Sort by: Updated/Published

Filtred: Only with CWE
Risk Topic & Details
2017-07-23
Low
Oracle Web Center 11.1.1.9.0 / 12.2.1.1.0 / 12.2.1.2.0 XSS
 CVE CWE Remote Owais
2017-07-22
High
VICIdial user_authorization Unauthenticated Command Execution
 CWE Remote Brendan
High
Easy Chat Server User Registeration Buffer Overflow
 CWE Local Marco
Med.
NEC Universe UM4730 SQL Injection
 CWE Remote b0x41s
2017-07-21
Low
WordPress Task Manager Pro 1.31 Cross Site Scripting
 CWE Remote 8bitsec
High
Sonicwall SRA 8.1.0.2-14sv gencsr.cgi Command Injection
 CWE xort
High
Sonicwall importlogo/sitecustomization Remote Command Injection
 CWE Remote xort
Med.
Joomla JoomRecipe 1.0.4 Component - Blind SQL Injection Vulnerability
 CWE Remote Teng
High
DotCMS 4.1.1 Shell Upload
 CVE CWE M3@pandas
2017-07-19
Med.
บ้านเว็บไซต์ SQl inj. Vulnerability
 CWE Remote Shigi
Med.
Hashicorp vagrant-vmware-fusion 4.0.20 Privilege Escalation
 CVE CWE Local Mark Wadham
Low
PEGA Platform 7.2 ML0 Missing Access Control / Cross Site Scripting
 CVE CWE Remote Daniel Correa
2017-07-18
High
Sophos Web Appliance 4.3.0.2 trafficType Remote Command Injection
 CWE Remote xort
High
Barracuda Load Balancer Firmware <= 6.0.1.006 - Remote Command Injection
 CVE CWE Remote xort
2017-07-17
Low
Cisco DDR2200 / 2201v1 Insecure Direct Object Reference / Path Traversal
 CWE Remote Matheus Bernardes
Med.
Recruitnex Consultancy Admin Panel Bypass
 CWE Remote Mr.T959
Med.
Three Way System Admin Panel Bypass
 CWE Remote Mr.T959
Med.
Loisoft Technologies Admin Panel Bypass
 CWE Remote Mr.T959
2017-07-16
High
FTPGetter 5.89.0.85 Buffer Overflow
 CWE Remote Paul Purcell
2017-07-14
Med.
Microsoft Windows COM Session Moniker Privilege Escalation
 CVE CWE Remote forshaw
Low
Vodafone Italia Webmail Cross Site Scripting
 CWE Remote theMiddle
Med.
Brahamdeo Technology Admin Panel Bypass
 CWE Remote Mr.T959
Med.
Dasan Networks GPON ONT WiFi Router H64X Series - Privilege Escalation
 CWE Remote Gjoko 'LiquidWorm...
Med.
Dasan Networks GPON ONT WiFi Router H64X Series - Cross-Site Request Forgery
 CWE Remote Gjoko 'LiquidWorm...
2017-07-12
Med.
AGFEO Smart Home ES 5xx / 6xx Authentication Bypass / XSS / Hardcoded Credentials
 CWE Remote SEC
Low
RaidenHTTPD 2.0.44 User-Agent Cross Site Scripting
 CWE Remote sultan albalawi
Low
CMS Showcase - Multiple Reflected Cross-Site Scripting
 CWE Remote Felipe "Renzi&quo...
Med.
VMware Horizons macOS Client Code Injection
 CVE CWE Local Florian Bogner
Low
ObjectPlanet Opinio 7.6.3 Cross Site Scripting
 CVE CWE Remote Kasper Karlsson
2017-07-11
Low
Wordpress Plugin How-Interest Cross-Site Scripting
 CWE Remote @wazehell
Low
kiteworks by Accellion - Reflected XSS
 CWE Remote bRpsd
Low
Rise Ultimate Project Manager 1.8 Cross Site Scripting
 CWE Remote 8bitsec
High
NfSec 1.3.7 / AlienVault USM/OSSIM 5.3.4 Command Injection
 CVE CWE Remote Paul Taylor
High
NfSen <= 1.3.7 / AlienVault OSSIM 5.3.4 - Command Injection
 CVE CWE Remote Paul Taylor
Med.
Schneider Electric Pelco VideoXpert Privilege Escalation
 CWE Local Gjoko 'LiquidWorm...
Med.
Schneider Electric Pelco VideoXpert Core Admin Portal Directory Traversal
 CWE Remote Gjoko 'LiquidWorm...
Med.
Schneider Electric Pelco Sarix/Spectra Cameras CSRF Enable SSH Root Access
 CWE Gjoko 'LiquidWorm...
Low
Schneider Electric Pelco Sarix/Spectra Cameras XSS
 CWE Remote Gjoko 'LiquidWorm...
2017-07-10
Low
Joomla Akobook Component Cross-Site Scripting
 CWE Remote Obsidian Cyber Team
2017-07-09
Low
Microsoft Office 365 Enterprise E3 Insufficient Session Expiration
 CWE Remote Micha Borrmann
2017-07-08
Med.
Microsoft .NET Privilege Escalation
 CWE Remote Stefan Kanthak
2017-07-07
High
Virtuozzo Power Panel (VZPP) 6.1.2 Buffer Over-Read
 CWE Local Sipke Mellema
Low
Barracuda WAF V360 Firmware 8.0.1.014 Support Tunnel Hijack
 CWE Local Matt Bergin
Low
Barracuda WAF V360 Firmware 8.0.1.014 Username / Session ID Leak
 CWE Local Matt Bergin
Med.
Barracuda WAF V360 Firmware 8.0.1.014 Early Boot Root Shell
 CWE Local Matt Bergin
Low
Barracuda WAF V360 Firmware 8.0.1.014 Grub Password Complexity
 CWE Local Matt Bergin
Med.
Barracuda WAF V360 Firmware 8.0.1.014 Credential Disclosure
 CWE Remote Matt Bergin
2017-07-06
Med.
Delegación de Asociaciones SQL Inj Vulnerability
 CWE Remote Shigi
High
PDNS Manager Remote Command Execution
 CWE Remote RedTeam Pentesting
2017-07-05
High
GoAutoDial 3.3 Authentication Bypass / Command Injection
 CVE CWE Remote Chris McCurley
Med.
Yaws 2.0 Cross Site Scripting
 CWE Remote sultan albalawi
2017-07-04
Low
Humax Digital HG100R 2.0.6 XSS / Information Disclosure
 CVE CWE Remote The Gambler
Med.
CMS Made Simple 2.2.1 Local File Inclusion
 CWE Remote Zhiyang Zeng
Low
DoorGets CMS 7.0 Open Redirect
 CVE CWE Remote Rudra Sarkar
Low
Webmin 1.840 Cross Site Scripting
 CVE CWE Remote Andy Tan
Low
Xenforo Forum CMS 1.5.13 Cross Site Scripting
 CWE Remote insecurity
2017-07-03
Med.
iWebSoul CMS SQL Injection Vulnerability
 CWE Remote GhostSecurity
Med.
Royal Custom CMS Admin Login Bypass upload sh3ll
 CVE CWE Remote iranonymous
Med.
Maxikom SQL Injection Vulnerability
 CWE Remote Mr.T959
Med.
Rumahmedia SQL Injection Vulnerability
 CWE Remote Mr.T959
Copyright 2017, cxsecurity.com