Welcome to cxsecurity. enjoy
Bugtraq Stats

Yesterday: {{ x.iyest }}
Last month: {{ x.imont }}
Current month: {{ x.icurr }}
Total: {{ x.itotal }}

Best Hackers:
{{ te.id }}. {{te.nameDis}}
CVE database

Last Update: {{ x.cyest }}
Last month: {{ x.cmont }}
Current month: {{ x.ccur }}
Total CVE: {{ x.ctotal }}

Affected
{{te.id}}. {{te.nameDis}} ({{te.count}})
Random comment
{{ x.title }}
{{ x.auth }}
{{ x.text }}
Voted
{{ x.nameSh }} +{{x.pos}} {{x.neg}}

2024-06-04
Low
Sitefinity 15.0 Cross Site Scripting CVE-2023-27636
Aldi Saputra Wahyudi
High
FreePBX 16 Remote Code Execution
Cold z3ro
High
WBCE CMS 1.6.2 Remote Code Execution
Ahmet Umit Bayram
High
Dotclear 2.29 Remote Code Execution
Ahmet Umit Bayram
High
Serendipity 2.5.0 Remote Code Execution
Ahmet Umit Bayram
2024-06-02
Med.
Online Payment Hub System - SQLi Authentication Bypass
Hamit AVSAR
Low
iMLog Cross Site Scripting
Gabriel Felipe
Med.
Craft CMS Logs Plugin 3.0.3 Path Traversal (Authenticated) CVE-2022-23409
Steffen Rogge
Med.
Progress Flowmon 12.3.5 Local sudo Privilege Escalation CVE-2024-2389
Dave Yesland
Med.
Akaunting 3.1.8 Client-Side Template Injection
tmrswrr
High
Akaunting 3.1.8 Server-Side Template Injection
tmrswrr
Low
ORing IAP-420 2.01e Cross Site Scripting / Command Injection Multiple CVE
T. Weber
Med.
BWL Advanced FAQ Manager 2.0.3 SQL Injection CVE-2024-32136
Ivan Spiridonov

The latest CVEs

Dorks

2024-06-05
CVE-2020-27354
Rejected reason: CVE ID was once reserved, but never used.
CVE-2020-27355
Rejected reason: CVE ID was once reserved, but never used.
CVE-2020-35153
Rejected reason: CVE ID was once reserved, but never used.
CVE-2020-35154
Rejected reason: CVE ID was once reserved, but never used.
CVE-2024-4084
A Server-Side Request Forgery (SSRF) vulnerability exists in the latest version of mintplex-labs/anything-llm, allowing attackers to bypass the official fix intended to restrict access to intranet IP addresses and protocols. Despite efforts to filter out intranet IP addresses starting with 192, 172, 10, and 127 through regular expressions and limit...
CVE-2024-5636
A vulnerability was found in itsourcecode Bakery Online Ordering System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file report/index.php. The manipulation of the argument procduct leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be ...
CVE-2024-5317
The Newsletter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'np1' parameter in all versions up to, and including, 8.3.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user acc...
CVE-2024-5483
The LearnPress ?? WordPress LMS Plugin plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.2.6.8 due to incorrect implementation of get_items_permissions_check function. This makes it possible for unauthenticated attackers to extract basic information about website users, including their emai...
CVE-2024-5262
Files or Directories Accessible to External Parties vulnerability in smb server in ProjectDiscovery Interactsh allows remote attackers to read/write any files in the directory and subdirectories of where the victim runs interactsh-server via anonymous login.
CVE-2022-28652
~/.config/apport/settings parsing is vulnerable to "billion laughs" attack
2024-05-28
Med.
VSP Softtech - Sql Injection
"Developed By VSP Softtech"
 behrouz mansoori
Med.
Designed By San Software - Sql Injection
"Designed By San Software"
 behrouz mansoori
Med.
Designed By San Software - Blind Sql Injection
"Designed By San Software"
 behrouz mansoori
2024-05-22
Med.
Webmirchi - Sql Injection
"Powered by Webmirchi"
 behrouz mansoori
Med.
Axiomatic - Blind Sql Injection
"Design by Axiomatic.it"
 behrouz mansoori
Quick goto:

Bugtraq The latest CVEs Dorks
Search

Are you looking CVE for some product?

Top Vendors:

Apple Microsoft Google Oracle Apache IBM Red Hat HP Adobe Mozilla
 
Full List of Vendors

Top Products:

Linux Kernel Mac OS X Windows XP Windows 10 Flash Player Adobe Reader PHP JRE JDK
Wordpress Joomla Chrome IE Firefox Safari HTTPD Tomcat Nginx
 

Full List of Products

Top CWE:

CWE-89 (SQL Injection) CWE-79 (XSS) CWE-119 (Buffer Overflow) CWE-22 (Path Traversal)
 
Check CWE Dictionary

Donate:
is an open project developed and moderated fully by one independent person.
Help develop the project and make
Donations
Copyright 2024, cxsecurity.com

 

Back to Top