Core plugin for WordPress is vulnerable to unauthorized modification of data or loss of data due to a missing capability check on the 'import_action' and 'install_plugin_per_demo' functions in versions up to, and including, 3.3. This makes it possible for authenticated attackers with subscriber-level permissions or ab...
CVE-2024-35517	Netgear XR1000 v1.0.0.64 is vulnerable to command injection in usb_remote_smb_conf.cgi via the share_name parameter.
CVE-2024-35522	Netgear EX3700 ' AC750 WiFi Range Extender Essentials Edition before 1.0.0.98 contains an authenticated command injection in operating_mode.cgi via the ap_mode parameter with ap_24g_manual set to 1 and ap_24g_manual_sec set to NotNone.
CVE-2024-45754	An issue was discovered in the centreon-bi-server component in Centreon BI Server 24.04.x before 24.04.3, 23.10.x before 23.10.8, 23.04.x before 23.04.11, and 22.10.x before 22.10.11. SQL injection can occur in the listing of configured reporting jobs. Exploitation is only accessible to authenticated users with high-privileged access.
2024-10-11
CVE-2024-38365	btcd is an alternative full node bitcoin implementation written in Go (golang). The btcd Bitcoin client (versions 0.10 to 0.24) did not correctly re-implement Bitcoin Core's "FindAndDelete()" functionality. This logic is consensus-critical: the difference in behavior with the other Bitcoin clients can lead to btcd clients accepting a...
CVE-2024-47884	foxmarks is a CLI read-only interface for Firefox's bookmarks and history. A temporary file was created under the /tmp directory with read permissions for all users containing a copy of Firefox's database of bookmarks, history, input history, visits counter, use counter, view counter and more confidential information about the history of ...
CVE-2024-48768	An issue in almaodo GmbH appinventor.ai_google.almando_control 2.3.1 allows a remote attacker to obtain sensitive information via the firmware update process
CVE-2024-48769	An issue in BURG-WCHTER KG de.burgwachter.keyapp.app 4.5.0 allows a remote attacker to obtain sensitve information via the firmware update process.

2024-10-08
Med.	PHP-Nuke Top Module SQL Injection intext: Powered by PHP-Nuke	Emiliano Febbi
2024-10-07
Med.	Online Complete - Blind Sql Injection Vulnerability "Powered by Online Complete to"	behrouz mansoori
2024-10-05
High	MD-Pro 1.0.76 Shell Upload / SQL Injection intext: Powered by MD-Pro	Emiliano Febbi
2024-09-30
Med.	krishna Tech - Sql Injection "Website Developed By krishna Tech"	behrouz mansoori
2024-09-29
Med.	Era infotech - Sql Injection "Design & Developed By: Era infotech"	behrouz mansoori

Quick goto:

Bugtraq The latest CVEs Dorks
Search

Bugtraq

CVEMAP

By Author

CVE Id

CWE Id

By vendors

By products

Are you looking CVE for some product?

Top Vendors:
Apple Microsoft Google Oracle Apache IBM Red Hat HP Adobe Mozilla

Full List of Vendors

Top Products:
Linux Kernel Mac OS X Windows XP Windows 10 Flash Player Adobe Reader PHP JRE JDK
Wordpress Joomla Chrome IE Firefox Safari HTTPD Tomcat Nginx

Full List of Products

Top CWE:
CWE-89 (SQL Injection) CWE-79 (XSS) CWE-119 (Buffer Overflow) CWE-22 (Path Traversal)

Check CWE Dictionary

Donate:

is an open project developed and moderated fully by one independent person.

Help develop the project and make
Donations

Bugtraq Stats

CVE database

Affected

Random comment

Voted

2024-10-08

Med.

2024-10-07

Low

Med.

Med.

Med.

Low

Med.

2024-10-05

High

High

Med.

High

High

Med.

The latest CVEs

2024-10-12

2024-10-11

Dorks

2024-10-08

Med.

2024-10-07

Med.

2024-10-05

High

2024-09-30

Med.

2024-09-29

Med.

Quick goto:

Are you looking CVE for some product?

Top Vendors:

Top Products:

Top CWE:

Donate:

is an open project developed and moderated fully by one independent person.

Help develop the project and makeDonations

Help develop the project and make
Donations