CXSECURITY.COM Free Security List

Bugtraq Stats

Yesterday: {{ x.iyest }}
Last month: {{ x.imont }}
Current month: {{ x.icurr }}
Total: {{ x.itotal }}

CVE database

Last Update: {{ x.cyest }}
Last month: {{ x.cmont }}
Current month: {{ x.ccur }}
Total CVE: {{ x.ctotal }}

Affected

{{te.id}}. {{te.nameDis}} ({{te.count}})

Random comment

{{ x.title }}
{{ x.auth }}

Voted

{{ x.nameSh }} +{{x.pos}} {{x.neg}}

Check the Bugtraq

2024-06-02
Med.	Online Payment Hub System - SQLi Authentication Bypass Hamit AVSAR
Low	iMLog Cross Site Scripting Gabriel Felipe
Med.	Craft CMS Logs Plugin 3.0.3 Path Traversal (Authenticated) CVE-2022-23409 Steffen Rogge
Med.	Progress Flowmon 12.3.5 Local sudo Privilege Escalation CVE-2024-2389 Dave Yesland
Med.	Akaunting 3.1.8 Client-Side Template Injection tmrswrr
High	Akaunting 3.1.8 Server-Side Template Injection tmrswrr
Low	ORing IAP-420 2.01e Cross Site Scripting / Command Injection Multiple CVE T. Weber
Med.	BWL Advanced FAQ Manager 2.0.3 SQL Injection CVE-2024-32136 Ivan Spiridonov
Med.	Wordpress Theme XStore 9.3.8 SQLi CVE-2024-33559 Abdualhadi khalifa
2024-05-29
High	Eclipse ThreadX Buffer Overflows Multiple CVE Marco Ivaldi
Med.	HAWKI 1.0.0-beta.1 XSS / File Overwrite / Session Fixation Multiple CVE Thorger Jansen
Med.	Siemens CP-XXXX Series Exposed Serial Shell Gerhard Hechenberger
2024-05-28
Med.	VSP Softtech - Sql Injection behrouz mansoori

Dorks

2024-06-02
CVE-2024-36388	MileSight DeviceHub - CWE-305 Missing Authentication for Critical Function
CVE-2024-36389	MileSight DeviceHub - CWE-330 Use of Insufficiently Random Values may allow Authentication Bypass
CVE-2024-36390	MileSight DeviceHub - CWE-20 Improper Input Validation may allow Denial of Service
CVE-2024-36391	MileSight DeviceHub - CWE-320: Key Management Errors may allow Authentication Bypass and Man-In-The-Middle Traffic
CVE-2024-36392	MileSight DeviceHub - CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-5588	A vulnerability was found in itsourcecode Learning Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file processscore.php. The manipulation of the argument LessonID leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and m...
CVE-2024-27776	MileSight DeviceHub - CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') may allow Unauthenticated RCE
CVE-2024-5587	A vulnerability was found in Casdoor up to 1.335.0. It has been classified as problematic. Affected is an unknown function of the file /conf/app.conf of the component Configuration File Handler. The manipulation leads to files or directories accessible. It is possible to launch the attack remotely. The exploit has been disclosed to the public and m...
CVE-2024-2178	A path traversal vulnerability exists in the parisneo/lollms-webui, specifically within the 'copy_to_custom_personas' endpoint in the 'lollms_personalities_infos.py' file. This vulnerability allows attackers to read arbitrary files by manipulating the 'category' and 'name' parameters during the 'Copy to ...
CVE-2024-4344	The Shield Security ?? Smart Bot Blocking & Intrusion Prevention Security plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 19.1.13. This is due to missing or incorrect nonce validation on the exec function. This makes it possible for unauthenticated attackers to disable pin protection for th...

2024-05-28
Med.	VSP Softtech - Sql Injection "Developed By VSP Softtech"	behrouz mansoori
Med.	Designed By San Software - Sql Injection "Designed By San Software"	behrouz mansoori
Med.	Designed By San Software - Blind Sql Injection "Designed By San Software"	behrouz mansoori
2024-05-22
Med.	Webmirchi - Sql Injection "Powered by Webmirchi"	behrouz mansoori
Med.	Axiomatic - Blind Sql Injection "Design by Axiomatic.it"	behrouz mansoori

Quick goto:

Bugtraq The latest CVEs Dorks
Search

Bugtraq

CVEMAP

By Author

CVE Id

CWE Id

By vendors

By products

Are you looking CVE for some product?

Top Vendors:
Apple Microsoft Google Oracle Apache IBM Red Hat HP Adobe Mozilla

Full List of Vendors

Top Products:
Linux Kernel Mac OS X Windows XP Windows 10 Flash Player Adobe Reader PHP JRE JDK
Wordpress Joomla Chrome IE Firefox Safari HTTPD Tomcat Nginx

Full List of Products

Top CWE:
CWE-89 (SQL Injection) CWE-79 (XSS) CWE-119 (Buffer Overflow) CWE-22 (Path Traversal)

Check CWE Dictionary

Donate:

is an open project developed and moderated fully by one independent person.

Help develop the project and make
Donations

Bugtraq Stats

CVE database

Affected

Random comment

Voted

2024-06-02

Med.

Low

Med.

Med.

Med.

High

Low

Med.

Med.

2024-05-29

High

Med.

Med.

2024-05-28

Med.

The latest CVEs

2024-06-02

Dorks

2024-05-28

Med.

Med.

Med.

2024-05-22

Med.

Med.

Quick goto:

Are you looking CVE for some product?

Top Vendors:

Top Products:

Top CWE:

Donate:

is an open project developed and moderated fully by one independent person.

Help develop the project and makeDonations

Help develop the project and make
Donations