Sort by: Updated/Published

Full List of Bugtraq
Risk Topic & Details
2023-03-22
Med.
Adobe Connect 11.4.5 / 12.1.5 Local File Disclosure
 CVE Remote Local h4shur
Med.
101+ News Portal 1.0 SQL Injection
 CWE Remote Abdulhakim Oner
Low
Yoga Class Registration System 1.0 Cross Site Scripting
 CWE Remote Abdulhakim Oner
Med.
Yoga Class Registration 1.0 SQL Injection
 CWE Remote nu11secur1ty
Med.
Linksys AX3200 V1.1.00 Command Injection
 CVE CWE Remote Ahmed Alroky
2023-03-19
Med.
LARAVEL VEBTO MULTIPLE FILE UPLOAD
 Remote Khunerable
Med.
Microsoft User Account Control Nuances
 Remote Stefan Kanthak
Med.
Microsoft SQL Server 2014 / 2016 / 2017 / 2019 / 2022 Audit Logging Failure
 Remote Emad Al-Mousa
High
Bitbucket Environment Variable Remote Command Injection
 CWE Remote Shelby Pace
Med.
Riello UPS Restricted Shell Bypass
 Remote Ricardo Jose Ruiz Fern...
2023-03-15
Low
Medicine Tracker System - XSS
 Remote Eren Arslan
Med.
WordPress Profile Builder 3.9.0 Missing Authorization
 CVE Remote Lana Codes
Med.
Oracle DB Broken PDB Isolation / Metadata Exposure
 CVE Remote Emad Al-Mousa
2023-03-14
Med.
Wondershare Dr Fone 12.9.6 Weak Permissions / Privilege Escalation
 CVE CWE Local Thurein Soe
Med.
Apache Tomcat Privilege Escalation
 CVE CWE Remote h00die
High
Web-Based Student Clearance System - XXE Injection
 Remote Eren Arslan
Low
Employee Payslip - XSS Polyglots
 Remote Eren Arslan
High
Web-Based Student Clearance System - XXE Injection
 Remote Eren Arslan
Low
Shopify Cross Site Scripting
 CWE Andrey Stoykov
2023-03-12
Low
Smart Hospital : Hospital Management System - Multiple XSS
 Remote Eren Arslan
Low
Real Time Automation 460MCBS 5.2.14 Cross Site Scripting
 CWE Remote Yehia Elghaly
Low
 Anonymous
Med.
VX Search 13.8 Unquoted Service Path
 CVE CWE Local Thurein Soe
Med.
Webpower UPS 5.53 Denial Of Service
 Remote Yehia Elghaly
Med.
Online Graduate Tracer System for College of ICT Alumni - Vulnerability SQLi + XSS
 Remote Eren Arslan
Med.
Helmet Store Showroom Site - XXE Injection
 Remote Eren Arslan
2023-03-09
Med.
Worksuite CMS - Multiple XSS
 Remote Eren Arslan
Med.
WordPress Real Estate 7 Theme <= 3.3.4 - Abuse of Functionality
 CWE Remote FearZzZz
High
ZwiiCMS 12.2.04 Remote Code Execution
 CVE Remote Hadi Mene
2023-03-08
Med.
WordPress WoodMart Theme <= 7.1.0 - Unauthenticated Arbitrary Shortcodes Injection
 CVE CWE Remote FearZzZz
Med.
Gihosoft TubeGet v9.0.88 Denial of Service Exploit
 Local Achilles
Med.
Arris DG3450 AR01.02.056.18_041520_711.NCS.10 XSS / Missing Authentication
 CVE CWE Remote Steffen Robertz
Med.
Oracle 19c Access Bypass
 Remote Emad Al-Mousa
High
CoreDial sipXcom sipXopenfire 21.04 Remote Command Execution / Weak Permissionsundefined
 CVE CWE Remote Systems Research Group
High
Purchase Order Management 1.0 Shell Upload
 CWE nu11secur1ty
2023-03-06
Med.
Barracuda CloudGen WAN OS Command Injection
 CVE CWE Remote Stefan Viehbock
High
Agilebio Lab Collector 4.234 Remote Code Execution
 CVE Remote Anthony Cole
Med.
Android GKI Kernels Contain Broken Non-Upstream Speculative Page Faults MM Code
 CVE Remote Jann Horn
Med.
Purchase Order Management 1.0 SQL Injection
 CWE Remote nu11secur1ty
Low
Purchase Order Management 1.0 Cross Site Scripting
 CWE Remote nu11secur1ty
2023-03-05
High
Lucee Authenticated Scheduled Job Code Execution
 Remote Alexander Philiotis
Med.
Smart School : School Management System > All vers affected
 Remote Eren Arslan
Low
WordPress Real Estate 7 Theme <= 3.3.4 - Multiple Cross-Site Request Forgery (CSRF) Vulnerabilities
 CWE Remote FearZzZz
Low
WordPress Real Estate 7 Theme <= 3.3.4 - Unauthenticated Reflected Cross-Site Scripting (XSS)
 CWE Remote FearZzZz
Low
WordPress WoodMart Theme <= 7.1.1 - Theme License Options Change via CSRF
 CWE Remote FearZzZz
2023-03-01
Low
WordPress Real Estate 7 Theme 3.3.4 Cross Site Scripting
 CWE Remote fearzzzz
Low
WordPress WoodMart Theme 7.1.1 Cross Site Request Forgery
 CWE Remote fearzzzz
High
Osprey Pump Controller 1.0.1 pseudonym Command Injection
 CWE Remote LiquidWorm
Med.
Osprey Pump Controller 1.0.1 userName Command Injection
 CWE Remote LiquidWorm
High
Oracle E-Business Suite (EBS) Unauthenticated Arbitrary File Upload
 CVE CWE Remote sf
2023-02-27
High
Microsoft Windows Contact File / Remote Code Execution (Resurrected) CVE-2022-44666
 Remote hyp3rlinx
High
pfBlockerNG 2.1.4_26 Remote Code Execution
 CVE Remote IHTeam
High
ASUS ASMB8 iKVM 1.14.51 SNMP Remote Root
 CVE Remote d1g
High
ABUS Security Camera TVIP 20000-21150 LFI / Remote Code Execution
 CVE CWE Remote d1g
2023-02-26
Med.
Auto Dealer Management System 1.0 SQL Injection
 CVE CWE Remote Navaid Ansari
Med.
Music Gallery Site 1.0 Privilege Escalation / Missing Authentication
 CVE CWE Local Navaid Ansari
Low
Kshitish 2.0 Default Credentials
 Local indoushka
Med.
Auto Dealer Management System 1.0 Privilege Escalation
 CWE Local Navaid Ansari
2023-02-24
High
Device Manager Express 7.8.20002.47752 SQL Injection / XSS / Code Execution / Traversal
 CVE CWE Remote Eric Flokstra
Med.
Froxlor 2.0.6 Remote Command Execution
 CWE Remote Askar
Copyright 2023, cxsecurity.com

 

Back to Top