Sort by: Updated/Published

Filtred: Only with CWE
Risk Topic & Details
2023-03-19
High
Bitbucket Environment Variable Remote Command Injection
 CWE Remote Shelby Pace
2023-03-14
Med.
Wondershare Dr Fone 12.9.6 Weak Permissions / Privilege Escalation
 CVE CWE Local Thurein Soe
Med.
Apache Tomcat Privilege Escalation
 CVE CWE Remote h00die
Low
Shopify Cross Site Scripting
 CWE Andrey Stoykov
2023-03-12
Low
Real Time Automation 460MCBS 5.2.14 Cross Site Scripting
 CWE Remote Yehia Elghaly
Med.
VX Search 13.8 Unquoted Service Path
 CVE CWE Local Thurein Soe
2023-03-09
Med.
WordPress Real Estate 7 Theme <= 3.3.4 - Abuse of Functionality
 CWE Remote FearZzZz
2023-03-08
Med.
WordPress WoodMart Theme <= 7.1.0 - Unauthenticated Arbitrary Shortcodes Injection
 CVE CWE Remote FearZzZz
Med.
Arris DG3450 AR01.02.056.18_041520_711.NCS.10 XSS / Missing Authentication
 CVE CWE Remote Steffen Robertz
High
CoreDial sipXcom sipXopenfire 21.04 Remote Command Execution / Weak Permissionsundefined
 CVE CWE Remote Systems Research Group
High
Purchase Order Management 1.0 Shell Upload
 CWE nu11secur1ty
2023-03-06
Med.
Barracuda CloudGen WAN OS Command Injection
 CVE CWE Remote Stefan Viehbock
Med.
Purchase Order Management 1.0 SQL Injection
 CWE Remote nu11secur1ty
Low
Purchase Order Management 1.0 Cross Site Scripting
 CWE Remote nu11secur1ty
2023-03-05
Low
WordPress Real Estate 7 Theme <= 3.3.4 - Multiple Cross-Site Request Forgery (CSRF) Vulnerabilities
 CWE Remote FearZzZz
Low
WordPress Real Estate 7 Theme <= 3.3.4 - Unauthenticated Reflected Cross-Site Scripting (XSS)
 CWE Remote FearZzZz
Low
WordPress WoodMart Theme <= 7.1.1 - Theme License Options Change via CSRF
 CWE Remote FearZzZz
2023-03-01
Low
WordPress Real Estate 7 Theme 3.3.4 Cross Site Scripting
 CWE Remote fearzzzz
Low
WordPress WoodMart Theme 7.1.1 Cross Site Request Forgery
 CWE Remote fearzzzz
High
Osprey Pump Controller 1.0.1 pseudonym Command Injection
 CWE Remote LiquidWorm
Med.
Osprey Pump Controller 1.0.1 userName Command Injection
 CWE Remote LiquidWorm
High
Oracle E-Business Suite (EBS) Unauthenticated Arbitrary File Upload
 CVE CWE Remote sf
2023-02-27
High
ABUS Security Camera TVIP 20000-21150 LFI / Remote Code Execution
 CVE CWE Remote d1g
2023-02-26
Med.
Auto Dealer Management System 1.0 SQL Injection
 CVE CWE Remote Navaid Ansari
Med.
Music Gallery Site 1.0 Privilege Escalation / Missing Authentication
 CVE CWE Local Navaid Ansari
Med.
Auto Dealer Management System 1.0 Privilege Escalation
 CWE Local Navaid Ansari
2023-02-24
High
Device Manager Express 7.8.20002.47752 SQL Injection / XSS / Code Execution / Traversal
 CVE CWE Remote Eric Flokstra
Med.
Froxlor 2.0.6 Remote Command Execution
 CWE Remote Askar
Med.
Yoga Class Registration System 1.0 SQL Injection
 CVE CWE Remote Ahmed Ismail
2023-02-22
Med.
Sales Tracker System 1.0 SQL Injection
 CWE Remote Ahmed Ismail
2023-02-19
High
Best POS Management System 1.0 Shell Upload
 CWE Remote Ahmed Ismail
Med.
Demanzo Matrimony 1.5 Cross Site Request Forgery
 CWE Remote indoushka
2023-02-17
Low
Best POS Management System 1.0 Cross Site Scripting
 CWE Remote Ahmed Ismail
Med.
Zabbix Agent 6.2.7 Insecure Permissions / Privilege Escalation
 CWE Local mmg
2023-02-16
High
Atrocore 1.5.25 Shell Upload
 CWE Remote nu11secur1ty
Low
B&R Systems Diagnostics Manager Cross Site Scripting
 CVE CWE Remote Gerhard Hechenberger
Low
B&R Systems Diagnostics Manager Cross Site Scripting
 CVE CWE Remote Gerhard Hechenberger
2023-02-14
Med.
101news By Mayuri K 1.0 SQL Injection
 CWE Remote nu11secur1ty
2023-02-12
High
SOUND4 LinkAndShare Transmitter 1.1.2 Format String Stack Buffer Overflow
 CWE Remote LiquidWorm
2023-02-10
High
Monitorr 1.7.6 Shell Upload
 CVE CWE Remote Achuth V P
2023-02-09
Low
CKSource CKEditor5 35.4.0 Cross Site Scripting
 CVE CWE Remote Manish Pathak
Med.
WordPress Metform Elementor Contact Form Builder 3.1.2 Cross Site Scripting
 CVE CWE Remote Mohammed El Amin
Med.
Material Dashboard 2 SQL Injection
 CWE Remote indoushka
2023-02-06
High
macOS Dirty Cow Arbitrary File Write Local Privilege Escalation
 CVE CWE Local timwr
Med.
Oracle Database 12.1.0.2 Spatial Component Privilege Escalation
 CWE Local Emad Al-Mousa
Med.
Apache Tomcat On Ubuntu Log Init Privilege Escalation
 CVE CWE Local h00die
2023-02-02
High
Control Web Panel Unauthenticated Remote Command Execution
 CVE CWE Remote Spencer McIntyre
Med.
Hikvision Remote Code Execution / XSS / SQL Injection
 CVE CWE Remote Thurein Soe
Med.
eCommerce Marketplace Platform CMS 1.7 SQL Injection
 CWE Remote CraCkEr
Med.
WordPress Quick Restaurant 2.0.2 XSS / CSRF / IDOR / Missing Authorization
 CVE CWE Remote Marco Wotschka
2023-02-01
Low
PHPJabbers Business Directory Script 3.2 Cross Site Scripting
 CWE Remote CraCkEr
Low
Zstore 6.6.0 Cross Site Scripting
 CWE Remote nu11secur1ty
Med.
io_uring Same Type Object Reuse Privilege Escalation
 CVE CWE Local h00die
Med.
vmwgfx Driver File Descriptor Handling Privilege Escalation
 CVE CWE Remote h00die
Med.
Online Eyewear Shop 1.0 SQL Injection
 CWE Remote Muhammad Navaid Zafar ...
2023-01-30
High
Powered By dokumenary.net Remote Code Execution
 CVE CWE Remote UnM@SK
Low
PHPJabbers Travel Tours Script 1.0 Cross Site Scripting
 CWE Remote CraCkEr
Low
PHPJabbers Property Listing Script 3.1 Cross Site Scripting
 CWE Remote CraCkEr
Med.
PHPJabbers Property Listing Script 3.1 SQL Injection
 CWE Remote CraCkEr
2023-01-28
Low
Inout Jobs Portal 2.2.2 Cross Site Scripting
 CWE Remote CraCkEr
Copyright 2023, cxsecurity.com

 

Back to Top