Sort by: Updated/Published

Filtred: Only with CVE
Risk Topic & Details
2026-04-09
High
Docker Desktop 4.44.3 Unauthenticated API Exposure
 CVE Remote OilSeller2001
Low
MaNGOSWebV4 4.0.6 Reflected XSS
 CVE CWE Remote CodeSecLab
Med.
Grafana 11.6.0 SSRF
 CVE Remote Beatriz Fresno Naumova
High
OctoPrint 1.11.2 File Upload
 CVE CWE Remote prabhatverma.addada
Med.
esm-dev 136 Path Traversal
 CVE CWE Remote Byte Reaper
2026-04-04
High
Linux Kernel mseal Invariant Violation (Linux kernel 6.17-7.0 rc5)
 CVE CWE Local Antonius
2026-04-03
Med.
astrojs/vercel <= 10.0.0 - Unauthenticated x-astro-path Header Path Override
 CVE CWE Remote Mohammed Idrees Banyam...
Med.
Microsoft SQL Server Privilege Elevation Through
 CVE Remote Emad Al-Mousa
2026-03-31
High
FreeScout Unauthenticated RCE via ZWSP .htaccess Bypass
 CVE Remote offensiveee
Med.
Wavlink WL-WN579X3-C firewall.cgi UPNP Stack-based Buffer Overflow
 CVE CWE Remote Mohammed Idrees Banyam...
2026-03-26
Low
Payara Server Cross Site Scripting
 CVE Remote DeepSecurity Research
Med.
SiYuan <= v3.6.1 Note unauthenticated arbitrary file read (path traversal)
 CVE CWE Remote Mohammed Idrees Banyam...
High
Tenda AC21 V1.0 V16.03.08.16 - Stack Buffer Overflow in SetNetControlList
 CVE CWE Remote Mohammed Idrees Banyam...
Med.
WWBN AVideo <= 26.0 - Authenticated SQL Injection
 CVE CWE Remote Mohammed Idrees Banyam...
2026-03-21
High
Linux Kernel 5.8 < 5.15.25 - Local Privilege Escalation Exploit
 CVE CWE Local Antonius
Med.
Discourse <= 2026.2.1 Authenticated Missing Authorization
 CVE CWE Remote Mohammed Idrees Banyam...
2026-03-18
Med.
Kanboard <= 1.2.50 Authenticated SQL Injection
 CVE CWE Remote Mohammed Idrees Banyam...
High
Glances <= 4.5.2 OS Command Injection via Mustache Template Fields
 CVE CWE Remote Mohammed Idrees Banyam...
2026-03-17
High
LB-LINK BL-WR9000 V2.4.9 - Stack-based Buffer Overflow in /goform/get_hidessid_cfg
 CVE CWE Remote Mohammed Idrees Banyam...
High
LB-LINK BL-WR9000 V2.4.9 - Unauthenticated / Post-Auth Stack-based Buffer Overflow
 CVE CWE Remote Mohammed Idrees Banyam...
2026-03-15
High
zumba/json-serializer zumba/json-serializer < 3.2.3 RCE
 CVE CWE Remote Mohammed Idrees Banyam...
Med.
Wekan 8.31.0 - 8.33Meteor DDP notificationUsers Sensitive Data Leak
 CVE CWE Remote Mohammed Idrees Banyam...
Low
Splunk Remote Command Execution via Improper Input Validation
 CVE CWE Remote RERO
2026-03-14
High
Microsoft Windows MSHTML Security Feature Bypass Vulnerability
 CVE CWE Remote RERO
High
Qualcomm GPU Driver Memory Corruption Vulnerability in Android Devices
 CVE CWE Remote RERO
Med.
Frappe Framework <14.99.0 and <15.84.0 Unauthenticated SQL Injection
 CVE CWE Remote Mohammed Idrees Banyam...
Low
PyJWT < 2.12.0 crit header bypass / Insufficient crit validation
 CVE CWE Remote Mohammed Idrees Banyam...
2026-03-08
High
PluckCMS 4.7.10 Unrestricted File Upload
 CVE CWE Remote CodeSecLab
High
Python-Multipart <0.0.22 - Path Traversal / Arbitrary File Write (CVE-2026-24486)
 CVE Remote cardosource
High
WeGIA <= 3.6.4 Unauthenticated Admin Authentication Bypass
 CVE CWE Remote Mohammed Idrees Banyam...
High
NocoDB <= 0.301.2 User Enumeration via Password Reset Endpoint
 CVE CWE Remote Mohammed Idrees Banyam...
Med.
Craft CMS 4.x & 5.x RCE via Blocklist Bypass
 CVE CWE Remote Mohammed Idrees Banyam...
High
pac4j-jwt < 4.5.9, < 5.7.9, < 6.3.3 JwtAuthenticator Authentication Bypass via JWE-wrapped PlainJWT
 CVE CWE Remote Mohammed Idrees Banyam...
2026-03-03
High
WeGIA <= 3.6.4 Remote Code Execution via OS Command Injection
 CVE CWE Remote Mohammed Idrees Banyam...
High
WordPress Backup Migration 1.3.7 Remote Command Execution
 CVE CWE Remote DANG
Med.
WeGIA 3.5.0 SQL Injection
 CVE CWE Remote Onur Demir
2026-03-02
Med.
Windows Notepad App (Store Version) - Remote/Local Code Execution via Markdown Link
 CVE Remote nu11secur1ty
High
MaxSite CMS <= 109.1 unauthenticated RCE via run_php plugin
 CVE CWE Remote Mohammed Idrees Banyam...
Low
OpenClaw tools.exec.safeBins <= 2026.2.22 Remote Code Execution
 CVE CWE Remote Mohammed Idrees Banyam...
Low
Statamic CMS < 5.73.11 & < 6.4.0 Stored XSS via SVG Upload Leading to Privilege Escalation
 CVE CWE Remote Mohammed Idrees Banyam...
High
OpenStack Vitrage < 12.0.1 / 13.0.1 Eval Injection Remote Code Execution
 CVE CWE Remote Mohammed Idrees Banyam...
Low
Tenda F453 v1.0.0.3 frmL7ImForm Buffer Overflow
 CVE CWE Remote Mohammed Idrees Banyam...
2026-02-26
High
Icinga for Windows 1.13.3 - 'key_maker.py' Incorrect Default Permissions Private Key Exposure
 CVE Local nu11secur1ty
High
MLX <= 0.29.3 - Heap-based Buffer Overflow in .npy Parser
 CVE CWE Remote Mohammed Idrees Banyam...
High
Azure AI Language Conversations Authoring SDK < 1.0.0b4 - Remote Code Execution
 CVE CWE Remote Mohammed Idrees Banyam...
Med.
rldns-1.3 remote denial of service
 CVE CWE Remote antonius
2026-02-23
High
Oracle HTTP Server & WebLogic Proxy Plug-in – Unauthenticated Improper Access Control
 CVE CWE Remote RERO
High
FreeBSD rtsold 15.x Remote Code Execution via DNSSL
 CVE Remote Lukas Johannes Möller
Med.
FileBrowser ≤ v2.57.0 - Path-Based Access Control Bypass via Multiple Leading Slashes in URL (Authenticated Authorization Bypass)
 CVE Remote Mohammed Idrees Banyam...
Low
Icinga for Windows 1.13.3 - Incorrect Default Permissions Private Key Exposure
 CVE Local nu11secur1ty
Med.
LangGraph SQLite Checkpoint - SQL Injection via Metadata Filter Key
 CVE CWE Remote Mohammed Idrees Banyam...
High
Google Chrome < 145.0.7632.75 - CSSFontFeatureValuesMap Use-After-Free
 CVE Remote nu11secur1ty
2026-02-19
Low
Casdoor 2.55.0 Cross-Site Request Forgery (CSRF)
 CVE CWE Remote Van Lam Nguyen
Med.
grub-btrfs initramfs hook Command Injection
 CVE CWE Local cardosource
Low
Hyland OnBase Timer Service Unauthenticated .NET Remoting RCE
 CVE CWE Remote Mohammed Idrees Banyam...
Low
Repetier-Server <= 1.4.10 - Unauthenticated Path Traversal / Local File Inclusion
 CVE CWE Remote Mohammed Idrees Banyam...
2026-02-15
Low
WordPress Plugin Ajax Upload for Gravity Forms - Arbitrary File Upload
 CVE CWE Remote UnM@SK
Low
Roundcube Webmail DOM-based XSS Exploit via SVG href Attribute
 CVE CWE Remote Mohammed Idrees Banyam...
2026-02-14
High
motionEye 0.43.1b4 RCE
 CVE Remote prabhatverma47
High
Siklu EtherHaul Series EH-8010 Remote Command Execution
 CVE CWE Remote semaja2
Copyright 2026, cxsecurity.com

 

Back to Top