Sort by: Updated/Published

Filtred: Only with CVE
Risk Topic & Details
2021-10-20
Med.
SonicWall SMA 10.2.1.0-17sv Password Reset
 CVE Remote Jacob Baines
2021-10-18
High
Mitsubishi Electric / INEA SmartRTU Source Code Disclosure
 CVE Remote Hamit CIBO
High
WordPress Duplicator 1.3.26 Arbitrary File Read
 CVE CWE Remote nam3lum
Med.
Plastic SCM 10.0.16.5622 Insecure Direct Object Reference
 CVE Remote Basavaraj Banakar
2021-10-17
Low
i-Panel Administration System 2.0 Cross Site Scripting
 CVE CWE Remote Forster Chiu
2021-10-14
Med.
Yellowfin Cross Site Scripting / Insecure Direct Object Reference
 CVE CWE Remote Michele Di Bonaventura
2021-10-13
Low
Sonicwall SonicOS 7.0 Host Header Injection
 CVE Remote Ramikan
Med.
Keycloak 12.0.1 Server-Side Request Forgery
 CVE Remote Mayank Deshmukh
2021-10-12
High
Moodle SpellChecker Path Authenticated Remote Command Execution
 CVE CWE Remote h00die
Med.
Moodle Teacher Enrollment Privilege Escalation / Remote Code Execution
 CVE CWE Remote h00die
Med.
Moodle Authenticated Spelling Binary Remote Code Execution
 CVE Remote Brandon Perry
2021-10-09
High
Netfilter x_tables Heap Out-Of-Bounds Write / Privilege Escalation
 CVE CWE Remote Brendan Coles
High
Maian-Cart 3.8 Remote Code Execution
 CVE Remote DreyAnd
Low
django-unicorn 0.35.3 Cross Site Scripting
 CVE CWE Remote Raven Security Associa...
2021-10-06
Med.
Apache HTTP Server 2.4.49 Path Traversal
 CVE CWE Remote Lucas Souza
High
Atlassian Jira Server/Data Center 8.4.0 File Read
 CVE Remote Mayank Deshmukh
High
Atlassian Confluence Server 7.5.1 Arbitrary File Read
 CVE CWE Remote Mayank Deshmukh
High
Dahua Authentication Bypass
 CVE Remote bashis
Med.
WordPress BulletProof Security 5.1 Information Disclosure
 CVE CWE Remote Ron Jost
2021-10-05
Med.
Gatekeeper Bypass Proof Of Concept
 CVE Local Rasmus Sten
High
Open Game Panel Remote Code Execution
 CVE Remote prey
2021-09-30
High
WordPress 5.7 Media Library XML External Entity Injection (XXE) (Authenticated)
 CVE Remote David Utón
Low
PlaceOS 1.2109.1 Open Redirection
 CVE CWE Remote Hamza Khedr
2021-09-29
Low
OpenSIS 8.0 Cross Site Scripting
 CVE CWE Remote Eric Salario
2021-09-28
Med.
WordPress TranslatePress 2.0.8 Cross Site Scripting
 CVE CWE Remote Nosa Shandy
2021-09-27
High
XAMPP 7.4.3 Local Privilege Escalation
 CVE CWE Local Salman Asad
2021-09-23
Med.
TotalAV 5.15.69 - Unquoted Service Path
 CVE Local Andrea Intilangelo
Low
WordPress Advanced Order Export For WooCommerce 3.1.7 Cross Site Scripting
 CVE CWE Remote 0xB9
Low
WordPress Fitness Calculators 1.9.5 Cross Site Request Forgery
 CVE CWE Remote 0xB9
Med.
Gurock Testrail 7.2.0.3014 Improper Access Control
 CVE Remote JohnJHacking
2021-09-20
Med.
WP Google Maps Plugin < 8.1.13 - Authenticated Persistent XSS
 CVE CWE Remote Visse
Med.
WP Google Maps PRO Add-on Plugin < 8.1.12 - Authenticated Persistent XSS
 CVE CWE Remote Visse
2021-09-18
Low
Cloudron 6.2 Cross Site Scripting
 CVE CWE Remote Akiner Kisa
2021-09-17
High
Ulfius Web Framework Remote Memory Corruption
 CVE CWE Remote Jeremy Brown
High
Zenitel AlphaCom XE Audio Server 11.2.3.10 Shell Upload
 CVE CWE Remote Ricardo Jose Ruiz Fern...
Med.
WordPress WooCommerce Booster 5.4.3 Authentication Bypass
 CVE Remote Sebastian Kriesten
2021-09-15
High
AlphaWeb XE File Upload Remote Code Execution (Authenticated)
 CVE CWE Remote Ricardo Ruiz (@ricardo...
2021-09-13
High
Facebook ParlAI 1.0.0 Deserialization of Untrusted Data in parlai
 CVE Remote Abhiram V
Med.
Umbraco CMS 8.9.1 Path traversal and Arbitrary File Write (Authenticated)
 CVE CWE BitTheByte
2021-09-11
High
Compro Technology IP Camera Credential Disclosure
 CVE Remote icekam
2021-09-08
Med.
Ionic Identity Vault 4.7 Android Biometric Authentication Bypass
 CVE Remote Emanuel Duss
2021-09-06
High
BSCW Server Remote Code Execution
 CVE Remote Armin Stock
2021-09-04
High
Geutebruck Remote Command Execution
 CVE CWE Remote Titouan Lazard
Med.
CyberArk Credential Provider Local Cache Decryption
 CVE CWE Local Klayton Monroe
Med.
CyberArk Credential Provider Race Condition / Authorization Bypass
 CVE CWE Remote Klayton Monroe
High
Compro Technology IP Camera Stream Disclosure
 CVE Remote icekam
Med.
Compro Technology IP Camera Screenshot Disclosure
 CVE Remote icekam
2021-09-01
Med.
Linux eBPF ALU32 32-bit Invalid Bounds Tracking Local Privilege Escalation
 CVE CWE Local Grant Willcox
Med.
Moxa Command Injection / Cross Site Scripting / Vulnerable Software
 CVE CWE Remote T. Weber
High
Confluence Server 7.12.4 OGNL Injection Remote Code Execution
 CVE Remote h3v0x
Med.
OpenEMR 6.0.0 Insecure Direct Object Reference
 CVE Remote Allen Enosh Upputori
2021-08-31
Med.
BSCW Server XML Injection
 CVE Remote Armin Stock
High
Strapi 3.0.0-beta.17.7 Remote Code Execution
 CVE Remote David Uton
2021-08-23
Med.
Altova MobileTogether Server 7.3 XML External Entity Injection (XXE)
 CVE Remote RedTeam Pentesting Gmb...
2021-08-21
High
Microsoft Exchange ProxyShell Remote Code Execution
 CVE Remote Spencer McIntyre
Med.
NetModule Router Software Password Handling / Session Fixation
 CVE Remote Gerhard Hechenberger
2021-08-20
Low
Altus Sistemas de Automacao Products CSRF / Command Injection / Hardcoded Credentials
 CVE CWE Remote T. Weber
High
WebKit WebCore::FrameLoader::PolicyChecker::checkNavigationPolicy Heap Use-After-Free
 CVE Remote Google Security Resear...
Low
Xiaomi browser 10.2.4.g Browser Search History Disclosure
 CVE Remote Vishwaraj101
2021-08-18
High
Chrome JS WasmJs::InstallConditionalFeatures Object Corruption
 CVE Remote Google Security Resear...
Copyright 2021, cxsecurity.com

 

Back to Top