Sort by: Updated/Published

Filtred: Only with CWE
Risk Topic & Details
2025-08-28
Med.
Ultimate Member WordPress Plugin 2.6.6 Privilege Escalation
 CVE CWE Local Gurjot Singh
Med.
Ghost CMS 5.59.1 Arbitrary File Read
 CVE CWE Remote ibrahimsql
2025-08-20
Low
RiteCMS 3.0.0 Reflected Cross Site Scripting
 CVE CWE Remote GURJOT SINGH
Med.
Tenda AC20 16.03.08.12 Command Injection
 CVE CWE Remote Anonymous
2025-08-11
Med.
SugarCRM 14.0.0 SSRF/Code Injection
 CVE CWE Remote Egidio Romano
2025-07-31
High
White Star Software Protop 4.4.2-2024-11-27 Local File Inclusion
 CVE CWE Remote Imraan Khan
2025-07-28
Med.
Sudo chroot 1.9.17 Local Privilege Escalation
 CVE CWE Local Stratascale
2025-07-17
High
NodeJS 24.x Path Traversal
 CVE CWE Remote Abdualhadi khalifa
2025-07-12
High
SAP NetWeaver S/4HANA ABAP Code Execution
 CWE Remote Local Raschin Tavakoli
2025-07-02
High
Java-springboot-codebase 1.1 Arbitrary File Read
 CVE CWE Remote d3sca
2025-06-29
Med.
Grandstream GSD3710 1.0.11.13 Stack Overflow
 CVE CWE Remote Pepelux
2025-06-26
Med.
Litespeed Cache WordPress Plugin 6.3.0.1 Privilege Escalation
 CVE CWE Remote Milad Karimi
Low
Parrot and DJI variants Drone OSes Kernel Panic Exploit
 CVE CWE Local Mohammed Idrees Banyam...
Med.
macOS LaunchDaemon iOS 17.2 Privilege Escalation
 CVE CWE Local Mohammed Idrees Banyam...
2025-06-20
Med.
MOBOTIX IP cameras Unauthenticated access
 CWE Remote hasanwlip
2025-06-15
High
Freefloat FTP Server 1.0 Remote Buffer Overflow
 CVE CWE Remote Fernando
Low
Kentico Xperience 13.0.178 Cross Site Scripting
 CVE CWE Remote Alex Messham
High
Microsoft Windows 11 Version 24H2 Cross Device Service Elevation of Privilege
 CVE CWE Local Mohammed Idrees Banyam...
2025-06-10
Med.
WordPress Digits Plugin 8.4.6.1 Authentication Bypass via OTP Bruteforcing
 CVE CWE Remote Saleh Tarawneh
2025-06-02
Med.
ABB Cylon Aspect 3.08.03 Guest2Root Privilege Escalation
 CWE Remote Gjoko 'LiquidWorm...
2025-05-29
Med.
Campcodes Online Hospital Management System 1.0 SQL Injection
 CVE CWE Remote Carine Constantino
2025-05-27
Med.
EMBRYO CMS by Pyxis Studio - Authenticated SQL Injection on www.embryohotel.com
 CWE Remote 0x6ick
2025-05-24
Low
Casdoor 1.901.0 Cross-Site Request Forgery (CSRF)
 CWE Remote Van Lam Nguyen
Low
SIAKAD STEKOM - Stored XSS Vulnerability(Login Page)
 CWE Remote 0x6ick
2025-05-19
Low
Tiiwee X1 Alarm System Replay Attack
 CWE Remote Sebastian
2025-05-16
High
DiskBoss Enterprise 7.4.28 Remote Buffer Overflow
 CWE Remote Fernando Mengali
2025-05-13
High
TP-Link VN020 F3v(T) TT_V6.2.1021) DHCP Stack Buffer Overflow
 CVE CWE Remote Mohamed Maatallah
2025-05-09
High
Ruckus IoT Controller 1.7.1.0 Undocumented Backdoor Account
 CVE CWE Remote korelogic
2025-05-06
Low
ERPNext 14.82.1 Account Takeover via Cross-Site Request Forgery (CSRF)
 CVE CWE Remote Ahmed Thaiban
2025-05-05
Low
KodExplorer 4.52 Open Redirect
 CWE Remote Rahad Chowdhury
2025-05-01
Med.
Inventio Lite 4 SQL Injection
 CVE CWE Remote pointedsec
Med.
Zabbix 7.0.0 SQL Injection
 CVE CWE Remote Leandro Dias Barata
Med.
Smart Manager 8.27.0 Post-Authenticated SQL Injection
 CVE CWE Remote xbz0n
2025-04-24
Med.
KiviCare Clinic & Patient Management System 3.6.4 Unauthenticated SQL Injection
 CVE CWE Remote  Gözet
2025-04-22
High
TP-Link VN020 F3v(T) TT_V6.2.1021 Buffer Overflow Memory Corruption
 CVE CWE Remote Mohamed Maatallah
Med.
NagVis 1.9.33 Arbitrary File Read
 CVE CWE Remote xerosec
2025-04-16
Low
CodeAstro Online Railway Reservation System 1.0 Cross Site Scripting (XSS)
 CVE CWE Remote Raj Nandi
2025-04-15
Med.
Gnuboard5 5.3.2.8 SQL Injection
 CVE CWE Remote CodeSecLab
Med.
IBMi Navigator 7.5 HTTP Security Token Bypass
 CVE CWE Remote hyp3rlinx
High
GestioIP 3.5.7 Remote Command Execution (RCE)
 CVE CWE Remote m4xth0r
2025-04-10
Med.
Feng Office 3.11.1.2 SQL Injection
 CWE Remote Andrey Stoykov
2025-04-09
Low
PZ Frontend Manager WordPress Plugin 1.0.5 Cross Site Request Forgery (CSRF)
 CWE Remote Vuln Seeker Cybersecur...
2025-04-06
Low
Exclusive Addons for Elementor 2.6.9 Stored Cross-Site Scripting
 CVE CWE Remote Wordfence Security Tea...
Low
Gitea 1.22.0 Stored XSS
 CVE CWE Remote Catalin Iovita
High
Royal Elementor Addons and Templates 1.3.78 Unauthenticated Arbitrary File Upload
 CVE CWE Remote Sheikh Mohammad Hasan
Low
Reservit Hotel 2.1 Stored Cross-Site Scripting (XSS)
 CVE CWE Remote Ilteris Kaan Pehlivan
2025-04-01
Low
Zoltrix Modem - 'tools_admin_1' Cross site request forgery
 CWE Remote Amir Hossein Jamshidi
2025-03-25
Med.
Aztech DSL5005EN Router - 'sysAccess.asp' Admin Password Change (Unauthenticated)
 CWE Remote Amir Hossein Jamshidi
Med.
AEGON LIFE v1.0 Life Insurance Management System SQL injection vulnerability.
 CVE CWE Remote Aslam Anwar Mahimkar
2025-03-22
Med.
TeamPass 3.0.0.21 SQL Injection
 CVE CWE Remote Max Meyer
Med.
Jasmin Ransomware SQL Injection Login Bypass
 CWE Remote Buğra Enis Dönmez
2025-03-10
Med.
JUX Real Estate 3.4.0 - SQL Injection
 CVE CWE Remote CraCkEr
Low
JUX Real Estate 3.4.0 - Multiple RXSS
 CVE CWE Remote CraCkEr
2025-02-27
Med.
Library-Card-System V 1.0 | Add Picture/Signature - signup.php | Unrestricted File Upload | Found By Maloy Roy Orko
 CVE CWE Remote Maloy Roy Orko
Med.
Needyamin | Library-Card-System 1.0 | card.php?id= SQL Injection | Found By Maloy Roy Orko
 CVE CWE Remote Maloy Roy Orko
2025-02-24
Low
needyamin Library Card System Registration Page signup.php cross site scripting
 CVE CWE Remote Maloy Roy Orko
Low
Image_Gallery | Add Gallery- admin/gallery.php | Unrestricted File Upload | Found By Maloy Roy Orko
 CVE CWE Remote Maloy Roy Orko
Low
Image_Gallery | view.php?username= | Cross Site Scripting (Reflected XSS) | Found By Maloy Roy Orko
 CVE CWE Remote Maloy Roy Orko
Med.
Library-Card-System | SQL Injection Admin Login Bypass In admin.php | Found By Maloy Roy Orko
 CVE CWE Remote Maloy Roy Orko
2025-01-25
Med.
Iranian Cyber Police "FATA.GOV.IR" has an SQL Injection vulnerability
 CWE Remote E1.Coders
Copyright 2025, cxsecurity.com

 

Back to Top