CXSECURITY.COM Free Security List

Bugtraq Stats

Yesterday: {{ x.iyest }}
Last month: {{ x.imont }}
Current month: {{ x.icurr }}
Total: {{ x.itotal }}

CVE database

Last Update: {{ x.cyest }}
Last month: {{ x.cmont }}
Current month: {{ x.ccur }}
Total CVE: {{ x.ctotal }}

Affected

{{te.id}}. {{te.nameDis}} ({{te.count}})

Random comment

{{ x.title }}
{{ x.auth }}

Voted

{{ x.nameSh }} +{{x.pos}} {{x.neg}}

Check the Bugtraq

2023-03-22
Med.	Adobe Connect 11.4.5 / 12.1.5 Local File Disclosure CVE-2023-22232 h4shur
Med.	101+ News Portal 1.0 SQL Injection Abdulhakim Oner
Low	Yoga Class Registration System 1.0 Cross Site Scripting Abdulhakim Oner
Med.	Yoga Class Registration 1.0 SQL Injection nu11secur1ty
Med.	Linksys AX3200 V1.1.00 Command Injection CVE-2022-38841 Ahmed Alroky
2023-03-19
Med.	LARAVEL VEBTO MULTIPLE FILE UPLOAD Khunerable
Med.	Microsoft User Account Control Nuances Stefan Kanthak
Med.	Microsoft SQL Server 2014 / 2016 / 2017 / 2019 / 2022 Audit Logging Failure Emad Al-Mousa
High	Bitbucket Environment Variable Remote Command Injection Shelby Pace
Med.	Riello UPS Restricted Shell Bypass Ricardo Jose Ruiz Fernandez
2023-03-15
Low	Medicine Tracker System - XSS Eren Arslan
Med.	WordPress Profile Builder 3.9.0 Missing Authorization CVE-2023-0814 Lana Codes
Med.	Oracle DB Broken PDB Isolation / Metadata Exposure CVE-2021-2173 Emad Al-Mousa

The latest CVEs

2023-03-25
CVE-2015-10097	A vulnerability was found in grinnellplans-php up to 3.0. It has been declared as critical. Affected by this vulnerability is the function interface_disp_page/interface_disp_page of the file read.php. The manipulation leads to sql injection. The attack can be launched remotely. The name of the patch is 57e4409e19203a94495140ff1b5a697734d17cfb. It i...
CVE-2016-15030	A vulnerability classified as problematic has been found in Arno0x TwoFactorAuth. This affects an unknown part of the file login/login.php. The manipulation of the argument from leads to open redirect. It is possible to initiate the attack remotely. This product does not use versioning. This is why information about affected and unaffected releases...
CVE-2023-1634	A vulnerability was found in OTCMS 6.72. It has been classified as critical. Affected is the function UseCurl of the file /admin/info_deal.php of the component URL Parameter Handler. The manipulation leads to server-side request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The ...
CVE-2023-1635	A vulnerability was found in OTCMS 6.72. It has been declared as problematic. Affected by this vulnerability is the function AutoRun of the file apiRun.php. The manipulation of the argument mode leads to cross site scripting. The attack can be launched remotely. The identifier VDB-224017 was assigned to this vulnerability.
CVE-2023-1632	A vulnerability has been found in Ellucian Banner Web Tailor 8.6 and classified as critical. This vulnerability affects unknown code of the file /PROD_ar/twbkwbis.P_FirstMenu of the component Login Page. The manipulation of the argument PIDM/WEBID leads to improper authorization. The attack can be initiated remotely. After submitting proper login c...
CVE-2023-1626	A vulnerability was found in Jianming Antivirus 16.2.2022.418. It has been declared as critical. This vulnerability affects unknown code in the library kvcore.sys of the component IoControlCode Handler. The manipulation leads to memory corruption. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The ...
CVE-2023-1627	A vulnerability was found in Jianming Antivirus 16.2.2022.418. It has been rated as problematic. This issue affects some unknown processing in the library kvcore.sys of the component IoControlCode Handler. The manipulation leads to denial of service. It is possible to launch the attack on the local host. The exploit has been disclosed to the public...
CVE-2023-1628	A vulnerability classified as problematic has been found in Jianming Antivirus 16.2.2022.418. Affected is an unknown function in the library kvcore.sys of the component IoControlCode Handler. The manipulation leads to null pointer dereference. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. V...
CVE-2023-1630	A vulnerability, which was classified as problematic, has been found in Jianming Antivirus 16.2.2022.418. Affected by this issue is some unknown functionality in the library kvcore.sys of the component IoControlCode Handler. The manipulation leads to denial of service. Local access is required to approach this attack. The exploit has been disclosed...
CVE-2023-1631	A vulnerability, which was classified as problematic, was found in Jianming Antivirus 16.2.2022.418. This affects an unknown part in the library kvcore.sys of the component IoControlCode Handler. The manipulation leads to null pointer dereference. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The ...

Dorks

2023-03-09
Med.	WordPress Real Estate 7 Theme <= 3.3.4 - Abuse of Functionality inurl:/wp-content/themes/realestate-7/	FearZzZz
2023-03-08
Med.	WordPress WoodMart Theme <= 7.1.0 - Unauthenticated Arbitrary Shortcodes Injection( CVE-2023-25790 ) inurl:/wp-content/themes/woodmart/	FearZzZz
2023-03-05
Low	WordPress Real Estate 7 Theme <= 3.3.4 - Multiple Cross-Site Request Forgery (CSRF) Vulnerabilities inurl:/wp-content/themes/realestate-7/	FearZzZz
Low	WordPress Real Estate 7 Theme <= 3.3.4 - Unauthenticated Reflected Cross-Site Scripting (XSS) inurl:/wp-content/themes/realestate-7/	FearZzZz
Low	WordPress WoodMart Theme <= 7.1.1 - Theme License Options Change via CSRF inurl:/wp-content/themes/woodmart/	FearZzZz

Quick goto:

Bugtraq The latest CVEs Dorks
Search

Bugtraq

CVEMAP

By Author

CVE Id

CWE Id

By vendors

By products

Are you looking CVE for some product?

Top Vendors:
Apple Microsoft Google Oracle Apache IBM Red Hat HP Adobe Mozilla

Full List of Vendors

Top Products:
Linux Kernel Mac OS X Windows XP Windows 10 Flash Player Adobe Reader PHP JRE JDK
Wordpress Joomla Chrome IE Firefox Safari HTTPD Tomcat Nginx

Full List of Products

Top CWE:
CWE-89 (SQL Injection) CWE-79 (XSS) CWE-119 (Buffer Overflow) CWE-22 (Path Traversal)

Check CWE Dictionary

Donate:

is an open project developed and moderated fully by one independent person.

Help develop the project and make
Donations

Bugtraq Stats

CVE database

Affected

Random comment

Voted

2023-03-22

Med.

Med.

Low

Med.

Med.

2023-03-19

Med.

Med.

Med.

High

Med.

2023-03-15

Low

Med.

Med.

The latest CVEs

2023-03-25

Dorks

2023-03-09

Med.

2023-03-08

Med.

2023-03-05

Low

Low

Low

Quick goto:

Are you looking CVE for some product?

Top Vendors:

Top Products:

Top CWE:

Donate:

is an open project developed and moderated fully by one independent person.

Help develop the project and makeDonations

Help develop the project and make
Donations