CXSECURITY.COM Free Security List

Bugtraq Stats

Yesterday: {{ x.iyest }}
Last month: {{ x.imont }}
Current month: {{ x.icurr }}
Total: {{ x.itotal }}

CVE database

Last Update: {{ x.cyest }}
Last month: {{ x.cmont }}
Current month: {{ x.ccur }}
Total CVE: {{ x.ctotal }}

Affected

{{te.id}}. {{te.nameDis}} ({{te.count}})

Random comment

{{ x.title }}
{{ x.auth }}

Voted

{{ x.nameSh }} +{{x.pos}} {{x.neg}}

Check the Bugtraq

2024-10-28
Med.	Lawo AG vsm LTC Time Sync Path Traversal CVE-2024-6049 Sandro Einfeldt
Med.	UP-RESULT[pro-1.0] Multiple-SQLi nu11secur1ty
Med.	ABB Cylon Aspect 3.08.01 getApplicationNamesJS.php Building/Project Name Exposure LiquidWorm
2024-10-25
Low	SofaWiki 3.9.2 Cross Site Scripting Chokri Hammedi
High	SofaWiki 3.9.2 Shell Upload Chokri Hammedi
Med.	Impactos NET Sql Injection behrouz mansoori
Med.	Impactos NET - Blind Sql Injection Vulnerability behrouz mansoori
Med.	LifterLMS - Blind SQL Injection CVE-2024-7349 FURKAN KARAARSLAN
Low	Adversary3 updated / 700 malware and C2 panel vulnerabilities malvuln
2024-10-23
Low	IBM Security Verify Access 10.0.8 Open Redirection CVE-2024-35133 Giulio Garzia
Med.	ABB Cylon Aspect 3.08.01 persistenceManagerAjax.php Command Injection LiquidWorm
High	ABB Cylon Aspect 3.08.01 databaseFileDelete.php Command Injection LiquidWorm
Med.	Paxton Net2 API License Bypass CVE-2024-48939 Jeroen Hermans

Dorks

2024-10-23
CVE-2024-50066	In the Linux kernel, the following vulnerability has been resolved: mm/mremap: fix move_normal_pmd/retract_page_tables race In mremap(), move_page_tables() looks at the type of the PMD entry and the specified address range to figure out by which method the next chunk of page table entries should be moved. At that point, the mmap_lock is held in ...
CVE-2024-9829	The Download Plugin plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability checks on the 'dpwap_handle_download_user' and 'dpwap_handle_download_comment' functions in all versions up to, and including, 2.2.0. This makes it possible for authenticated attackers, with Subscriber-level access a...
CVE-2024-9583	The RSS Aggregator ?? RSS Import, News Feeds, Feed to Post, and Autoblogging plugin for WordPress is vulnerable to unauthorized use of functionality due to a missing capability check on the wprss_ajax_send_premium_support function in all versions up to, and including, 4.23.12. This makes it possible for authenticated attackers, with Subscriber-leve...
CVE-2024-9947	The ProfilePress Pro plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 4.11.1. This is due to insufficient verification on the user being returned by the social login token. This makes it possible for unauthenticated attackers to log in as any existing user on the site, such as an administrator, if th...
CVE-2024-10045	The Transients Manager plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.0.6. This is due to missing or incorrect nonce validation on the process_actions function. This makes it possible for unauthenticated attackers to delete transients via a forged request granted they can trick a site admini...
CVE-2024-43924	Missing Authorization vulnerability in dFactory Responsive Lightbox allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Responsive Lightbox: from n/a through 2.4.7.
CVE-2024-9530	The Qi Addons For Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.8.0 via private templates. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract sensitive data including the contents of templates that are private.
CVE-2024-31880	IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to a denial of service, under specific configurations, as the server may crash when using a specially crafted SQL statement by an authenticated user.
CVE-2024-9927	The WooCommerce Order Proposal plugin for WordPress is vulnerable to privilege escalation via order proposal in all versions up to and including 2.0.5. This is due to the improper implementation of allow_payment_without_login function. This makes it possible for authenticated attackers, with Shop Manager-level access and above, to log in to WordPre...
CVE-2022-23861	Multiple Stored Cross-Site Scripting vulnerabilities were discovered in Y Soft SAFEQ 6 Build 53. Multiple fields in the YSoft SafeQ web application can be used to inject malicious inputs that, due to a lack of output sanitization, result in the execution of arbitrary JS code. These fields can be leveraged to perform XSS attacks on legitimate users ...

2024-10-25
Med.	Impactos NET Sql Injection "by: Impactos NET"	behrouz mansoori
Med.	Impactos NET - Blind Sql Injection Vulnerability "by: Impactos NET"	behrouz mansoori
2024-10-12
Med.	BALC Media - Blind Sql Injection Vulnerability "Developed by BALC Media"	behrouz mansoori
2024-10-08
Med.	PHP-Nuke Top Module SQL Injection intext: Powered by PHP-Nuke	Emiliano Febbi
2024-10-07
Med.	Online Complete - Blind Sql Injection Vulnerability "Powered by Online Complete to"	behrouz mansoori

Quick goto:

Bugtraq The latest CVEs Dorks
Search

Bugtraq

CVEMAP

By Author

CVE Id

CWE Id

By vendors

By products

Are you looking CVE for some product?

Top Vendors:
Apple Microsoft Google Oracle Apache IBM Red Hat HP Adobe Mozilla

Full List of Vendors

Top Products:
Linux Kernel Mac OS X Windows XP Windows 10 Flash Player Adobe Reader PHP JRE JDK
Wordpress Joomla Chrome IE Firefox Safari HTTPD Tomcat Nginx

Full List of Products

Top CWE:
CWE-89 (SQL Injection) CWE-79 (XSS) CWE-119 (Buffer Overflow) CWE-22 (Path Traversal)

Check CWE Dictionary

Donate:

is an open project developed and moderated fully by one independent person.

Help develop the project and make
Donations

Bugtraq Stats

CVE database

Affected

Random comment

Voted

2024-10-28

Med.

Med.

Med.

2024-10-25

Low

High

Med.

Med.

Med.

Low

2024-10-23

Low

Med.

High

Med.

The latest CVEs

2024-10-23

Dorks

2024-10-25

Med.

Med.

2024-10-12

Med.

2024-10-08

Med.

2024-10-07

Med.

Quick goto:

Are you looking CVE for some product?

Top Vendors:

Top Products:

Top CWE:

Donate:

is an open project developed and moderated fully by one independent person.

Help develop the project and makeDonations

Help develop the project and make
Donations