Sort by: Updated/Published

Filtred: Bugs
Risk Topic & Details
2026-06-15
Med.
Windows Defender (MsMpEng.exe) Race Condition -> LPE / SYSTEM / Use-After-Free -> Crash
 Local nu11secur1ty
High
D-Link DSL2600U rom-0 Admin Password Disclosure
 Remote Amir Hossein Jamshidi
Med.
KNX visualisering - Broken Access Control
 Remote parsa rezaie khiabanlo...
High
PHP Link Directory (phpLD) 2.1.3 - SQL Injection, IDOR, CSRF
 CWE Remote Xasthur
High
OpenEMR 7.0.2 Arbitrary File Read
 CVE CWE Remote doany1
Low
ZTE ZXHN H188A V6 Authentication Bypass
 CVE Remote Mina Nageh Salalma
Med.
phpLD 2.1.3 (EOL) has authenticated SQLi in admin/dir_validate.php (CATEGORY_ID) and admin ORDER BY (sort), unauthenticated IDOR in add_reciprocal.php, CSRF on admin link actions via GET, and exposed install/ after deployment. Verified locally on v2.1.3.
 CWE Remote Xasthur
2026-06-06
Med.
Tenable Terrascan Server <= v1.18.3 SSRF and Local File Read
 CVE CWE Remote Mohammed Idrees Banyam...
Med.
Lenovo LegionSpace 1.7.11.2 DAService Unquoted Service Path
 Local CENACIF-MX
Med.
ZTE H298A / H108N Unauthenticated Credential Exposure
 CVE Remote Mina Nageh Salalma (Mo...
Med.
WordPress Contest Gallery 28.1.4 Unauthenticated Blind SQL Injection
 CWE Remote cardosource
Med.
BrandIT Consultancy - Blind Sql Injection
 Remote behrouz mansoori
High
Association Management Script - Multiple Vulnerabilities (IDOR, SQLi, Stored XSS)
 CWE Remote Xasthur
2026-05-27
Med.
Canvas Breach: Symbiotic Dual-Virus Model & Origin Parity Evidence
 Remote Sentinel-Null
Med.
Open ISES Tickets < 3.44.2 - Hardcoded MySQL Credentials
 CVE CWE Remote Mohammed Idrees Banyam...
Med.
Windows Shell LNK Spoofing to NTLMv2 Hash Capture
 Remote nu11secur1ty
High
Grav CMS 2.0.0-beta.2 Remote Code Execution
 CVE Remote Mustafa Murat Akgül
2026-05-23
High
Frigate NVR 0.16.3 Remote Code Execution
 CVE Remote jduardo2704
Med.
Linux nf_tables 6.19.3 Local Privilege Escalation
 CVE CWE Remote Local Aviral Srivastava
Low
ThingsBoard IoT Platform 4.2.0 Server-Side Request Forgery (SSRF)
 CVE Remote Tamil Mathi T.
Med.
Linux Kernel Local Privilege Escalation (CVE-2026-43284 / CVE-2026-43500 / CVE-2026-46300)
 Local nu11secur1ty
High
SUSE Manager 4.3.15 Code Execution
 CVE Remote Wiktor Maj
2026-05-19
High
Apache HertzBeat 1.8.0 Remote Code Execution
 CWE Remote Brett Gervasoni
High
JuzaWeb CMS 3.4.2 Authenticated Remote Code Execution
 Remote Sardor Shoakbarov
High
GUnet OpenEclass E-learning platform < 4.2 Remote Code Execution (RCE)
 CVE Remote Ashif Iqubal
Med.
Windows Snipping Tool NTLMv2 Hash Hijack
 CVE Remote nu11secur1ty
2026-05-13
High
telnetd 2.7 Buffer Overflow
 CVE CWE Remote Jeff Barron
Med.
Kukurigu LPE - Linux Kernel Privilege Escalation (CVE-2026-43284 / CVE-2026-43500)
 Local nu11secur1ty
Low
Event Booking Calendar-5.0 Cross-site scripting (reflected)
 Remote nu11secur1ty
High
Linux Kernel Local Privilege Escalation (CVE-2026-43284 / CVE-2026-43500)
 Local nu11secur1ty
High
Ninja Forms Uploads Unauthenticated PHP File Upload
 CVE CWE Remote Sélim Lanouar
Med.
Traccar GPS Tracking System 6.11.1 Cross-Site WebSocket Hijacking (CSWSH)
 CVE Remote Hazar Taspinar
2026-05-04
High
Erugo 0.2.14 Remote Code Execution (RCE)
 CVE Remote Abdul Moiz
Med.
Linux Kernel Local Privilege Escalation via Memory Handling and Access Control Weakness
 CWE Local RERO
Med.
Linux Kernel proc_readdir_de() 6.18-rc5 Local Privilege Escalation
 CVE CWE Local Aviral Srivastava
2026-04-26
Med.
Insecure Permissions vulnerability in Nagios Network Analyzer v.2024R1.02-64 and before allows a local attacker to escalate privileges via the remove_source.sh component.
 CVE Local Sarang Tumne
Med.
Samsung ONE Integer Overflow in CircleConst Tensor Size Calculation
 CVE CWE Local Mohammed Idrees Banyam...
Med.
solaredge-CSRF-OOB-Injection
 Remote nu11secur1ty
2026-04-22
Med.
Trojan-Spy.Win32.Small / Remote Command Execution
 Remote malvuln
Med.
Throttlestop Kernel Driver Kernel Out-of-Bounds Write Privilege Escalation
 CVE CWE Remote Xavi Beltran
2026-04-19
High
Critical Remote Code Execution Vulnerability in Windows Internet Key Exchange (IKE) Service (CVE-2026-33824)
 CVE CWE Remote RERO
2026-04-14
Med.
WordPress Madara Local File Inclusion
 CVE CWE Remote Beatriz Fresno Naumova
High
FortiWeb 8.0.2 Remote Code Execution
 CVE Remote Mohammed Idrees Banyam...
High
Easy File Sharing Web Server v7.2 Buffer Overflow
 CWE Remote Donwor
Med.
NetBT e-Fatura Privilege Escalation
 CVE CWE Remote Seccops
2026-04-09
High
Docker Desktop 4.44.3 Unauthenticated API Exposure
 CVE Remote OilSeller2001
Low
MaNGOSWebV4 4.0.6 Reflected XSS
 CVE CWE Remote CodeSecLab
Med.
Grafana 11.6.0 SSRF
 CVE Remote Beatriz Fresno Naumova
High
OctoPrint 1.11.2 File Upload
 CVE CWE Remote prabhatverma.addada
Med.
esm-dev 136 Path Traversal
 CVE CWE Remote Byte Reaper
2026-04-04
High
Linux Kernel mseal Invariant Violation (Linux kernel 6.17-7.0 rc5)
 CVE CWE Local Antonius
2026-04-03
Med.
astrojs/vercel <= 10.0.0 - Unauthenticated x-astro-path Header Path Override
 CVE CWE Remote Mohammed Idrees Banyam...
Med.
Microsoft SQL Server Privilege Elevation Through
 CVE Remote Emad Al-Mousa
2026-03-31
High
FreeScout Unauthenticated RCE via ZWSP .htaccess Bypass
 CVE Remote offensiveee
Med.
Wavlink WL-WN579X3-C firewall.cgi UPNP Stack-based Buffer Overflow
 CVE CWE Remote Mohammed Idrees Banyam...
2026-03-26
Med.
esiclivre 0.2.2 SQL Injection
 Remote Bryan
Low
Payara Server Cross Site Scripting
 CVE Remote DeepSecurity Research
Med.
esiclivre 0.2.2 SQL Injection
 Remote Local Bryan
Med.
SiYuan <= v3.6.1 Note unauthenticated arbitrary file read (path traversal)
 CVE CWE Remote Mohammed Idrees Banyam...
High
Tenda AC21 V1.0 V16.03.08.16 - Stack Buffer Overflow in SetNetControlList
 CVE CWE Remote Mohammed Idrees Banyam...
Copyright 2026, cxsecurity.com

 

Back to Top