Sort by: Updated/Published

Full List of Bugtraq
Risk Topic & Details
2022-12-01
High
Microsoft Exchange ProxyNotShell Remote Code Execution
 CVE Remote Soroush Dalili
Med.
Intel Data Center Manager 4.1.1.45749 Authentication Bypass / Spoofing
 CVE CWE Remote Julien Ahrens
Med.
Hirschmann (Belden) BAT-C2 8.8.1.0R8 Command Injection
 CVE CWE Remote T. Weber
Med.
perfSONAR - v4.x <= v4.4.4 - Open Web Proxy (Unauthenticated)
 CVE Remote Ryan Moore
Med.
perfSONAR - v4.x <= v4.4.5 - Partial Blind CSRF
 CVE Remote Local Ryan Moore
Med.
OX App Suite 7.10.6 Cross Site Scripting / SSRF / Resource Consumption
 CVE CWE Remote Martin Heiland
2022-11-29
High
vBulletin 5.5.2 PHP Object Injection
 Remote EgiX
High
Remote Control Collection Remote Code Execution
 Remote h00die
Low
Concrete CMS 9.1.3 XPATH Injection
 Remote nu11secur1ty
2022-11-26
High
F5 BIG-IP iControl Remote Command Execution
 CWE Remote Ron Bowes
Low
Backdoor.Win32.Serman.a / Unauthenticated Open Proxy
 Remote malvuln
Med.
Helmet Store Showroom 1.0 SQL Injection
 CWE Remote syad
Low
Ecommerce 1.0 Cross Site Scripting / Open Redirect
 CWE Remote nu11secur1ty
Med.
Win32.Ransom.Conti / Crypto Logic Flaw
 Local malvuln
Med.
Backdoor.Win32.Autocrat.b / Weak Hardcoded Credentials
 Local malvuln
Med.
Trojan.Win32.DarkNeuron.gen / Named Pipe Null DACL
 Local malvuln
Med.
Sanitization Management System 1.0 SQL Injection
 CWE Remote nu11secur1ty
2022-11-22
Med.
WordPress BeTheme 26.5.1.4 PHP Object Injection
 CVE CWE Remote Julien Ahrens
High
ChurchInfo 1.2.13-1.3.0 Remote Code Execution
 Remote m4lwhere
Med.
Boa Web Server 0.94.13 / 0.94.14 Authentication Bypass
 Remote George Tsimpidas
2022-11-21
High
Roxy Fileman 1.4.6 Remote Shell Upload
 CVE CWE Remote Hadi Mene
Med.
F5 BIG-IP iControl Cross Site Request Forgery
 CWE Remote Ron Bowes
Med.
ZTE ZXHN-H108NS Authentication Bypass
 Remote George Tsimpidas
High
ZTE ZXHN-H108NS Stack Buffer Overflow / Denial Of Service
 CWE Remote George Tsimpidas
Low
ClicShopping 3.402 Cross Site Scripting
 CWE Remote nu11secur1ty
2022-11-20
Med.
Trojan.Win32.Platinum.gen / Arbitrary Code Execution
 Remote Local malvuln
Med.
Backdoor.Win32.Oblivion.01.a / Insecure Transit Password Disclosure
 Remote malvuln
2022-11-18
High
Gitea Git Fetch Remote Code Execution
 Remote krastanoel
Med.
Remote Code Execution in SimpleMachinesForum 2.1.1
 CVE Remote Sarang Tumne
2022-11-17
Med.
Backdoor.Win32.Quux / Weak Hardcoded Credentials
 Local malvuln
Low
Revenue Collection System 1.0 Cross Site Scripting / Authentication Bypass
 CWE Remote Joe Pollock
Med.
Revenue Collection System 1.0 SQL Injection / Remote Code Execution
 CWE Remote Joe Pollock
2022-11-15
Low
WordPress BeTheme BeCustom 1.0.5.2 Cross Site Request Forgery
 CVE CWE Remote Julien Ahrens
High
Simmeth System GmbH Supplier Manager LFI / SQL Injection / Bypass
 CVE CWE Remote Steffen Robertz
Med.
Remote Code Execution in MODX Revolution V2.8.3-pl
 CVE Remote Sarang Tumne
Med.
Payara Platform Path Traversal
 CVE CWE Remote Michael Baer
Med.
Cisco Secure Email Gateway Malware Detection Evasion
 Remote Mallory
High
VMware NSX Manager XStream Unauthenticated Remote Code Execution
 Remote mr_me
Med.
libxml2 xmlParseNameComplex Integer Overflow
 CVE CWE Local Google Security Resear...
Med.
Backdoor.Win32.RemServ.d / Unauthenticated Remote Command Execution
 Remote malvuln
2022-11-13
High
Open Web Analytics 1.7.3 Remote Code Execution
 CVE Remote Jacob Ebben
High
Remote Code Execution in Abantecart-1.3.2
 CVE Remote Sarang Tumne
2022-11-12
Med.
Carel pCOWeb HVAC BACnet Gateway 2.1.0 Directory Traversal
 CWE Remote LiquidWorm
High
MSNSwitch Firmware MNT.2408 Remote Code Execution
 CVE Remote Eli Fulkerson
Med.
AVEVA InTouch Access Anywhere Secure Gateway 2020 R2 Path Traversal
 CVE CWE Remote Jens Regel
Med.
CVAT 2.0 Server-Side Request Forgery
 CVE Remote Emir Polat
Med.
IOTransfer 4 Unquoted Service Path
 CVE Local BLAY ABU SAFIAN
2022-11-10
Med.
WordPress Blog2Social 6.9.11 Missing Authorization
 CVE Remote Marco Wotschka
High
Backdoor.Win32.Aphexdoor.LiteSock / Remote Stack Buffer Overflow (SEH)
 Remote malvuln
Med.
HEUR:Trojan.MSIL.Agent.gen / Information Disclosure
 Remote malvuln
2022-11-04
Med.
WebKit HTMLSelectElement Use-After-Free
 Remote Google Security Resear...
Med.
Senayan Library Management System 9.5.0 SQL Injection
 CWE Remote nu11secur1ty
2022-11-03
High
Automated Tank Gauge (ATG) Remote Configuration Disclosure
 Remote RoseSecurity
2022-11-02
Med.
Leeloo Multipath Authorization Bypass / Symlink Attack
 CVE CWE Local Qualys Security Adviso...
High
Apache CouchDB Erlang Remote Code Execution
 CVE Remote 1F98D
High
FLIR AX8 1.46.16 Remote Command Injection meta
 CWE Remote Samy Younsi
High
Webmin 1.984 File Manager Remote Code Execution
 CVE Remote jheysel-r7
2022-10-31
High
Ecommerce CodeIgniter Bootstrap 1.0 Cross Site Scripting
 CWE Remote nu11secur1ty
Med.
Alibaba Cloud Workspace 5.1.1-R-20220823.130855 Insecure Direct Object Reference
 Local Erwin Chan
Low
Train Scheduler App 1.0 Insecure Direct Object Reference
 Remote Rohit Sharma
Copyright 2022, cxsecurity.com

 

Back to Top