Sort by: Updated/Published

Filtred: Bugs
Risk Topic & Details
2026-03-15
High
zumba/json-serializer zumba/json-serializer < 3.2.3 RCE
 CVE CWE Remote Mohammed Idrees Banyam...
Med.
Wekan 8.31.0 - 8.33Meteor DDP notificationUsers Sensitive Data Leak
 CVE CWE Remote Mohammed Idrees Banyam...
Low
Splunk Remote Command Execution via Improper Input Validation
 CVE CWE Remote RERO(tr)
2026-03-14
High
Microsoft Windows MSHTML Security Feature Bypass Vulnerability
 CVE CWE Remote RERO(tr)
High
Qualcomm GPU Driver Memory Corruption Vulnerability in Android Devices
 CVE CWE Remote RERO(tr)
Med.
Frappe Framework <14.99.0 and <15.84.0 Unauthenticated SQL Injection
 CVE CWE Remote Mohammed Idrees Banyam...
Low
PyJWT < 2.12.0 crit header bypass / Insufficient crit validation
 CVE CWE Remote Mohammed Idrees Banyam...
2026-03-08
High
PluckCMS 4.7.10 Unrestricted File Upload
 CVE CWE Remote CodeSecLab
High
Python-Multipart <0.0.22 - Path Traversal / Arbitrary File Write (CVE-2026-24486)
 CVE Remote cardosource
High
WeGIA <= 3.6.4 Unauthenticated Admin Authentication Bypass
 CVE CWE Remote Mohammed Idrees Banyam...
High
NocoDB <= 0.301.2 User Enumeration via Password Reset Endpoint
 CVE CWE Remote Mohammed Idrees Banyam...
Med.
Craft CMS 4.x & 5.x RCE via Blocklist Bypass
 CVE CWE Remote Mohammed Idrees Banyam...
High
pac4j-jwt < 4.5.9, < 5.7.9, < 6.3.3 JwtAuthenticator Authentication Bypass via JWE-wrapped PlainJWT
 CVE CWE Remote Mohammed Idrees Banyam...
Med.
AirPlay Dual‑Mode Discovery Scanner for Flipper Zero ESP32 WiFi Dev Board
 Local indoushka
2026-03-03
High
WeGIA <= 3.6.4 Remote Code Execution via OS Command Injection
 CVE CWE Remote Mohammed Idrees Banyam...
High
WordPress Backup Migration 1.3.7 Remote Command Execution
 CVE CWE Remote DANG
Med.
WeGIA 3.5.0 SQL Injection
 CVE CWE Remote Onur Demir
2026-03-02
Med.
Windows Notepad App (Store Version) - Remote/Local Code Execution via Markdown Link
 CVE Remote nu11secur1ty
High
MaxSite CMS <= 109.1 unauthenticated RCE via run_php plugin
 CVE CWE Remote Mohammed Idrees Banyam...
Low
Statamic CMS < 5.73.11 & < 6.4.0 Stored XSS via SVG Upload Leading to Privilege Escalation
 CVE CWE Remote Mohammed Idrees Banyam...
High
OpenStack Vitrage < 12.0.1 / 13.0.1 Eval Injection Remote Code Execution
 CVE CWE Remote Mohammed Idrees Banyam...
Low
Tenda F453 v1.0.0.3 frmL7ImForm Buffer Overflow
 CVE CWE Remote Mohammed Idrees Banyam...
2026-02-26
High
Icinga for Windows 1.13.3 - 'key_maker.py' Incorrect Default Permissions Private Key Exposure
 CVE Local nu11secur1ty
High
MLX <= 0.29.3 - Heap-based Buffer Overflow in .npy Parser
 CVE CWE Remote Mohammed Idrees Banyam...
High
Brickcom Camera - Remote command execution
 Remote parsa rezaie khiabanlo...
Med.
HDF5 Plugin 2.17.0 Path Audit – ABI-Compliant Constructor Execution Test
 Remote indoushka
High
Azure AI Language Conversations Authoring SDK < 1.0.0b4 - Remote Code Execution
 CVE CWE Remote Mohammed Idrees Banyam...
Med.
rldns-1.3 remote denial of service
 CVE CWE Remote antonius
2026-02-23
High
Oracle HTTP Server & WebLogic Proxy Plug-in – Unauthenticated Improper Access Control
 CVE CWE Remote RERO
High
FreeBSD rtsold 15.x Remote Code Execution via DNSSL
 CVE Remote Lukas Johannes Möller
Med.
FileBrowser ≤ v2.57.0 - Path-Based Access Control Bypass via Multiple Leading Slashes in URL (Authenticated Authorization Bypass)
 CVE Remote Mohammed Idrees Banyam...
Low
Icinga for Windows 1.13.3 - Incorrect Default Permissions Private Key Exposure
 CVE Local nu11secur1ty
Med.
LangGraph SQLite Checkpoint - SQL Injection via Metadata Filter Key
 CVE CWE Remote Mohammed Idrees Banyam...
2026-02-19
Low
Casdoor 2.55.0 Cross-Site Request Forgery (CSRF)
 CVE CWE Remote Van Lam Nguyen
Med.
grub-btrfs initramfs hook Command Injection
 CVE CWE Local cardosource
Low
Hyland OnBase Timer Service Unauthenticated .NET Remoting RCE
 CVE CWE Remote Mohammed Idrees Banyam...
Low
Repetier-Server <= 1.4.10 - Unauthenticated Path Traversal / Local File Inclusion
 CVE CWE Remote Mohammed Idrees Banyam...
2026-02-15
Low
WordPress Plugin Ajax Upload for Gravity Forms - Arbitrary File Upload
 CVE CWE Remote UnM@SK
Low
Roundcube Webmail DOM-based XSS Exploit via SVG href Attribute
 CVE CWE Remote Mohammed Idrees Banyam...
2026-02-14
Med.
WordPress Commentator Plugin - Arbitrary File Upload
 CWE Remote UnM@SK
High
motionEye 0.43.1b4 RCE
 CVE Remote prabhatverma47
High
ClipBucket 5.5.0 Arbitrary File Upload
 CVE CWE Remote Mukundsinh Solanki (r0...
High
Windows 11 25H2 Hyper-V CVE-2026-21248 Heap Overflow + Ghost Patch Exploit Framework
 CVE Local nu11secur1ty
Med.
ProgressBar 2 4.5.0 - Unbounded Resource Consumption DoS
 CVE Local cardosource
2026-02-05
High
BoidCMS v1.0.1-authenticated-file-upload-RCE
 Remote nu11secur1ty
High
Ingress-NGINX Admission Controller v1.11.1 - FD Injection to RCE
 CVE Remote Beatriz Fresno Naumova
Low
Piranha CMS 12.0 - Stored Cross Site Scripting
 CVE Remote Chidubem Chukwu
2026-02-02
Low
Piranha CMS 12.0 Stored XSS in Text Block
 CVE CWE Remote Chidubem Chukwu
Med.
Django 5.1.13 SQL Injection
 CVE CWE Remote Wafcontrol Security Te...
High
BoidCMS v2.0.0-authenticated-file-upload-RCE
 Remote nu11secur1ty
High
Linux Kernel 5.8 < 5.15.25 - Local Privilege Escalation (DirtyPipe 2)
 CVE Local Max Kellermann
2026-01-29
Low
BoidCMS v2.1.2 Apache .htaccess Rule Bypass Leading to Information Disclosure
 Remote nu11secur1ty
Low
Nginx 1.25.x Server Version Information Disclosure
 CWE Remote RERO
2026-01-26
Low
LayerSlider 7.9.5 – Unauthenticated SQL Injection
 CVE CWE Remote RERO
2026-01-25
High
WordPress Plugin FS Affiliates 5.6 - Unrestricted Arbitrary File Upload
 CWE Remote UnM@SK
High
Telnet Argument Injection Privilege Escalation - RCE
 CVE Remote nu11secur1ty
2026-01-20
Low
Chamillo LMS 1.11.2 Missing Cache Header
 CVE Remote Rivek
Low
ahu.mlsp.government.bg-XSS-Reflected-CRITICAL Cross-site scripting
 Remote nu11secur1ty
Low
WordPress Plugin wp-front-user-submit – AJAX Login Username Enumeration Vulnerability
 CWE Remote Mohammed Abdallah
2026-01-18
Med.
phpIPAM 1.4 SQL-Injection
 CVE Remote CodeSecLab
Copyright 2026, cxsecurity.com

 

Back to Top