Sort by: Updated/Published

Filtred: Only with CVE
Risk Topic & Details
2021-01-26
Low
Tenda AC5 AC1200 Wireless Cross Site Scripting
 CVE CWE Remote Chiragh Arora
2021-01-23
High
Oracle WebLogic Server 14.1.1.0 Remote Code Execution
 CVE Remote Photubias
2021-01-22
Med.
Simple JobBoard Authenticated File Read
 CVE Remote SunCSR
Med.
Atlassian Confluence Widget Connector Macro SSTI
 CVE Remote 46o60
2021-01-21
Low
Anchor CMS 0.12.7 CSRF (Delete user)
 CVE CWE Remote Ninad Mishra
2021-01-20
High
Church Rota 2.6.4 Shell Upload
 CVE CWE Remote Rob McCarthy
2021-01-19
Low
osTicket 1.14.2 SSRF
 CVE Remote Talat Mehmood
2021-01-18
High
Cisco UCS Manager 2.2(1d) Remote Command Execution
 CVE CWE Remote liquidsky
High
IBM Spectrum LSF 10.1 / 10.2 Hardcoded Eauth Key / Eauth Key Exposure
 CVE Local John Fitzpatrick
2021-01-16
Low
PHP-Fusion 9.03.90 Cross Site Request Forgery
 CVE CWE Remote Mohamed Oosman B S
2021-01-15
Med.
Nagios XI 5.7.x Remote Code Execution
 CVE Remote Haboob Team
2021-01-14
Med.
Pepperl+Fuchs IO-Link Master Series 1.36 CSRF / XSS / Command Injection
 CVE CWE Remote T. Weber
Med.
flatCore CMS XSS / File Disclosure / SQL Injection
 CVE CWE Remote Calvin Phang
Low
Envira Gallery Lite 1.8.3.2 Cross Site Scripting
 CVE CWE Remote Rodolfo Tavares
Med.
Apache Flink 1.11.0 Unauthenticated Arbitrary File Read (Metasploit)
 CVE CWE Remote Suncsr
Med.
Cisco RV110W 1.2.1.7 vpn_account Denial of Service (PoC)
 CVE Remote Shizhi He
2021-01-13
Med.
Cloud Filter Arbitrary File Creation / Privilege Escalation
 CVE CWE Remote Grant Willcox
2021-01-11
High
Coturn 4.5.1.x Access Control Bypass
 CVE Remote Sandro Gauci
2021-01-08
Med.
Apache Flink 1.11.0 Arbitrary File Read / Directory Traversal
 CVE CWE Remote SunCSR
2021-01-07
Med.
Newgen Correspondence Management System eGov 12.0 Insecure Direct Object Reference
 CVE Remote Ali Al Sinan
High
Gitea 1.7.5 Remote Code Execution
 CVE Remote 1F98D
Med.
IPeakCMS 3.5 SQL Injection
 CVE CWE Remote MoeAlBarbari
Med.
Dovecot 2.3.11.3 Denial Of Service
 CVE CWE Remote Innokentii Sennovskiy
Med.
PaperStream IP (TWAIN) 1.42.0.5685 Local Privilege Escalation
 CVE CWE Local 1F98D
Med.
Dovecot 2.3.11.3 Access Bypass
 CVE CWE Remote Aki Tuomi
2021-01-06
Med.
WordPress Plugin W3 Total Cache Unauthenticated Arbitrary File Read (Metasploit)
 CVE CWE Remote SunCSR
2021-01-05
Med.
Fluentd TD-agent 4.0.1 Insecure Folder Permission
 CVE Local Adrian Bondocea
2021-01-04
Med.
Mantis Bug Tracker 2.24.3 access SQL Injection
 CVE CWE Remote EthicalHCOP
High
Rock RMS File Upload / Account Takeover / Information Disclosure
 CVE CWE Remote Cyber Security Researc...
Med.
Spotweb 1.4.9 search SQL Injection
 CVE CWE Remote BouSalman
2020-12-31
High
qdPM 9.1 PHP Object Injection
 CVE Remote EgiX
2020-12-30
Med.
URVE Software Build 24.03.2020 Information Disclosure
 CVE CWE Remote Erik Steltzner
Med.
URVE Software Build 24.03.2020 Missing Authorization
 CVE CWE Remote Erik Steltzner
Med.
URVE Software Build 24.03.2020 Authentication Bypass / Remote Code Execution
 CVE CWE Remote Erik Steltzner
2020-12-25
High
Apache Struts 2 Forced Multi OGNL Evaluation
 CVE Remote Matthias Kaiser
2020-12-24
Med.
Flexmonster Pivot Table & Charts 2.7.17 Remote Report Reflected XSS
 CVE CWE Remote Marco Nappi
2020-12-23
Med.
SUPREMO 4.1.3.2348 Privilege Escalation
 CVE CWE Local Victor Gil
High
Webmin 1.962 Remote Command Execution
 CVE CWE Remote AkkuS
2020-12-22
High
SCO Openserver 5.0.7 Command Injection
 CVE CWE Remote Ramikan
Low
SCO Openserver 5.0.7 Cross Site Scripting
 CVE CWE Remote Ramikan
2020-12-20
Med.
Programi Bilanc Build 007 Release 014 31.01.2020 SQL Injection
 CVE CWE Remote Georg Ph E Heise
2020-12-19
Low
Programi Bilanc Build 007 Release 014 31.01.2020 Insecure Downloads
 CVE Remote Georg Ph E Heise
Med.
Programi Bilanc Build 007 Release 014 31.01.2020 Weak Default Password
 CVE Remote Georg Ph E Heise
2020-12-18
Low
Alumni Management System 1.0 Cross Site Scripting
 CVE CWE Remote Valerio Alessandroni
2020-12-17
Med.
Magic Home Pro 1.5.1 Authentication Bypass
 CVE Remote Victor Hanna (Trustwav...
2020-12-16
High
Microsoft Windows DrawIconEx Local Privilege Escalation
 CVE CWE Local timwr
Med.
PrestaShop ProductComments 4.2.0 id_products Time Based Blind SQL Injection
 CVE CWE Remote Frederic ADAM
2020-12-15
High
Alumni Management System 1.0 Shell Upload
 CVE CWE Remote Valerio Alessandroni
Low
PHPJabbers Appointment Scheduler 2.3 Cross Site Scripting
 CVE CWE Remote Andrea Intilangelo
Med.
Cisco ASA 9.14.1.10 / FTD 6.6.0.1 Path Traversal
 CVE CWE Remote Freakyclown
Med.
Macally WIFISD2-2A82 2.000.010 Privilege Escalation
 CVE CWE Local Maximilian Barz
2020-12-14
Low
OpenAsset Digital Asset Management IP Access Control Bypass
 CVE Remote Jack Misiura
Low
OpenAsset Digital Asset Management Cross Site Scripting
 CVE CWE Remote Jack Misiura
High
Aerospike Database UDF Lua Code Execution
 CVE Remote Brendan Coles
Med.
OpenAsset Digital Asset Management SQL Injection
 CVE CWE Remote Jack Misiura
Low
OpenAsset Digital Asset Management Cross Site Request Forgery
 CVE CWE Remote Jack Misiura
Low
OpenAsset Digital Asset Management Insecure Direct Object Reference
 CVE Remote Jack Misiura
Med.
Macally WIFISD2-2A82 2.000.010 Guest to Root Privilege Escalation
 CVE CWE Remote Maximilian Barz and Da...
2020-12-13
Low
Jenkins 2.235.3 Cross Site Scripting
 CVE CWE Remote gx1
Med.
Sharptech Digital Marketing Agency Authentication Bypass
 CVE CWE Remote KingSkrupellos
Copyright 2021, cxsecurity.com

 

Back to Top