|
2017-06-07
|
|
Xavier 2.4 - SQL Injection
|
40 |
WEB
|
Vulnerability-Lab
|
|
2017-06-07
|
|
Grav CMS 1.4.2 Admin Plugin - Cross-Site Scripting
|
42 |
WEB
|
Ahsan Tahir
|
|
2017-06-06
|
|
Peplink Balance Routers 7.0.0-build1904 - SQL Injection / Cross-Site Scripting / Information Disclos
|
42 |
WEB
|
X41 D-Sec GmbH
|
|
2017-06-06
|
|
Peplink Balance Routers 7.0.0-build1904 - SQL Injection / Cross-Site Scripting / Information Disclos
|
39 |
WEB
|
X41 D-Sec GmbH
|
|
2017-06-06
|
|
Peplink Balance Routers 7.0.0-build1904 - SQL Injection / Cross-Site Scripting / Information Disclos
|
48 |
WEB
|
X41 D-Sec GmbH
|
|
2017-06-06
|
|
WordPress Plugin Tribulant Newsletters 4.6.4.2 - File Disclosure / Cross-Site Scripting
|
47 |
WEB
|
defensecode
|
|
2017-06-05
|
|
Kronos Telestaff < 2.92EU29 - SQL Injection
|
53 |
WEB
|
Goran Tuzovic
|
|
2017-06-05
|
|
Subsonic 6.1.1 - Cross-Site Request Forgery / Cross-Site Scripting
|
41 |
WEB
|
hyp3rlinx
|
|
2017-06-05
|
|
Subsonic 6.1.1 - Server-Side Request Forgery
|
41 |
WEB
|
hyp3rlinx
|
|
2017-06-05
|
|
Subsonic 6.1.1 - Cross-Site Request Forgery
|
43 |
WEB
|
hyp3rlinx
|
|
2017-06-04
|
|
EnGenius EnShare IoT Gigabit Cloud Service 1.4.11 - Remote Code Execution
|
45 |
WEB
|
LiquidWorm
|
|
2017-06-03
|
|
Joomla! Component Payage 2.05 - 'aid' SQL Injection
|
41 |
WEB
|
Persian Hack Team
|
|
2017-06-02
|
|
Sungard eTRAKiT3 <= 3.2.1.17 - SQL Injection
|
41 |
WEB
|
Goran Tuzovic
|
|
2017-06-01
|
|
WebKit - 'Document::prepareForDestruction' / 'CachedFrame' Universal Cross-Site Scripting
|
39 |
WEB
|
Google Security Research
|
|
2017-06-01
|
|
WebKit - 'CachedFrameBase::restore' Universal Cross-Site Scripting
|
37 |
WEB
|
Google Security Research
|
|
2017-06-01
|
|
WebKit - CachedFrame does not Detach Openers Universal Cross-Site Scripting
|
41 |
WEB
|
Google Security Research
|
|
2017-06-01
|
|
Riverbed SteelHead VCX 9.6.0a - Arbitrary File Read
|
40 |
WEB
|
Gregory Draperi
|
|
2017-05-31
|
|
Piwigo Plugin Facetag 0.0.3 - Cross-Site Scripting
|
41 |
WEB
|
Touhid M.Shaikh
|
|
2017-05-31
|
|
OV3 Online Administration 3.0 - SQL Injection
|
47 |
WEB
|
LiquidWorm
|
|
2017-05-31
|
|
OV3 Online Administration 3.0 - Remote Code Execution
|
42 |
WEB
|
LiquidWorm
|
|
2017-05-31
|
|
OV3 Online Administration 3.0 - Directory Traversal
|
41 |
WEB
|
LiquidWorm
|
|
2017-05-30
|
|
Piwigo Plugin Facetag 0.0.3 - SQL Injection
|
41 |
WEB
|
Touhid M.Shaikh
|
|
2017-05-30
|
|
TerraMaster F2-420 NAS TOS 3.0.30 - Root Remote Code Execution
|
40 |
WEB
|
Simone Margaritelli
|
|
2017-05-30
|
|
IBM Informix Dynamic Server / Informix Open Admin Tool - DLL Injection / Remote Code Execution / Hea
|
39 |
WEB
|
SecuriTeam
|
|
2017-05-30
|
|
KEMP LoadMaster 7.135.0.13245 - Persistent Cross-Site Scripting / Remote Code Execution
|
38 |
WEB
|
SecuriTeam
|
|
2017-05-30
|
|
Trend Micro Deep Security 6.5 - XML External Entity Injection / Local Privilege Escalation / Remote
|
40 |
WEB
|
SecuriTeam
|
|
2017-05-30
|
|
uc-http Daemon - Local File Inclusion / Directory Traversal
|
41 |
WEB
|
Project Insecurity
|
|
2017-05-29
|
|
WordPress Plugin Huge-IT Video Gallery 2.0.4 - SQL Injection
|
39 |
WEB
|
defensecode
|
|
2017-05-26
|
|
QWR-1104 Wireless-N Router - Cross-Site Scripting
|
38 |
WEB
|
Touhid M.Shaikh
|
|
2017-02-22
|
|
D-Link DCS Series Cameras - Insecure Crossdomain
|
42 |
WEB
|
SlidingWindow
|
|
2017-05-25
|
|
Apple Safari 10.0.3(12602.4.8) / WebKit - 'HTMLObjectElement::updateWidget' Universal Cross-Site Scr
|
39 |
WEB
|
Google Security Research
|
|
2017-05-25
|
|
WebKit - 'FrameLoader::clear' Stealing Variables via Page Navigation
|
41 |
WEB
|
Google Security Research
|
|
2017-05-25
|
|
WebKit - 'enqueuePageshowEvent' / 'enqueuePopstateEvent' Universal Cross-Site Scripting
|
36 |
WEB
|
Google Security Research
|
|
2017-05-25
|
|
WebKit - 'ContainerNode::parserInsertBefore' Universal Cross-Site Scripting
|
44 |
WEB
|
Google Security Research
|
|
2017-05-25
|
|
WebKit - 'ContainerNode::parserRemoveChild' Universal Cross-Site Scripting
|
37 |
WEB
|
Google Security Research
|
|
2017-05-25
|
|
Apple WebKit / Safari 10.0.3(12602.4.8) - 'Editor::Command::execute' Universal Cross-Site Scripting
|
43 |
WEB
|
Google Security Research
|
|
2017-05-25
|
|
Sophos Cyberoam - Cross-site scripting
|
44 |
WEB
|
Bhadresh Patel
|
|
2017-05-24
|
|
NetGain EM 7.2.647 build 941 - Authentication Bypass / Local File Inclusion
|
41 |
WEB
|
f3ci
|
|
2017-05-24
|
|
NetGain EM 7.2.647 build 941 - Authentication Bypass / Local File Inclusion
|
43 |
WEB
|
f3ci
|
|
2017-05-21
|
|
PlaySMS 1.4 - 'import.php' Remote Code Execution
|
41 |
WEB
|
Touhid M.Shaikh
|
|
2017-05-20
|
|
Mantis Bug Tracker 1.3.10/2.3.0 - Cross-Site Request Forgery
|
42 |
WEB
|
hyp3rlinx
|
|
2017-05-20
|
|
KMCIS CaseAware - Cross-Site Scripting
|
37 |
WEB
|
justpentest
|
|
2017-05-19
|
|
D-Link DIR-600M Wireless N 150 - Authentication Bypass
|
42 |
WEB
|
Touhid M.Shaikh
|
|
2017-05-19
|
|
PlaySMS 1.4 - Remote Code Execution
|
42 |
WEB
|
Touhid M.Shaikh
|
|
2017-05-19
|
|
ManageEngine ServiceDesk Plus 9.0 - Authentication Bypass
|
43 |
WEB
|
ByteM3
|
|
2017-05-19
|
|
SAP Business One for Android 1.2.3 - XML External Entity Injection
|
42 |
WEB
|
Ravindra Singh Rathore
|
|
2017-05-19
|
|
Belden Garrettcom 6K/10K Switches - Authentication Bypass / Memory Corruption
|
42 |
WEB
|
David Tomaschik
|
|
2017-05-19
|
|
Oracle PeopleSoft - Server-Side Request Forgery
|
39 |
WEB
|
ERPScan
|
|
2017-05-19
|
|
Joomla! 3.7.0 - 'com_fields' SQL Injection
|
47 |
WEB
|
Mateus Lino
|
|
2017-05-17
|
|
INFOR EAM 11.0 Build 201410 - Persistent Cross-Site Scripting via Comment Fields
|
45 |
WEB
|
Yoroi
|
|
2017-05-17
|
|
INFOR EAM 11.0 Build 201410 - 'filtervalue' SQL Injection
|
41 |
WEB
|
Yoroi
|
|
2017-01-12
|
|
Trend Micro InterScan Web Security Virtual Appliance (IWSVA) 6.5 SP2 - Multiple Vulnerabilities
|
41 |
WEB
|
SlidingWindow
|
|
2017-02-28
|
|
Sophos Web Appliance 4.3.1.1 - Session Fixation
|
46 |
WEB
|
SlidingWindow
|
|
2017-04-28
|
|
Admidio 3.2.8 - Cross-Site Request Forgery
|
42 |
WEB
|
Faiz Ahmed Zaidi
|
|
2017-05-15
|
|
Mailcow 0.14 - Cross-Site Request Forgery
|
42 |
WEB
|
hyp3rlinx
|
|
2017-05-14
|
|
PlaySMS 1.4 - '/sendfromfile.php' Remote Code Execution / Unrestricted File Upload
|
42 |
WEB
|
Touhid M.Shaikh
|
|
2017-05-02
|
|
Zyxel P-660HW-61 Firmware < 3.40(PE.11)C0 Router - Local File Inclusion
|
47 |
WEB
|
ReverseBrain
|
|
2017-05-10
|
|
CMS Made Simple 2.1.6 - Multiple Vulnerabilities
|
44 |
WEB
|
Osanda Malith Jayathissa
|
|
2017-05-10
|
|
Gongwalker API Manager 1.1 - Cross-Site Request Forgery
|
40 |
WEB
|
HaHwul
|
|
2017-05-10
|
|
BanManager WebUI 1.5.8 - PHP Code Injection
|
44 |
WEB
|
HaHwul
|
|
2017-05-10
|
|
QNAP PhotoStation 5.2.4 / MusicStation 4.8.4 - Authentication Bypass
|
44 |
WEB
|
Kacper Szurek
|
|
2017-05-09
|
|
Personify360 7.5.2/7.6.1 - Improper Database Schema Access Restrictions
|
42 |
WEB
|
Pesach Zirkind
|
|
2017-05-09
|
|
Personify360 7.5.2/7.6.1 - Improper Access Restrictions
|
41 |
WEB
|
Pesach Zirkind
|
|
2017-05-09
|
|
I_ Librarian 4.6/4.7 - Command Injection / Server Side Request Forgery / Directory Enumeration / Cro
|
46 |
WEB
|
SEC Consult
|
|
2017-05-09
|
|
I_ Librarian 4.6/4.7 - Command Injection / Server Side Request Forgery / Directory Enumeration / Cro
|
42 |
WEB
|
SEC Consult
|
|
2017-04-24
|
|
LogRhythm Network Monitor - Authentication Bypass / Command Injection
|
46 |
WEB
|
Francesco Oddo
|
|
2017-05-05
|
|
ViMbAdmin 3.0.15 - Multiple Cross-Site Request Forgery Vulnerabilities
|
52 |
WEB
|
Sysdream
|
|
2017-05-05
|
|
WordPress Plugin WebDorado Gallery 1.3.29 - SQL Injection
|
44 |
WEB
|
defensecode
|
|
2017-05-03
|
|
WordPress Core < 4.7.4 - Unauthorized Password Reset
|
46 |
WEB
|
Dawid Golunski
|
|
2017-05-03
|
|
WordPress Core 4.6 - Remote Code Execution
|
43 |
WEB
|
Dawid Golunski
|
|
2017-05-03
|
|
Serviio PRO 1.8 DLNA Media Streaming Server - REST API Arbitrary Code Execution
|
46 |
WEB
|
LiquidWorm
|
|
2017-05-03
|
|
Serviio PRO 1.8 DLNA Media Streaming Server - REST API Arbitrary Password Change
|
47 |
WEB
|
LiquidWorm
|
|
2017-05-03
|
|
Serviio PRO 1.8 DLNA Media Streaming Server - REST API Information Disclosure
|
46 |
WEB
|
LiquidWorm
|
|
2017-05-01
|
|
Tuleap Project Wiki 8.3 < 9.6.99.86 - Command Injection
|
43 |
WEB
|
Ben Nott
|
|
2017-05-01
|
|
Alerton Webtalk 2.5/3.3 - Multiple Vulnerabilities
|
46 |
WEB
|
David Tomaschik
|
|
2017-04-30
|
|
Emby MediaServer 3.2.5 - Directory Traversal
|
46 |
WEB
|
LiquidWorm
|
|
2017-04-30
|
|
Emby MediaServer 3.2.5 - Password Reset
|
48 |
WEB
|
LiquidWorm
|
|
2017-04-30
|
|
Emby MediaServer 3.2.5 - SQL Injection
|
46 |
WEB
|
LiquidWorm
|
|
2017-04-27
|
|
Easy File Uploader - Arbitrary File Upload
|
46 |
WEB
|
Daniel Godoy
|
|
2017-04-27
|
|
Simple File Uploader - Arbitrary File Download
|
47 |
WEB
|
Daniel Godoy
|
|
2017-04-27
|
|
TYPO3 Extension News - SQL Injection
|
47 |
WEB
|
Charles Fol
|
|
2017-04-26
|
|
Revive Ad Server 4.0.1 - Cross-Site Scripting / Cross-Site Request Forgery
|
46 |
WEB
|
Cyril Vallicari
|
|
2017-04-25
|
|
October CMS 1.0.412 - Multiple Vulnerabilities
|
47 |
WEB
|
Anti Räis
|
|
2017-04-24
|
|
Joomla! Component Myportfolio 3.0.2 - 'pid' SQL Injection
|
43 |
WEB
|
Persian Hack Team
|
|
2017-04-25
|
|
OpenText Documentum Content Server - dm_bp_transition.ebs docbase Method Arbitrary Code Execution
|
43 |
WEB
|
Andrey B. Panfilov
|
|
2017-04-25
|
|
HPE OpenCall Media Platform (OCMP) 4.3.2 - Cross-Site Scripting / Remote File Inclusion
|
47 |
WEB
|
Paolo Stagno
|
|
2017-04-25
|
|
HPE OpenCall Media Platform (OCMP) 4.3.2 - Cross-Site Scripting / Remote File Inclusion
|
51 |
WEB
|
Paolo Stagno
|
|
2017-04-25
|
|
Oracle E-Business Suite 12.2.3 - 'IESFOOTPRINT' SQL Injection
|
45 |
WEB
|
ERPScan
|
|
2017-04-25
|
|
Oracle PeopleSoft - 'PeopleSoftServiceListeningConnector' XML External Entity via DOCTYPE
|
43 |
WEB
|
ERPScan
|
|
2017-04-25
|
|
WordPress Plugin Wow Forms 2.1 - SQL Injection
|
44 |
WEB
|
TAD GROUP
|
|
2017-04-25
|
|
WordPress Plugin Wow Viral Signups 2.1 - SQL Injection
|
41 |
WEB
|
TAD GROUP
|
|
2017-04-25
|
|
WordPress Plugin Car Rental System 2.5 - SQL Injection
|
41 |
WEB
|
TAD GROUP
|
|
2017-04-25
|
|
WordPress Plugin KittyCatfish 2.2 - SQL Injection
|
38 |
WEB
|
TAD GROUP
|
|
2017-04-25
|
|
FlySpray 1.0-rc4 - Cross-Site Scripting / Cross-Site Request Forgery
|
42 |
WEB
|
Cyril Vallicari
|
|
2017-04-20
|
|
Apple WebKit / Safari 10.0.2(12602.3.12.0.1) - 'operationSpreadGeneric' Universal Cross-Site Scripti
|
43 |
WEB
|
Google Security Research
|
|
2017-04-20
|
|
Apple WebKit / Safari 10.0.2(12602.3.12.0.1) - 'PrototypeMap::createEmptyStructure' Universal Cross-
|
46 |
WEB
|
Google Security Research
|
|
2017-04-16
|
|
Mantis Bug Tracker 1.3.0/2.3.0 - Password Reset
|
42 |
WEB
|
hyp3rlinx
|
|
2017-04-14
|
|
Concrete5 CMS 8.1.0 - 'Host' Header Injection
|
44 |
WEB
|
hyp3rlinx
|
|
2017-04-13
|
|
Alienvault OSSIM/USM 5.3.4/5.3.5 - Remote Command Execution (Metasploit)
|
40 |
WEB
|
Peter Lapp
|
|
2017-04-13
|
|
agorum core Pro 7.8.1.4-251 - Persistent Cross-Site Scripting
|
48 |
WEB
|
SySS GmbH
|
|
2017-04-13
|
|
agorum core Pro 7.8.1.4-251 - Cross-Site Request Forgery
|
43 |
WEB
|
SySS GmbH
|
|
2016-01-11
|
|
SedSystems D3 Decimator - Multiple Vulnerabilities
|
42 |
WEB
|
prdelka
|
|
2017-02-15
|
|
Coppermine Gallery < 1.5.44 - Directory Traversal
|
40 |
WEB
|
Hacker Fantastic
|
|
2017-04-11
|
|
Apple WebKit / Safari 10.0.3 (12602.4.8) - Universal Cross-Site Scripting via a Focus Event and a Li
|
38 |
WEB
|
Google Security Research
|
|
2017-04-11
|
|
Apple WebKit / Safari 10.0.3 (12602.4.8) - Synchronous Page Load Universal Cross-Site Scripting
|
42 |
WEB
|
Google Security Research
|
|
2017-04-11
|
|
Horde Groupware Webmail 3/4/5 - Multiple Remote Code Executions
|
40 |
WEB
|
SecuriTeam
|
|
2017-04-11
|
|
Brother MFC-J6520DW - Authentication Bypass / Password Change
|
43 |
WEB
|
Patryk Bogdan
|
|
2017-04-11
|
|
MyBB smilie Module < 1.8.11 - 'pathfolder' Directory Traversal
|
39 |
WEB
|
Zhiyang Zeng
|
|
2017-04-11
|
|
MyBB < 1.8.11 - 'email' MyCode Cross-Site Scripting
|
38 |
WEB
|
Zhiyang Zeng
|
|
2017-04-11
|
|
FAQ Script 3.1.3 - 'category_id' SQL Injection
|
39 |
WEB
|
Ihsan Sencan
|
|
2017-04-11
|
|
Social Directory Script 2.0 - SQL Injection
|
42 |
WEB
|
Ihsan Sencan
|
|
2017-04-11
|
|
WordPress Plugin Spider Event Calendar 1.5.51 - Blind SQL Injection
|
50 |
WEB
|
Manuel García Cárdenas
|
|
2017-04-11
|
|
MyClassifiedScript 5.1 - SQL Injection
|
38 |
WEB
|
Ihsan Sencan
|
|
2017-04-07
|
|
Adobe (Multiple Products) - XML Injection File Content Disclosure
|
37 |
WEB
|
Tess Sluyter
|
|
2017-04-08
|
|
Jobscript4Web 4.5 - Authentication Bypass
|
39 |
WEB
|
TurkCyberArmy
|
|
2017-04-07
|
|
WordPress Plugin CopySafe Web Protect < 2.6 - Cross-Site Request Forgery
|
40 |
WEB
|
Zhiyang Zeng
|
|
2017-04-07
|
|
WordPress Plugin WHIZZ < 1.1.1 - Cross-Site Request Forgery
|
40 |
WEB
|
Zhiyang Zeng
|
|
2017-04-07
|
|
e107 CMS 2.1.4 - Cross-Site Request Forgery
|
42 |
WEB
|
Zhiyang Zeng
|
|
2017-04-07
|
|
QNAP TVS-663 QTS < 4.2.4 build 20170313 - Command Injection
|
42 |
WEB
|
Harry Sintonen
|
|
2017-04-07
|
|
WordPress Plugin Firewall 2 1.3 - Cross-Site Request Forgery / Cross-Site Scripting
|
40 |
WEB
|
dxw
|
|
2017-04-07
|
|
WordPress Plugin Firewall 2 1.3 - Cross-Site Request Forgery / Cross-Site Scripting
|
37 |
WEB
|
dxw
|
|
2017-04-07
|
|
D-Link DWR-116 / DWR-116A1 - Arbitrary File Download
|
41 |
WEB
|
Patryk Bogdan
|
|
2017-04-07
|
|
Ladder System 6.0 - 'faqid' SQL Injection
|
36 |
WEB
|
Ihsan Sencan
|
|
2017-04-07
|
|
My Gaming Ladder Combo System 7.5 - SQL Injection
|
37 |
WEB
|
Ihsan Sencan
|
|
2017-04-07
|
|
Survey Template 1.1 - 'masterkey1' SQL Injection
|
38 |
WEB
|
Ihsan Sencan
|
