Sort by: Updated/Published

Filtred: Only with CVE
Risk Topic & Details
2021-06-11
Med.
Microsoft SharePoint Server 16.0.10372.20060 Server-Side Request Forgery
 CVE Remote Alex Birnberg
2021-06-09
Low
Ekattor Student Assignment php script-Stored XSS
 CVE Remote Mostafa Farzaneh
2021-06-08
Med.
Rocket.Chat 3.12.1 NoSQL Injection / Code Execution
 CVE CWE Remote enox
High
IcoFX 2.6 Buffer Overflow
 CVE CWE Local Austin Babcock
High
WordPress wpDiscuz 7.0.4 Remote Code Execution
 CVE Remote Fellipe Oliveira
2021-06-07
Med.
Grav CMS 1.7.10 Server-Side Template Injection
 CVE Remote enox
Med.
Wordpress Plugin wpDiscuz 7.0.4 - Arbitrary File Upload (Unauthenticated)
 CVE Remote UnD3sc0n0c1d0
2021-06-06
High
Microsoft RDP Remote Code Execution
 CVE Remote Johnny Yu
Low
FUDForum 3.1.0 Cross Site Scripting
 CVE CWE Remote Piyush Patil
Med.
Powered By SelongWeb.com - SQL INJECTION
 CVE CWE Remote Local KimiHmei7
High
Exim base64d Buffer Overflow
 CVE CWE Remote Johnny Yu
Med.
CHIYU IoT Denial Of Service
 CVE Remote sirpedrotavares
Med.
VMware ESXi OpenSLP Heap Overflow
 CVE CWE Remote Johnny Yu
High
Monstra CMS 3.0.4 Remote Code Execution (Authenticated)
 CVE Remote Ron Jost (hacker5preme...
2021-06-04
High
SuiteCRM Log File Remote Code Execution
 CVE Remote M. Cory Billington
2021-06-03
High
LogonTracer 1.2.0 Remote Code Execution (Unauthenticated)
 CVE Remote g0ldm45k
High
Apache Airflow 1.10.10 Remote Code Execution
 CVE Remote Pepe Berba
2021-06-02
Low
CHIYU IoT Cross Site Scripting
 CVE CWE Remote sirpedrotavares
Low
Shopizer 2.16.0 Multiple Cross-Site Scripting (XSS)
 CVE CWE Remote Marek Toth
Low
Products.PluggableAuthService 2.6.0 Open Redirect
 CVE CWE Remote Piyush Patil
2021-06-01
Med.
Korenix CSRF / Backdoor Accounts / Command Injection / Missing Authentication
 CVE CWE Remote T. Weber
2021-05-31
High
nginx 1.20.0 DNS Resolver Off-By-One Heap Write
 CVE Remote Markus Vervier
High
IPS Community Suite 4.5.4.2 PHP Code Injection
 CVE CWE Remote EgiX
2021-05-30
Low
i-doit 1.15.2 Cross Site Scripting
 CVE CWE Remote nu11secur1ty
High
Trixbox 2.8.0.4 Remote Code Execution
 CVE Remote Ron Jost
Med.
Trixbox 2.8.0.4 Path Traversal
 CVE CWE Remote Ron Jost
2021-05-28
Low
WordPress LifterLMS 4.21.0 Cross Site Scripting
 CVE CWE Remote Captain_hook
High
PHPFusion 9.03.50 Remote Code Execution
 CVE Remote ThienNV
2021-05-27
High
Microsoft Internet Explorer 8/11 and WPAD service Jscript.dll Use-After-Free
 CVE Remote deadlock
Low
CommScope Ruckus IoT Controller 1.7.1.0 Undocumented Account
 CVE CWE Remote Jim Becher
Med.
CommScope Ruckus IoT Controller 1.7.1.0 Hard-Coded Web Application Administrator Password
 CVE CWE Remote Jim Becher
Med.
CommScope Ruckus IoT Controller 1.7.1.0 Hard-Coded API Keys Exposed
 CVE CWE Remote Jim Becher
Low
Pandora FMS 6.0SP3 Cross Site Scripting
 CVE CWE Remote nu11secur1ty
Med.
Postbird 0.8.4 Cross Site Scripting / Local File Inclusion
 CVE CWE Remote Debshubra Chakraborty
2021-05-26
High
Pluck CMS 4.7.13 File Upload Remote Code Execution (Authenticated)
 CVE CWE Remote Ron Jost (Hacker5preme...
2021-05-25
Low
WordPress ReDi Restaurant Reservation 21.0307 Cross Site Scripting
 CVE CWE Remote Bastijn Ouwendijk
2021-05-23
Low
WordPress Plugin Stop Spammers 2021.8 log Reflected Cross-site Scripting (XSS)
 CVE CWE Remote Hosein Vita
Med.
libX11 Insufficient Length Check / Injection
 CVE Local Roman Fiedler
Med.
Microsoft Exchange ProxyLogon Collector
 CVE Remote Ramella Sebastien
2021-05-22
High
Solaris SunSSH 11.0 x86 libpam Remote Root
 CVE Remote Hacker Fantastic
2021-05-21
High
Microsoft Exchange 2019 Unauthenticated Email Download (Metasploit)
 CVE Remote RAMELLA Sébastien
Med.
DELL dbutil_2_3.sys 2.3 Arbitrary Write to Local Privilege Escalation (LPE)
 CVE CWE Local Paolo Stagno aka VoidS...
2021-05-20
High
Microsoft Internet Explorer 8 SetMouseCapture Use-After-Free
 CVE Remote SlidingWindow
2021-05-19
High
Subrion CMS 4.2.1 Shell Upload
 CVE CWE Remote Fellipe Oliveira
2021-05-17
Low
Listeo WordPress Theme <= 1.6.10 - Multiple Authenticated IDOR Vulnerabilities
 CVE CWE Remote m0ze
Low
GiveWP WordPress Plugin <= 2.10.3 - Authenticated Persistent XSS
 CVE CWE Remote m0ze
Low
Bello WordPress Theme <= 1.5.9 - Authenticated XFS
 CVE CWE Remote m0ze
Low
Bello WordPress Theme <= 1.5.9 - Unauthenticated Blind SQL Injection
 CVE CWE Remote m0ze
Low
Goto WordPress Theme 2.0 - Unauthenticated Blind SQL Injection
 CVE CWE Remote m0ze
Low
Mediumish WordPress Theme <= 1.0.47 - Unauthenticated Reflected XSS & XFS
 CVE CWE Remote m0ze
Low
Listeo WordPress Theme <= 1.6.10 - Multiple XSS & XFS vulnerabilities
 CVE CWE Remote m0ze
Low
Bello WordPress Theme <= 1.5.9 - Unauthenticated Reflected XSS & XFS
 CVE CWE Remote m0ze
Low
WP-DB-Backup WordPress Plugin <= 2.3.3 - Authenticated Persistent XSS
 CVE CWE Remote m0ze
High
Dell DBUtil_2_3.sys IOCTL Memory Read / Write
 CVE Remote Spencer McIntyre
2021-05-15
Med.
MikroTik RouterOS Memory Corruption
 CVE Remote Qian Chen
Med.
Hexagon G!nius Auskunftsportal SQL Injection
 CVE CWE Remote Marcel Keiffenheim
High
Microsoft Internet Explorer 8/11 Use-After-Free
 CVE Remote deadlock
Med.
ExifTool DjVu ANT Perl Injection
 CVE Local Justin Steven
High
Chamilo LMS 1.11.14 Remote Code Execution
 CVE Remote M. Cory Billington
2021-05-14
High
c-ares 1.16.0 Use-After-Free
 CVE Local Jann Horn
Copyright 2021, cxsecurity.com

 

Back to Top