Sort by: Updated/Published

Full List of Bugtraq
Risk Topic & Details
2026-03-08
High
PluckCMS 4.7.10 Unrestricted File Upload
 CVE CWE Remote CodeSecLab
High
Python-Multipart <0.0.22 - Path Traversal / Arbitrary File Write (CVE-2026-24486)
 CVE Remote cardosource
High
WeGIA <= 3.6.4 Unauthenticated Admin Authentication Bypass
 CVE CWE Remote Mohammed Idrees Banyam...
High
NocoDB <= 0.301.2 User Enumeration via Password Reset Endpoint
 CVE CWE Remote Mohammed Idrees Banyam...
Med.
Craft CMS 4.x & 5.x RCE via Blocklist Bypass
 CVE CWE Remote Mohammed Idrees Banyam...
High
pac4j-jwt < 4.5.9, < 5.7.9, < 6.3.3 JwtAuthenticator Authentication Bypass via JWE-wrapped PlainJWT
 CVE CWE Remote Mohammed Idrees Banyam...
Med.
AirPlay Dual‑Mode Discovery Scanner for Flipper Zero ESP32 WiFi Dev Board
 Local indoushka
2026-03-03
High
WeGIA <= 3.6.4 Remote Code Execution via OS Command Injection
 CVE CWE Remote Mohammed Idrees Banyam...
High
WordPress Backup Migration 1.3.7 Remote Command Execution
 CVE CWE Remote DANG
Med.
WeGIA 3.5.0 SQL Injection
 CVE CWE Remote Onur Demir
2026-03-02
Med.
Windows Notepad App (Store Version) - Remote/Local Code Execution via Markdown Link
 CVE Remote nu11secur1ty
High
MaxSite CMS <= 109.1 unauthenticated RCE via run_php plugin
 CVE CWE Remote Mohammed Idrees Banyam...
Low
OpenClaw tools.exec.safeBins <= 2026.2.22 Remote Code Execution
 CVE CWE Remote Mohammed Idrees Banyam...
Low
Statamic CMS < 5.73.11 & < 6.4.0 Stored XSS via SVG Upload Leading to Privilege Escalation
 CVE CWE Remote Mohammed Idrees Banyam...
High
OpenStack Vitrage < 12.0.1 / 13.0.1 Eval Injection Remote Code Execution
 CVE CWE Remote Mohammed Idrees Banyam...
Low
Tenda F453 v1.0.0.3 frmL7ImForm Buffer Overflow
 CVE CWE Remote Mohammed Idrees Banyam...
2026-02-26
High
Icinga for Windows 1.13.3 - 'key_maker.py' Incorrect Default Permissions Private Key Exposure
 CVE Local nu11secur1ty
High
MLX <= 0.29.3 - Heap-based Buffer Overflow in .npy Parser
 CVE CWE Remote Mohammed Idrees Banyam...
High
Brickcom Camera - Remote command execution
 Remote parsa rezaie khiabanlo...
Med.
HDF5 Plugin 2.17.0 Path Audit – ABI-Compliant Constructor Execution Test
 Remote indoushka
High
Azure AI Language Conversations Authoring SDK < 1.0.0b4 - Remote Code Execution
 CVE CWE Remote Mohammed Idrees Banyam...
Med.
rldns-1.3 remote denial of service
 CVE CWE Remote antonius
2026-02-23
High
Oracle HTTP Server & WebLogic Proxy Plug-in – Unauthenticated Improper Access Control
 CVE CWE Remote RERO
High
FreeBSD rtsold 15.x Remote Code Execution via DNSSL
 CVE Remote Lukas Johannes Möller
Med.
FileBrowser ≤ v2.57.0 - Path-Based Access Control Bypass via Multiple Leading Slashes in URL (Authenticated Authorization Bypass)
 CVE Remote Mohammed Idrees Banyam...
Low
Icinga for Windows 1.13.3 - Incorrect Default Permissions Private Key Exposure
 CVE Local nu11secur1ty
Med.
LangGraph SQLite Checkpoint - SQL Injection via Metadata Filter Key
 CVE CWE Remote Mohammed Idrees Banyam...
High
Google Chrome < 145.0.7632.75 - CSSFontFeatureValuesMap Use-After-Free
 CVE Remote nu11secur1ty
2026-02-19
Low
Casdoor 2.55.0 Cross-Site Request Forgery (CSRF)
 CVE CWE Remote Van Lam Nguyen
Med.
grub-btrfs initramfs hook Command Injection
 CVE CWE Local cardosource
Low
Hyland OnBase Timer Service Unauthenticated .NET Remoting RCE
 CVE CWE Remote Mohammed Idrees Banyam...
Low
Repetier-Server <= 1.4.10 - Unauthenticated Path Traversal / Local File Inclusion
 CVE CWE Remote Mohammed Idrees Banyam...
2026-02-15
Low
WordPress Plugin Ajax Upload for Gravity Forms - Arbitrary File Upload
 CVE CWE Remote UnM@SK
Low
Roundcube Webmail DOM-based XSS Exploit via SVG href Attribute
 CVE CWE Remote Mohammed Idrees Banyam...
2026-02-14
Med.
WordPress Commentator Plugin - Arbitrary File Upload
 CWE Remote UnM@SK
High
motionEye 0.43.1b4 RCE
 CVE Remote prabhatverma47
High
Siklu EtherHaul Series EH-8010 Remote Command Execution
 CVE CWE Remote semaja2
High
ClipBucket 5.5.0 Arbitrary File Upload
 CVE CWE Remote Mukundsinh Solanki (r0...
High
Windows 11 25H2 Hyper-V CVE-2026-21248 Heap Overflow + Ghost Patch Exploit Framework
 CVE Local nu11secur1ty
Med.
ProgressBar 2 4.5.0 - Unbounded Resource Consumption DoS
 CVE Local cardosource
2026-02-05
High
BoidCMS v1.0.1-authenticated-file-upload-RCE
 Remote nu11secur1ty
High
Ingress-NGINX Admission Controller v1.11.1 - FD Injection to RCE
 CVE Remote Beatriz Fresno Naumova
Med.
aiohttp 3.9.1 Directory Traversal
 CVE Remote Beatriz Fresno Naumova
Low
Piranha CMS 12.0 - Stored Cross Site Scripting
 CVE Remote Chidubem Chukwu
2026-02-02
High
deephas <= 1.0.7 - Prototype Pollution leading to Arbitrary Code Execution / DoS
 Remote Mohammed Idrees Banyam...
Low
Piranha CMS 12.0 Stored XSS in Text Block
 CVE CWE Remote Chidubem Chukwu
Med.
Django 5.1.13 SQL Injection
 CVE CWE Remote Wafcontrol Security Te...
High
BoidCMS v2.0.0-authenticated-file-upload-RCE
 Remote nu11secur1ty
High
Linux Kernel 5.8 < 5.15.25 - Local Privilege Escalation (DirtyPipe 2)
 CVE Local Max Kellermann
2026-01-29
Low
BoidCMS v2.1.2 Apache .htaccess Rule Bypass Leading to Information Disclosure
 Remote nu11secur1ty
Low
Nginx 1.25.x Server Version Information Disclosure
 CWE Remote RERO
2026-01-26
High
LangChain Core - Serialization Injection to Jinja2 SSTI/RCE
 CVE Remote Mohammed Idrees Banyam...
Low
LayerSlider 7.9.5 – Unauthenticated SQL Injection
 CVE CWE Remote RERO
2026-01-25
High
WordPress Plugin FS Affiliates 5.6 - Unrestricted Arbitrary File Upload
 CWE Remote UnM@SK
High
Telnet Argument Injection Privilege Escalation - RCE
 CVE Remote nu11secur1ty
2026-01-20
Low
Chamillo LMS 1.11.2 Missing Cache Header
 CVE Remote Rivek
Low
ahu.mlsp.government.bg-XSS-Reflected-CRITICAL Cross-site scripting
 Remote nu11secur1ty
Low
WordPress Plugin wp-front-user-submit – AJAX Login Username Enumeration Vulnerability
 CWE Remote Mohammed Abdallah
2026-01-18
High
AVideo Notify.ffmpeg.json.php Unauthenticated Remote Code Execution
 Remote Valentin
Med.
phpIPAM 1.4 SQL-Injection
 CVE Remote CodeSecLab
Copyright 2026, cxsecurity.com

 

Back to Top