Sort by: Updated/Published

Filtred: Only with CVE
Risk Topic & Details
2021-11-29
Med.
Simple Subscription Website 1.0 SQL Injection
 CVE CWE Remote Daniel Haro
2021-11-27
Med.
ManageEngine ADSelfService Plus Authentication Bypass / Code Execution
 CVE Remote mr_me
2021-11-25
Med.
PHP Event Calendar Lite Edition SQL Injection
 CVE CWE Remote Erik Steltzner
2021-11-24
High
Apache HTTP Server 2.4.50 Remote Code Execution Py ver
 CVE Remote Valentin Lobstein
2021-11-23
High
Linux Kernel 5.1.x PTRACE_TRACEME pkexec Local Privilege Escalation
 CVE CWE Local Ujas Dhami
2021-11-22
Med.
Wipro Holmes Orchestrator 20.4.1 Unauthenticated Arbitrary File Read PoC
 CVE Remote Rizal Muhammed
Med.
Wipro Holmes Orchestrator 20.4.1 Unauthenticated Log File Disclosure
 CVE Remote Rizal Muhammed
Med.
Ionic Identity Vault 5.0.4 PIN Unlock Lockout Bypass
 CVE Local Emanuel Duss
Med.
PuneethReddyHC Online Shopping System Advanced 1.0 SQL Injection
 CVE CWE Remote Jason Colyvas
2021-11-18
Med.
LiquidFiles 3.5.13 Privilege Escalation
 CVE CWE Local Eliana Cannella
Low
WordPress Preview E-mails For WooCommerce 1.6.8 Cross Site Scripting
 CVE CWE Remote Chloe Chamberland
2021-11-17
High
GitLab 13.10.2 Remote Code Execution (RCE) (Unauthenticated)
 CVE Remote Jacob Baines
Low
Bludit 3.13.1 Cross Site Scripting
 CVE CWE Remote Vasu
2021-11-16
Med.
WordPress WPSchoolPress 2.1.16 Cross Site Scripting
 CVE CWE Remote Davide Taraschi
High
Wipro Holmes Orchestrator 20.4.1 Arbitrary File Download
 CVE CWE Remote Rizal Muhammed
High
Online Learning System 2.0 Remote Code Execution
 CVE Remote djebbaranon
2021-11-14
Med.
Aerohive NetConfig 10.0r8a Local File Inclusion / Remote Code Execution
 CVE CWE Remote Erik Wynter
Med.
ArenaTurk Admin Panel Bypass
 CVE Remote BQX
2021-11-11
Low
Dolibarr ERP / CRM 13.0.2 Cross Site Scripting
 CVE CWE Remote Nick Decker
Med.
FormaLMS 2.4.4 Authentication Bypass
 CVE Remote Cristian Giustini
2021-11-10
High
Dolibarr ERP / CRM 13.0.2 Remote Code Execution
 CVE CWE Remote Nick Decker
2021-11-09
Med.
Froxlor 0.10.29.1 SQL Injection
 CVE CWE Remote Martin Cernac
High
FusionPBX 4.5.29 Remote Code Execution
 CVE Remote Luska
2021-11-07
High
OpenAM 13.0 LDAP Injection
 CVE Remote Charlton Trezevant
Med.
Pentaho Business Analytics / Pentaho Business Server 9.1 Filename Bypass
 CVE Remote Altion Malka
2021-11-05
High
Fuel CMS 1.4.1 Remote Code Execution
 CVE Remote Padsala Trushal
High
GitLab Unauthenticated Remote ExifTool Command Injection
 CVE CWE Remote William Bowling
2021-11-01
Low
WordPress NextScripts: Social Networks Auto-Poster 4.3.20 XSS
 CVE CWE Remote Ramuel Gall
2021-10-29
High
Apache HTTP Server 2.4.50 Remote Code Execution
 CVE Remote TheLastVvV.com
Low
WebCTRL OEM 6.5 Cross Site Scripting
 CVE CWE Remote 3ndG4me
Med.
WordPress NextScripts Social Networks Auto-Poster 4.3.20 XSS
 CVE CWE Remote Ramuel Gall
2021-10-28
High
Microsoft OMI Management Interface Authentication Bypass
 CVE Remote Spencer McIntyre
2021-10-27
High
Druva inSync Windows Client 7.5.2 - Local Privilege Escalation
 CVE Local Hamza Anonime
2021-10-25
Med.
Hikvision Web Server Build 210702 Command Injection
 CVE CWE Remote bashis
Low
WordPress Plugin TaxoPress 3.0.7.1 Stored Cross-Site Scripting (XSS) (Authenticated)
 CVE CWE Remote Akash Rajendra Patil
2021-10-23
Med.
Jetty 9.4.37.v20210219 Information Disclosure
 CVE Local Mayank Deshmukh
High
SAP NetWeaver ABAP Dispatcher Service Memory Corruption
 CVE CWE Remote Yvan Genuer
High
SAP JAVA NetWeaver System Connections XML Injection
 CVE CWE Remote Pablo Artuso
High
SAP NetWeaver ABAP Enqueue Memory Corruption
 CVE CWE Remote Yvan Genuer
Med.
SAP Enterprise Portal Sensitive Data Disclosure
 CVE CWE Remote Yvan Genuer
2021-10-20
Med.
SonicWall SMA 10.2.1.0-17sv Password Reset
 CVE Remote Jacob Baines
2021-10-18
High
Mitsubishi Electric / INEA SmartRTU Source Code Disclosure
 CVE Remote Hamit CIBO
High
WordPress Duplicator 1.3.26 Arbitrary File Read
 CVE CWE Remote nam3lum
Med.
Plastic SCM 10.0.16.5622 Insecure Direct Object Reference
 CVE Remote Basavaraj Banakar
2021-10-17
Low
i-Panel Administration System 2.0 Cross Site Scripting
 CVE CWE Remote Forster Chiu
2021-10-14
Med.
Yellowfin Cross Site Scripting / Insecure Direct Object Reference
 CVE CWE Remote Michele Di Bonaventura
2021-10-13
Low
Sonicwall SonicOS 7.0 Host Header Injection
 CVE Remote Ramikan
Med.
Keycloak 12.0.1 Server-Side Request Forgery
 CVE Remote Mayank Deshmukh
2021-10-12
High
Moodle SpellChecker Path Authenticated Remote Command Execution
 CVE CWE Remote h00die
Med.
Moodle Teacher Enrollment Privilege Escalation / Remote Code Execution
 CVE CWE Remote h00die
Med.
Moodle Authenticated Spelling Binary Remote Code Execution
 CVE Remote Brandon Perry
2021-10-09
High
Netfilter x_tables Heap Out-Of-Bounds Write / Privilege Escalation
 CVE CWE Remote Brendan Coles
High
Maian-Cart 3.8 Remote Code Execution
 CVE Remote DreyAnd
Low
django-unicorn 0.35.3 Cross Site Scripting
 CVE CWE Remote Raven Security Associa...
2021-10-06
Med.
Apache HTTP Server 2.4.49 Path Traversal
 CVE CWE Remote Lucas Souza
High
Atlassian Jira Server/Data Center 8.4.0 File Read
 CVE Remote Mayank Deshmukh
High
Atlassian Confluence Server 7.5.1 Arbitrary File Read
 CVE CWE Remote Mayank Deshmukh
High
Dahua Authentication Bypass
 CVE Remote bashis
Med.
WordPress BulletProof Security 5.1 Information Disclosure
 CVE CWE Remote Ron Jost
2021-10-05
Med.
Gatekeeper Bypass Proof Of Concept
 CVE Local Rasmus Sten
Copyright 2021, cxsecurity.com

 

Back to Top