Sort by: Updated/Published

Filtred: Only with CWE
Risk Topic & Details
2024-11-17
Low
Calibre-web 0.6.21 Stored XSS
 CVE CWE Remote Pentest-Tools
2024-11-14
Med.
TX Text Control .NET Server For ASP.NET Arbitrary File Read / Write
 CWE Local Filip Palian
Med.
Siemens Energy Omnivise T3000 8.2 SP3 Privilege Escalation / File Download
 CVE CWE Local Andreas Kolbeck
2024-11-12
Med.
TestRail CLI FieldsParser eval Injection
 CWE Remote Devin
2024-11-02
High
Xlibre Xnest 24.1.0 / 24.2.0 Buffer Overflow
 CVE CWE Local Enrico Weigelt
Med.
SmartAgent 1.1.0 SQL Injection
 CWE Remote Alter Prime
2024-10-29
Low
Booked Scheduler 2.8.5 Cross Site Scripting / Open Redirection
 CWE Remote Andrey Stoykov
2024-10-28
Med.
Lawo AG vsm LTC Time Sync Path Traversal
 CVE CWE Remote Sandro Einfeldt
2024-10-25
Low
SofaWiki 3.9.2 Cross Site Scripting
 CWE Remote Chokri Hammedi
High
SofaWiki 3.9.2 Shell Upload
 CWE Remote Chokri Hammedi
Med.
LifterLMS - Blind SQL Injection
 CVE CWE Remote FURKAN KARAARSLAN
2024-10-23
Low
IBM Security Verify Access 10.0.8 Open Redirection
 CVE CWE Remote Giulio Garzia
Med.
ABB Cylon Aspect 3.08.01 persistenceManagerAjax.php Command Injection
 CWE Remote LiquidWorm
High
ABB Cylon Aspect 3.08.01 databaseFileDelete.php Command Injection
 CWE Remote LiquidWorm
2024-10-16
Med.
Ultra Mini HTTPd 1.21 - POST - Denial of Service (DoS)
 CWE Remote Fagner Lima - Aka r3ng...
2024-10-13
Med.
VICIdial 2.14-917a SQL Injection
 CVE CWE Remote Jaggar Henry
Med.
WordPress LMS 4.2.7 SQL Injection
 CVE CWE Remote Avento
Med.
Netman 204 4.05 SQL Injection / Unauthenticated Password Reset
 CVE CWE Remote T. Weber
2024-10-08
Med.
PHP-Nuke Top Module SQL Injection
 CWE Remote Emiliano Febbi
2024-10-07
Low
Book Recording App 2024-09-24 Cross Site Scripting
 CWE Remote Arif Ari
Med.
ManageEngine ADManager Plus Privilege Escalation
 CVE CWE Remote Metin Yunus Kandemir
2024-10-05
High
MD-Pro 1.0.76 Shell Upload / SQL Injection
 CWE Remote Emiliano Febbi
2024-10-02
Med.
Nitro PDF Pro Local Privilege Escalation
 CVE CWE Local Sandro Einfeldt
Low
SeedDMS 6.0.28 Cross Site Scripting
 CVE CWE Remote Marco Nappi
Med.
reNgine 2.2.0 Command Injection (Authenticated)
 CWE Remote Caner Tercan
2024-09-26
Low
Elaine's Realtime CRM Automation 6.18.17 Cross Site Scripting
 CVE CWE Remote Haythem Arfaoui
2024-09-24
Med.
Apple iOS 17.2.1 Screen Time Passcode Retrieval / Mitigation Bypass
 CWE Local SivertPL
Low
Elaine's Realtime CRM Automation 6.18.17 Cross Site Scripting
 CVE CWE Remote Haythem Arfaoui
2024-09-18
Med.
Microsoft Windows TOCTOU Local Privilege Escalation
 CVE CWE Local jheysel-r7
2024-09-16
High
MPlayer Lite r33064 Buffer Overflow
 CWE Local h1ch4m
2024-09-10
Med.
C-MOR Video Surveillance 5.2401 Path Traversal
 CVE CWE Remote Matthias Deeg
Med.
C-MOR Video Surveillance 5.2401 / 6.00PL01 SQL Injection
 CVE CWE Remote Matthias Deeg
2024-09-08
Low
FortiSiem 7.1.3 Stored XSS
 CWE Remote Local Ersin Sarisoy
2024-09-03
Med.
VICIdial Multiple Authenticated SQL Injection
 CWE Remote h00die
Med.
TVT NVMS-1000 Directory Traversal
 CWE Local Dhiraj Mishra
Med.
Vivavis HIGH-LEIT 4 / 5 Privilege Escalation
 CVE CWE Local Lukas Krieg
Med.
Microsoft Exchange Privilege Escalation
 CVE CWE Remote _dirkjan
2024-09-02
High
Apache Karaf Default Credentials Command Execution
 CWE Remote Nicholas Starke
2024-09-01
Med.
Cisco ASA Directory Traversal
 CWE Remote Shelby Pace
Med.
A10 Networks AX Loadbalancer Directory Traversal
 CWE Local xistence
2024-08-27
High
Backdrop CMS 1.27.1 Authenticated Remote Command Execution (RCE)
 CWE Remote Ahmet Ümit BAYRAM
Low
Helpdeskz 2.0.2 Cross Site Scripting
 CWE Remote Md. Sadikul Islam
2024-08-26
Low
OX App Suite Frontend 7.10.6-rev44 Cross Site Scripting
 CVE CWE Remote Martin Heiland
Low
Calibre Web 0.6.21 Cross Site Scripting
 CVE CWE Remote Catalin Iovita
High
Aruba 501 CN12G5W0XX Remote Command Execution
 CWE Remote Hosein Vita
2024-08-18
Med.
Journyx 11.5.4 XML Injection
 CVE CWE Local Jaggar Henry
2024-08-14
Low
WordPress Profilepro 1.3 Cross Site Scripting
 CWE Remote Vuln Seeker Cybersecur...
Low
WordPress MapFig Studio 0.2.1 Cross Site Request Forgery / Cross Site Scripting
 CWE Remote Vuln Seeker Cybersecur...
2024-08-12
High
Open WebUI 0.1.105 File Upload / Path Traversal
 CVE CWE Local Jaggar Henry
2024-08-08
Med.
Dolphin 7.4.2 Blind SQL Injection
 CWE Remote Andrey Stoykov
Low
WP-UserOnline 2.88.0 Stored Cross Site Scripting (XSS) (Authenticated)
 CVE CWE Remote Onur Göğebakan
Med.
WordPress PayPlus Payment Gateway SQL Injection
 CWE Remote j3r1ch0123
2024-08-06
High
Linux DRM drm_file_update_pid() Race Condition / Use-After-Free
 CVE CWE Remote Jann Horn
Med.
Korenix JetPort Series 1.2 Command Injection / Insufficient Authentication
 CVE CWE Remote S. Dietz
2024-08-04
Med.
Devika v1 Path Traversal via snapshot_path
 CVE CWE Local Alperen Ergel
2024-08-03
Med.
ReadyMade Unilevel Ecommerce MLM Blind SQL Injection / Cross Site Scripting
 CWE Remote OoN_Boy
Med.
Leads Manager Tool SQL Injection / Cross Site Scripting
 CWE Remote OoN_Boy
2024-07-26
High
Prison Management System 1.0 Shell Upload
 CWE Remote Muhammet Ali Dak
2024-07-24
High
Perten Instruments Process Plus Software 1.11.6507.0 LFI / Hardcoded Credentials
 CVE CWE Local T. Weber
2024-07-22
High
Ghostscript Command Execution / Format String
 CVE CWE Local Thomas Rinsma
Copyright 2024, cxsecurity.com

 

Back to Top