CXSECURITY.COM Free Security List

Bugtraq Stats

Yesterday: {{ x.iyest }}
Last month: {{ x.imont }}
Current month: {{ x.icurr }}
Total: {{ x.itotal }}

CVE database

Last Update: {{ x.cyest }}
Last month: {{ x.cmont }}
Current month: {{ x.ccur }}
Total CVE: {{ x.ctotal }}

Affected

{{te.id}}. {{te.nameDis}} ({{te.count}})

Random comment

{{ x.title }}
{{ x.auth }}

Voted

{{ x.nameSh }} +{{x.pos}} {{x.neg}}

Check the Bugtraq

2024-06-04
Low	Sitefinity 15.0 Cross Site Scripting CVE-2023-27636 Aldi Saputra Wahyudi
High	FreePBX 16 Remote Code Execution Cold z3ro
High	WBCE CMS 1.6.2 Remote Code Execution Ahmet Umit Bayram
High	Dotclear 2.29 Remote Code Execution Ahmet Umit Bayram
High	Serendipity 2.5.0 Remote Code Execution Ahmet Umit Bayram
2024-06-02
Med.	Online Payment Hub System - SQLi Authentication Bypass Hamit AVSAR
Low	iMLog Cross Site Scripting Gabriel Felipe
Med.	Craft CMS Logs Plugin 3.0.3 Path Traversal (Authenticated) CVE-2022-23409 Steffen Rogge
Med.	Progress Flowmon 12.3.5 Local sudo Privilege Escalation CVE-2024-2389 Dave Yesland
Med.	Akaunting 3.1.8 Client-Side Template Injection tmrswrr
High	Akaunting 3.1.8 Server-Side Template Injection tmrswrr
Low	ORing IAP-420 2.01e Cross Site Scripting / Command Injection Multiple CVE T. Weber
Med.	BWL Advanced FAQ Manager 2.0.3 SQL Injection CVE-2024-32136 Ivan Spiridonov

Dorks

2024-06-05
CVE-2022-28652	~/.config/apport/settings parsing is vulnerable to "billion laughs" attack
CVE-2022-28654	is_closing_session() allows users to fill up apport.log
CVE-2022-28655	is_closing_session() allows users to create arbitrary tcp dbus connections
CVE-2022-28656	is_closing_session() allows users to consume RAM in the Apport process
CVE-2022-28657	Apport does not disable python crash handler before entering chroot
CVE-2022-28658	Apport argument parsing mishandles filename splitting on older kernels resulting in argument spoofing
CVE-2024-30889	Cross Site Scripting vulnerability in audimex audimexEE v.15.1.2 and fixed in 15.1.3.9 allows a remote attacker to execute arbitrary code via the service, method, widget_type, request_id, payload parameters.
CVE-2024-36121	netty-incubator-codec-ohttp is the OHTTP implementation for netty. BoringSSLAEADContext keeps track of how many OHTTP responses have been sent and uses this sequence number to calculate the appropriate nonce to use with the encryption algorithm. Unfortunately, two separate errors combine which would allow an attacker to cause the sequence number t...
CVE-2024-36675	LyLme_spage v1.9.5 is vulnerable to Server-Side Request Forgery (SSRF) via the get_head function.
CVE-2024-5635	A vulnerability was found in itsourcecode Bakery Online Ordering System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file index.php. The manipulation of the argument txtsearch leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may ...

2024-05-28
Med.	VSP Softtech - Sql Injection "Developed By VSP Softtech"	behrouz mansoori
Med.	Designed By San Software - Sql Injection "Designed By San Software"	behrouz mansoori
Med.	Designed By San Software - Blind Sql Injection "Designed By San Software"	behrouz mansoori
2024-05-22
Med.	Webmirchi - Sql Injection "Powered by Webmirchi"	behrouz mansoori
Med.	Axiomatic - Blind Sql Injection "Design by Axiomatic.it"	behrouz mansoori

Quick goto:

Bugtraq The latest CVEs Dorks
Search

Bugtraq

CVEMAP

By Author

CVE Id

CWE Id

By vendors

By products

Are you looking CVE for some product?

Top Vendors:
Apple Microsoft Google Oracle Apache IBM Red Hat HP Adobe Mozilla

Full List of Vendors

Top Products:
Linux Kernel Mac OS X Windows XP Windows 10 Flash Player Adobe Reader PHP JRE JDK
Wordpress Joomla Chrome IE Firefox Safari HTTPD Tomcat Nginx

Full List of Products

Top CWE:
CWE-89 (SQL Injection) CWE-79 (XSS) CWE-119 (Buffer Overflow) CWE-22 (Path Traversal)

Check CWE Dictionary

Donate:

is an open project developed and moderated fully by one independent person.

Help develop the project and make
Donations

Bugtraq Stats

CVE database

Affected

Random comment

Voted

2024-06-04

Low

High

High

High

High

2024-06-02

Med.

Low

Med.

Med.

Med.

High

Low

Med.

The latest CVEs

2024-06-05

Dorks

2024-05-28

Med.

Med.

Med.

2024-05-22

Med.

Med.

Quick goto:

Are you looking CVE for some product?

Top Vendors:

Top Products:

Top CWE:

Donate:

is an open project developed and moderated fully by one independent person.

Help develop the project and makeDonations

Help develop the project and make
Donations