Sort by: Updated/Published

Filtred: Only with CWE
Risk Topic & Details
2026-05-23
Med.
Linux nf_tables 6.19.3 Local Privilege Escalation
 CVE CWE Remote Local Aviral Srivastava
2026-05-19
High
Apache HertzBeat 1.8.0 Remote Code Execution
 CWE Remote Brett Gervasoni
Med.
NiceGUI 3.6.1 Path Traversal
 CVE CWE Local Mohammed Idrees Banyam...
2026-05-13
High
telnetd 2.7 Buffer Overflow
 CVE CWE Remote Jeff Barron
High
Ninja Forms Uploads Unauthenticated PHP File Upload
 CVE CWE Remote Sélim Lanouar
2026-05-04
Med.
Linux Kernel Local Privilege Escalation via Memory Handling and Access Control Weakness
 CWE Local RERO
Low
Green Hills INTEGRITY RTOS IPCOMShell TELNET Format String Vulnerability - Realistic Full Chain Attack on F-16 Avionics (Ground Maintenance Scenario)
 CVE CWE Remote Mohammed Idrees Banyam...
Med.
Linux Kernel proc_readdir_de() 6.18-rc5 Local Privilege Escalation
 CVE CWE Local Aviral Srivastava
2026-04-26
Med.
Samsung ONE Integer Overflow in CircleConst Tensor Size Calculation
 CVE CWE Local Mohammed Idrees Banyam...
2026-04-22
Med.
OpenClaw < 2026.3.28 Discord Text Approval Authorization Bypass
 CVE CWE Remote Mohammed Idrees Banyam...
Med.
Throttlestop Kernel Driver Kernel Out-of-Bounds Write Privilege Escalation
 CVE CWE Remote Xavi Beltran
2026-04-19
High
Critical Remote Code Execution Vulnerability in Windows Internet Key Exchange (IKE) Service (CVE-2026-33824)
 CVE CWE Remote RERO
2026-04-14
Med.
WordPress Madara Local File Inclusion
 CVE CWE Remote Beatriz Fresno Naumova
High
Easy File Sharing Web Server v7.2 Buffer Overflow
 CWE Remote Donwor
Med.
NetBT e-Fatura Privilege Escalation
 CVE CWE Remote Seccops
2026-04-09
Low
MaNGOSWebV4 4.0.6 Reflected XSS
 CVE CWE Remote CodeSecLab
High
OctoPrint 1.11.2 File Upload
 CVE CWE Remote prabhatverma.addada
Med.
esm-dev 136 Path Traversal
 CVE CWE Remote Byte Reaper
2026-04-04
High
Linux Kernel mseal Invariant Violation (Linux kernel 6.17-7.0 rc5)
 CVE CWE Local Antonius
2026-04-03
Med.
astrojs/vercel <= 10.0.0 - Unauthenticated x-astro-path Header Path Override
 CVE CWE Remote Mohammed Idrees Banyam...
2026-03-31
Med.
Wavlink WL-WN579X3-C firewall.cgi UPNP Stack-based Buffer Overflow
 CVE CWE Remote Mohammed Idrees Banyam...
2026-03-26
Med.
SiYuan <= v3.6.1 Note unauthenticated arbitrary file read (path traversal)
 CVE CWE Remote Mohammed Idrees Banyam...
High
Tenda AC21 V1.0 V16.03.08.16 - Stack Buffer Overflow in SetNetControlList
 CVE CWE Remote Mohammed Idrees Banyam...
Med.
WWBN AVideo <= 26.0 - Authenticated SQL Injection
 CVE CWE Remote Mohammed Idrees Banyam...
2026-03-21
High
Linux Kernel 5.8 < 5.15.25 - Local Privilege Escalation Exploit
 CVE CWE Local Antonius
Med.
Discourse <= 2026.2.1 Authenticated Missing Authorization
 CVE CWE Remote Mohammed Idrees Banyam...
2026-03-18
Med.
Kanboard <= 1.2.50 Authenticated SQL Injection
 CVE CWE Remote Mohammed Idrees Banyam...
High
Glances <= 4.5.2 OS Command Injection via Mustache Template Fields
 CVE CWE Remote Mohammed Idrees Banyam...
2026-03-17
High
LB-LINK BL-WR9000 V2.4.9 - Stack-based Buffer Overflow in /goform/get_hidessid_cfg
 CVE CWE Remote Mohammed Idrees Banyam...
High
LB-LINK BL-WR9000 V2.4.9 - Unauthenticated / Post-Auth Stack-based Buffer Overflow
 CVE CWE Remote Mohammed Idrees Banyam...
2026-03-15
High
zumba/json-serializer zumba/json-serializer < 3.2.3 RCE
 CVE CWE Remote Mohammed Idrees Banyam...
Med.
Wekan 8.31.0 - 8.33Meteor DDP notificationUsers Sensitive Data Leak
 CVE CWE Remote Mohammed Idrees Banyam...
Low
Splunk Remote Command Execution via Improper Input Validation
 CVE CWE Remote RERO
2026-03-14
High
Microsoft Windows MSHTML Security Feature Bypass Vulnerability
 CVE CWE Remote RERO
High
Qualcomm GPU Driver Memory Corruption Vulnerability in Android Devices
 CVE CWE Remote RERO
Med.
Frappe Framework <14.99.0 and <15.84.0 Unauthenticated SQL Injection
 CVE CWE Remote Mohammed Idrees Banyam...
Low
PyJWT < 2.12.0 crit header bypass / Insufficient crit validation
 CVE CWE Remote Mohammed Idrees Banyam...
2026-03-08
High
PluckCMS 4.7.10 Unrestricted File Upload
 CVE CWE Remote CodeSecLab
High
WeGIA <= 3.6.4 Unauthenticated Admin Authentication Bypass
 CVE CWE Remote Mohammed Idrees Banyam...
High
NocoDB <= 0.301.2 User Enumeration via Password Reset Endpoint
 CVE CWE Remote Mohammed Idrees Banyam...
Med.
Craft CMS 4.x & 5.x RCE via Blocklist Bypass
 CVE CWE Remote Mohammed Idrees Banyam...
High
pac4j-jwt < 4.5.9, < 5.7.9, < 6.3.3 JwtAuthenticator Authentication Bypass via JWE-wrapped PlainJWT
 CVE CWE Remote Mohammed Idrees Banyam...
2026-03-03
High
WeGIA <= 3.6.4 Remote Code Execution via OS Command Injection
 CVE CWE Remote Mohammed Idrees Banyam...
High
WordPress Backup Migration 1.3.7 Remote Command Execution
 CVE CWE Remote DANG
Med.
WeGIA 3.5.0 SQL Injection
 CVE CWE Remote Onur Demir
2026-03-02
High
MaxSite CMS <= 109.1 unauthenticated RCE via run_php plugin
 CVE CWE Remote Mohammed Idrees Banyam...
Low
OpenClaw tools.exec.safeBins <= 2026.2.22 Remote Code Execution
 CVE CWE Remote Mohammed Idrees Banyam...
Low
Statamic CMS < 5.73.11 & < 6.4.0 Stored XSS via SVG Upload Leading to Privilege Escalation
 CVE CWE Remote Mohammed Idrees Banyam...
High
OpenStack Vitrage < 12.0.1 / 13.0.1 Eval Injection Remote Code Execution
 CVE CWE Remote Mohammed Idrees Banyam...
Low
Tenda F453 v1.0.0.3 frmL7ImForm Buffer Overflow
 CVE CWE Remote Mohammed Idrees Banyam...
2026-02-26
High
MLX <= 0.29.3 - Heap-based Buffer Overflow in .npy Parser
 CVE CWE Remote Mohammed Idrees Banyam...
High
Azure AI Language Conversations Authoring SDK < 1.0.0b4 - Remote Code Execution
 CVE CWE Remote Mohammed Idrees Banyam...
Med.
rldns-1.3 remote denial of service
 CVE CWE Remote antonius
2026-02-23
High
Oracle HTTP Server & WebLogic Proxy Plug-in – Unauthenticated Improper Access Control
 CVE CWE Remote RERO
Med.
LangGraph SQLite Checkpoint - SQL Injection via Metadata Filter Key
 CVE CWE Remote Mohammed Idrees Banyam...
2026-02-19
Low
Casdoor 2.55.0 Cross-Site Request Forgery (CSRF)
 CVE CWE Remote Van Lam Nguyen
Med.
grub-btrfs initramfs hook Command Injection
 CVE CWE Local cardosource
Low
Hyland OnBase Timer Service Unauthenticated .NET Remoting RCE
 CVE CWE Remote Mohammed Idrees Banyam...
Low
Repetier-Server <= 1.4.10 - Unauthenticated Path Traversal / Local File Inclusion
 CVE CWE Remote Mohammed Idrees Banyam...
2026-02-15
Low
WordPress Plugin Ajax Upload for Gravity Forms - Arbitrary File Upload
 CVE CWE Remote UnM@SK
Copyright 2026, cxsecurity.com

 

Back to Top