Sort by: Updated/Published

Filtred: Only with CVE
Risk Topic & Details
2025-05-29
Med.
Campcodes Online Hospital Management System 1.0 SQL Injection
 CVE CWE Remote Carine Constantino
Low
UJCMS 9.6.3 User Enumeration via IDOR
 CVE Remote Cyd Tseng
2025-05-27
Med.
compop.ca 3.5.3 Arbitrary code Execution
 CVE Remote dmlino
Med.
ABB Cylon Aspect Studio 3.08.03 Binary Planting
 CVE Local Gjoko 'LiquidWorm...
2025-05-22
Low
Drupal 11.x-dev Full Path Disclosure
 CVE Remote Milad Karimi (Ex3ption...
2025-05-19
Med.
CrushFTP 11.3.1 Authentication Bypass
 CVE Local ibrahimsql
Low
Oracle database password hash exposure in sharding component
 CVE Local Emad Al-Mousa
2025-05-15
High
WordPress SureTriggers 1.0.78 Authentication Bypass / Remote Code Execution
 CVE Remote Valentin
2025-05-13
High
TP-Link VN020 F3v(T) TT_V6.2.1021) DHCP Stack Buffer Overflow
 CVE CWE Remote Mohamed Maatallah
High
Dell EMC iDRAC7/iDRAC8 2.52.52.52 Remote Code Execution
 CVE Remote Photubias
2025-05-10
Med.
Microsoft Windows ".library-ms" Filetype / Information Disclosure
 CVE Remote hyp3rlinx
2025-05-09
High
Ruckus IoT Controller 1.7.1.0 Undocumented Backdoor Account
 CVE CWE Remote korelogic
High
Firefox ESR 115.11 PDF.js Arbitrary JavaScript execution
 CVE Remote Milad Karimi
Med.
Apache ActiveMQ 6.1.6 Denial of Service
 CVE Remote Abdualhadi khalifa
2025-05-08
Low
Easy!Appointments 1.5.1 Denial of Service
 CVE Remote Abdullah Almutairi
2025-05-06
Low
ERPNext 14.82.1 Account Takeover via Cross-Site Request Forgery (CSRF)
 CVE CWE Remote Ahmed Thaiban
Med.
tar-fs 3.0.0 Arbitrary File Write/Overwrite
 CVE Local Ardayfio Samuel Nii Ar...
2025-05-05
High
Hugging Face Transformers MobileViTV2 4.41.1 Remote Code Execution (RCE)
 CVE Remote The Kernel Panic
2025-05-03
High
Apache Commons Text 1.10.0 Remote Code Execution
 CVE Remote Arjun Chaudhary
2025-05-01
Med.
Inventio Lite 4 SQL Injection
 CVE CWE Remote pointedsec
High
unzip-stream 0.3.1 Arbitrary File Write
 CVE Remote Ardayfio Samuel Nii Ar...
Med.
Zabbix 7.0.0 SQL Injection
 CVE CWE Remote Leandro Dias Barata
Med.
Smart Manager 8.27.0 Post-Authenticated SQL Injection
 CVE CWE Remote xbz0n
2025-04-28
High
Pymatgen 2024.1 Remote Code Execution
 CVE Remote Mohammed Idrees Banyam...
High
Microsoft ".library-ms" File / NTLM Information Disclosure (Resurrected 2025)
 CVE Remote hyp3rlinx
2025-04-24
Med.
KiviCare Clinic & Patient Management System 3.6.4 Unauthenticated SQL Injection
 CVE CWE Remote  Gözet
Low
ProConf 6.0 Insecure Direct Object Reference
 CVE Remote S. M. Zia Ur Rashid
2025-04-22
High
TP-Link VN020 F3v(T) TT_V6.2.1021 Buffer Overflow Memory Corruption
 CVE CWE Remote Mohamed Maatallah
High
FoxCMS 1.2.5 Remote Code Execution
 CVE Remote VeryLazyTech
Low
ASUS ASMB8 iKVM 1.14.51 Remote Code Execution
 CVE Remote d1g@segfault
High
Tatsu 3.3.11 Unauthenticated RCE
 CVE Remote Milad Karimi
Med.
NagVis 1.9.33 Arbitrary File Read
 CVE CWE Remote xerosec
2025-04-16
Low
CodeAstro Online Railway Reservation System 1.0 Cross Site Scripting (XSS)
 CVE CWE Remote Raj Nandi
2025-04-15
High
Intelight X-1L Traffic controller Maxtime 1.9.6 Remote Code Execution (RCE)
 CVE Remote Andrew Lemon
Med.
Gnuboard5 5.3.2.8 SQL Injection
 CVE CWE Remote CodeSecLab
Med.
IBMi Navigator 7.5 HTTP Security Token Bypass
 CVE CWE Remote hyp3rlinx
High
GestioIP 3.5.7 Remote Command Execution (RCE)
 CVE CWE Remote m4xth0r
High
Cacti 1.2.26 Remote Code Execution (RCE)
 CVE Remote D3Ext
2025-04-09
High
DocsGPT 0.12.0 Remote Code Execution
 CVE Remote Shreyas Malhotra
2025-04-06
Low
Exclusive Addons for Elementor 2.6.9 Stored Cross-Site Scripting
 CVE CWE Remote Wordfence Security Tea...
Low
Gitea 1.22.0 Stored XSS
 CVE CWE Remote Catalin Iovita
High
Royal Elementor Addons and Templates 1.3.78 Unauthenticated Arbitrary File Upload
 CVE CWE Remote Sheikh Mohammad Hasan
Low
Reservit Hotel 2.1 Stored Cross-Site Scripting (XSS)
 CVE CWE Remote Ilteris Kaan Pehlivan
2025-04-01
Med.
Litespeed unauthorized account takeover
 CVE Remote Gnzls
2025-03-30
Med.
NVIDIA Container Toolkit 1.16.1 Time-of-check Time-of-Use (TOCTOU)
 CVE Local r0binak
High
PHP < 8.3.8 Remote Code Execution
 CVE Remote Yesith Alvarez
High
Litespeed Cache 6.5.0.1 Authentication Bypass
 CVE Remote Gnzls
High
XWiki Standard 14.10 Remote Code Execution (RCE)
 CVE Remote Mehran Seifalinia
2025-03-25
Med.
AEGON LIFE v1.0 Life Insurance Management System SQL injection vulnerability.
 CVE CWE Remote Aslam Anwar Mahimkar
2025-03-22
Med.
TeamPass 3.0.0.21 SQL Injection
 CVE CWE Remote Max Meyer
2025-03-20
High
Chamilo LMS 1.11.24 Remote Code Execution (RCE)
 CVE Remote 0x00-null - Mohamed Ka...
2025-03-13
High
WordPress Th Shop Mania Theme 1.4.9 Missing Authorization
 CVE Remote Nxploited
Med.
WordPress NextMove Lite 2.17.0 Missing Authorization
 CVE Remote Nxploited
2025-03-10
Med.
JUX Real Estate 3.4.0 - SQL Injection
 CVE CWE Remote CraCkEr
Low
JUX Real Estate 3.4.0 - Multiple RXSS
 CVE CWE Remote CraCkEr
2025-03-08
Med.
OpenPanel 0.3.4 - Insecure Permission Modification via Fix Permission Function
 CVE Remote Multiple
2025-03-05
High
OpenPanel 0.3.4 Remote Code Execution
 CVE Remote Multiple
2025-02-28
Low
SeedDMS 6.0.29 Cross Site Scripting
 CVE Remote Athul S
2025-02-27
Med.
Library-Card-System V 1.0 | Add Picture/Signature - signup.php | Unrestricted File Upload | Found By Maloy Roy Orko
 CVE CWE Remote Maloy Roy Orko
Med.
Needyamin | Library-Card-System 1.0 | card.php?id= SQL Injection | Found By Maloy Roy Orko
 CVE CWE Remote Maloy Roy Orko
Copyright 2025, cxsecurity.com

 

Back to Top