|
2016-03-16
|
|
AKIPS Network Monitor 15.37 through 16.5 - OS Command Injection
|
5 |
WEB
|
BrianWGray
|
|
2016-03-15
|
|
Kaltura Community Edition < 11.1.0-2 - Multiple Vulnerabilities
|
5 |
WEB
|
Security-Assessment.com
|
|
2016-03-14
|
|
TeamPass 2.1.24 - Multiple Vulnerabilities
|
5 |
WEB
|
Vincent Malguy
|
|
2016-03-14
|
|
WordPress Plugin Site Import 1.0.1 - Local/Remote File Inclusion
|
4 |
WEB
|
Wadeek
|
|
2016-03-11
|
|
WordPress Plugin DZS Videogallery < 8.60 - Multiple Vulnerabilities
|
7 |
WEB
|
Colette Chamberland
|
|
2016-03-11
|
|
WordPress Theme Beauty & Clean 1.0.8 - Arbitrary File Upload
|
6 |
WEB
|
Colette Chamberland
|
|
2016-03-10
|
|
WordPress Plugin WP Advanced Comment 0.10 - Persistent Cross-Site Scripting
|
3 |
WEB
|
Mohammad Khaleghi
|
|
2016-03-10
|
|
WordPress Plugin Best Web Soft Captcha 4.1.5 - Multiple Vulnerabilities
|
5 |
WEB
|
Colette Chamberland
|
|
2016-03-09
|
|
WordPress Theme SiteMile Project 2.0.9.5 - Multiple Vulnerabilities
|
3 |
WEB
|
LSE Leading Security Experts GmbH
|
|
2016-03-09
|
|
Bluethrust Clan Scripts v4 R17 - Multiple Vulnerabilities
|
3 |
WEB
|
Brandon Murphy
|
|
2016-03-07
|
|
Cerberus Helpdesk (Cerb5) 5 < 6.7 - Password Hash Disclosure
|
3 |
WEB
|
asdizzle_
|
|
2016-03-07
|
|
ATutor LMS - '/install_modules.php' Cross-Site Request Forgery / Remote Code Execution
|
6 |
WEB
|
mr_me
|
|
2016-03-03
|
|
WordPress Plugin Bulk Delete 5.5.3 - Privilege Escalation
|
6 |
WEB
|
Panagiotis Vagenas
|
|
2016-03-01
|
|
WordPress Plugin CP Polls 1.0.8 - Multiple Vulnerabilities
|
7 |
WEB
|
i0akiN SEC-LABORATORY
|
|
2016-02-29
|
|
WordPress Plugin More Fields 2.1 - Cross-Site Request Forgery
|
5 |
WEB
|
Aatif Shahdad
|
|
2016-02-26
|
|
Joomla! Component com_poweradmin 2.3.0 - Multiple Vulnerabilities
|
5 |
WEB
|
RatioSec Research
|
|
2016-02-26
|
|
Centreon 2.5.3 - Remote Command Execution
|
4 |
WEB
|
Sysdream
|
|
2016-02-26
|
|
Zimbra 8.0.9 GA - Cross-Site Request Forgery
|
5 |
WEB
|
Sysdream
|
|
2016-02-26
|
|
WordPress Plugin Ocim MP3 - SQL Injection
|
5 |
WEB
|
xevil & Blankon33
|
|
2016-02-26
|
|
Infor CRM 8.2.0.1136 - Multiple HTML Script Injection Vulnerabilities
|
5 |
WEB
|
LiquidWorm
|
|
2016-02-25
|
|
IBM Lotus Domino R8 - Password Hash Extraction
|
5 |
WEB
|
Jonathan Broche
|
|
2016-02-24
|
|
WordPress Plugin Extra User Details 0.4.2 - Privilege Escalation
|
5 |
WEB
|
Panagiotis Vagenas
|
|
2016-02-23
|
|
Ubiquiti Networks UniFi 3.2.10 - Cross-Site Request Forgery
|
5 |
WEB
|
Julien Ahrens
|
|
2016-02-23
|
|
Dell OpenManage Server Administrator 8.2 - (Authenticated) Directory Traversal
|
5 |
WEB
|
hantwister
|
|
2016-02-22
|
|
Thru Managed File Transfer Portal 9.0.2 - SQL Injection
|
5 |
WEB
|
SySS GmbH
|
|
2016-02-22
|
|
BlackBerry Enterprise Service < 12.4 (BES12) Self-Service - Multiple Vulnerabilities
|
4 |
WEB
|
Security-Assessment.com
|
|
2016-02-22
|
|
InstantCoder 1.0 iOS - Multiple Vulnerabilities
|
4 |
WEB
|
Vulnerability-Lab
|
|
2016-02-20
|
|
SOLIDserver < 5.0.4 - Local File Inclusion
|
5 |
WEB
|
Saeed reza Zamanian
|
|
2016-02-19
|
|
ManageEngine Firewall Analyzer 8.5 - Multiple Vulnerabilities
|
5 |
WEB
|
Sachin Wagh
|
|
2016-02-19
|
|
Chamilo LMS - Persistent Cross-Site Scripting
|
5 |
WEB
|
Vulnerability-Lab
|
|
2016-02-19
|
|
Chamilo LMS IDOR - 'messageId' Delete POST Injection
|
5 |
WEB
|
Vulnerability-Lab
|
|
2016-02-18
|
|
DirectAdmin 1.491 - Cross-Site Request Forgery
|
5 |
WEB
|
Necmettin COSKUN
|
|
2016-02-18
|
|
Vesta Control Panel 0.9.8-15 - Persistent Cross-Site Scripting
|
4 |
WEB
|
Necmettin COSKUN
|
|
2016-02-17
|
|
Redaxo 5.0.0 - Multiple Vulnerabilities
|
5 |
WEB
|
LSE Leading Security Experts GmbH
|
|
2016-02-17
|
|
OCS Inventory NG 2.2 - SQL Injection
|
5 |
WEB
|
Ephreet
|
|
2016-02-17
|
|
JMX2 Email Tester - 'save_email.php' Arbitrary File Upload
|
5 |
WEB
|
HaHwul
|
|
2016-02-16
|
|
phpMyBackupPro 2.5 - Remote Command Execution / Cross-Site Request Forgery
|
5 |
WEB
|
hyp3rlinx
|
|
2016-02-16
|
|
WordPress Plugin ALO EasyMail NewsLetter 2.6.01 - Cross-Site Request Forgery
|
7 |
WEB
|
Mohsen Lotfi
|
|
2016-02-16
|
|
ManageEngine Network Configuration Management Build 11000 - Privilege Escalation
|
6 |
WEB
|
Kaustubh G. Padwad
|
|
2016-02-16
|
|
ManageEngine OPutils 8.0 - Multiple Vulnerabilities
|
5 |
WEB
|
Kaustubh G. Padwad
|
|
2016-02-15
|
|
Tiny Tiny RSS - Blind SQL Injection
|
5 |
WEB
|
Kacper Szurek
|
|
2015-08-27
|
|
Oracle GlassFish Server 4.1 - Directory Traversal
|
6 |
WEB
|
Trustwave's SpiderLabs
|
|
2016-02-10
|
|
Yeager CMS 1.2.1 - Multiple Vulnerabilities
|
6 |
WEB
|
SEC Consult
|
|
2016-02-10
|
|
Apache Sling Framework (Adobe AEM) 2.3.6 - Information Disclosure
|
5 |
WEB
|
Vulnerability-Lab
|
|
2010-03-10
|
|
Employee TimeClock Software 0.99 - SQL Injection
|
7 |
WEB
|
Secunia Research
|
|
2016-02-08
|
|
WordPress Plugin Booking Calendar Contact Form 1.0.23 - Multiple Vulnerabilities
|
5 |
WEB
|
i0akiN SEC-LABORATORY
|
|
2016-02-08
|
|
WordPress Plugin WP User Frontend < 2.3.11 - Unrestricted Arbitrary File Upload
|
6 |
WEB
|
Panagiotis Vagenas
|
|
2016-02-08
|
|
WordPress Plugin WooCommerce Store Toolkit 1.5.5 - Privilege Escalation
|
3 |
WEB
|
Panagiotis Vagenas
|
|
2016-02-08
|
|
WordPress Plugin User Meta Manager 3.4.6 - Information Disclosure
|
4 |
WEB
|
Panagiotis Vagenas
|
|
2016-02-08
|
|
dotDefender Firewall 5.00.12865/5.13-13282 - Cross-Site Request Forgery
|
4 |
WEB
|
hyp3rlinx
|
|
2016-02-08
|
|
Solr 3.5.0 - Arbitrary Data Deletion
|
4 |
WEB
|
N37
|
|
2016-02-04
|
|
Symphony CMS 2.6.3 - Multiple SQL Injections
|
3 |
WEB
|
Sachin Wagh
|
|
2016-02-04
|
|
ATutor 2.2 - Multiple Cross-Site Scripting Vulnerabilities
|
5 |
WEB
|
Curesec Research Team
|
|
2016-02-04
|
|
OpenDocMan 1.3.4 - Cross-Site Request Forgery
|
3 |
WEB
|
Curesec Research Team
|
|
2016-02-04
|
|
UliCMS v9.8.1 - SQL Injection
|
4 |
WEB
|
Manuel García Cárdenas
|
|
2016-02-04
|
|
Netgear NMS300 ProSafe Network Management System - Multiple Vulnerabilities
|
4 |
WEB
|
Pedro Ribeiro
|
|
2016-02-04
|
|
WordPress Plugin User Meta Manager 3.4.6 - Privilege Escalation
|
4 |
WEB
|
Panagiotis Vagenas
|
|
2016-02-04
|
|
WordPress Plugin User Meta Manager 3.4.6 - Blind SQL Injection
|
4 |
WEB
|
Panagiotis Vagenas
|
|
2016-02-04
|
|
D-Link DVGN5402SP - Multiple Vulnerabilities
|
5 |
WEB
|
Karn Ganeshen
|
|
2016-02-04
|
|
GE Industrial Solutions UPS SNMP Adapter < 4.8 - Multiple Vulnerabilities
|
5 |
WEB
|
Karn Ganeshen
|
|
2016-02-03
|
|
Viprinet Multichannel VPN Router 300 - Persistent Cross-Site Scripting
|
5 |
WEB
|
Portcullis
|
|
2016-02-03
|
|
Jive Forums 5.5.25 - Directory Traversal
|
5 |
WEB
|
ZhaoHuAn
|
|
2016-02-03
|
|
TimeClock Software 0.995 - (Authenticated ) Multiple SQL Injections
|
4 |
WEB
|
Benetrix
|
|
2016-02-02
|
|
eClinicalWorks (CCMR) - Multiple Vulnerabilities
|
6 |
WEB
|
Jerold Hoong
|
|
2016-02-02
|
|
Manage Engine Network Configuration Manager Build 11000 - Cross-Site Request Forgery
|
4 |
WEB
|
Kaustubh G. Padwad
|
|
2016-02-01
|
|
ManageEngine EventLog Analyzer 4.0 < 10 - Privilege Escalation
|
5 |
WEB
|
GraphX
|
|
2016-02-01
|
|
Hippo CMS 10.1 - Multiple Vulnerabilities
|
6 |
WEB
|
LiquidWorm
|
|
2016-02-01
|
|
iScripts EasyCreate 3.0 - Remote Code Execution
|
5 |
WEB
|
Bikramaditya Guha
|
|
2016-02-01
|
|
iScripts EasyCreate 3.0 - Multiple Vulnerabilities
|
5 |
WEB
|
Bikramaditya Guha
|
|
2016-01-29
|
|
ProjectSend r582 - Multiple Vulnerabilities
|
5 |
WEB
|
Filippo Cavallarin
|
|
2016-01-29
|
|
WordPress Plugin Simple Add Pages or Posts 1.6 - Cross-Site Request Forgery
|
5 |
WEB
|
ALIREZA_PROMIS
|
|
2016-01-28
|
|
SAP HANA 1.00.095 - hdbindexserver Memory Corruption
|
5 |
WEB
|
ERPScan
|
|
2016-01-28
|
|
Netgear WNR1000v4 - Authentication Bypass
|
5 |
WEB
|
Daniel Haake
|
|
2016-01-28
|
|
Ramui Web Hosting Directory Script 4.0 - Remote File Inclusion
|
5 |
WEB
|
bd0rk
|
|
2016-01-28
|
|
Ramui Forum Script 9.0 - SQL Injection
|
4 |
WEB
|
bd0rk
|
|
2014-07-17
|
|
Fonality trixbox - 'index.php' Remote Code Execution
|
5 |
WEB
|
AtT4CKxT3rR0r1ST
|
|
2014-07-17
|
|
Fonality trixbox - 'endpointcfg.php' Directory Traversal
|
3 |
WEB
|
AtT4CKxT3rR0r1ST
|
|
2014-07-17
|
|
Fonality trixbox - 'repo.php' Directory Traversal
|
4 |
WEB
|
AtT4CKxT3rR0r1ST
|
|
2014-07-17
|
|
Fonality trixbox - 'asterisk_info.php' Directory Traversal
|
4 |
WEB
|
AtT4CKxT3rR0r1ST
|
|
2014-07-17
|
|
Fonality trixbox - 'index.php' Directory Traversal
|
5 |
WEB
|
AtT4CKxT3rR0r1ST
|
|
2014-07-17
|
|
Fonality trixbox - 'endpoint_generic.php' SQL Injection
|
5 |
WEB
|
AtT4CKxT3rR0r1ST
|
|
2014-07-17
|
|
OL-Commerce - '/OL-Commerce/admin/create_account.php?entry_country_id' SQL Injection
|
5 |
WEB
|
AtT4CKxT3rR0r1ST
|
|
2014-07-17
|
|
OL-Commerce - '/OL-Commerce/create_account.php?country' SQL Injection
|
5 |
WEB
|
AtT4CKxT3rR0r1ST
|
|
2014-07-17
|
|
OL-Commerce - '/OL-Commerce/affiliate_show_banner.php?affiliate_banner_id' SQL Injection
|
5 |
WEB
|
AtT4CKxT3rR0r1ST
|
|
2014-07-17
|
|
OL-Commerce - '/OL-Commerce/affiliate_signup.php?a_country' SQL Injection
|
5 |
WEB
|
AtT4CKxT3rR0r1ST
|
|
2016-01-27
|
|
WordPress Plugin Booking Calendar Contact Form 1.1.24 - addslashes SQL Injection
|
4 |
WEB
|
i0akiN SEC-LABORATORY
|
|
2016-01-27
|
|
WordPress Plugin Booking Calendar Contact Form 1.1.24 - Multiple Vulnerabilities
|
5 |
WEB
|
i0akiN SEC-LABORATORY
|
|
2016-01-27
|
|
BK Mobile jQuery CMS 2.4 - Multiple Vulnerabilities
|
5 |
WEB
|
Rahul Pratap Singh
|
|
2016-01-27
|
|
Secure Item Hub 1.0 iOS - Multiple Vulnerabilities
|
5 |
WEB
|
Vulnerability-Lab
|
|
2014-06-12
|
|
Yealink VoIP Phones - '/servlet' HTTP Response Splitting
|
5 |
WEB
|
Jesus Oquendo
|
|
2014-06-08
|
|
WordPress Theme Elegance - '/elegance/lib/scripts/dl-skin.php' Local File Disclosure
|
5 |
WEB
|
Felipe Andrian Peixoto
|
|
2014-05-19
|
|
Wiser Backup - Information Disclosure
|
5 |
WEB
|
AtT4CKxT3rR0r1ST
|
|
2016-01-26
|
|
Gongwalker API Manager 1.1 - Blind SQL Injection
|
5 |
WEB
|
HaHwul
|
|
2016-01-26
|
|
WordPress Plugin Booking Calendar Contact Form 1.1.23 - Shortcode SQL Injection
|
5 |
WEB
|
i0akiN SEC-LABORATORY
|
|
2014-09-14
|
|
WordPress Plugin Wordfence Security - Multiple Vulnerabilities
|
4 |
WEB
|
Voxel@Night
|
|
2014-09-12
|
|
Food Order Portal - 'admin_user_delete.php' Cross-Site Request Forgery
|
6 |
WEB
|
KnocKout
|
|
2016-01-25
|
|
WordPress Plugin Booking Calendar Contact Form 1.1.23 - SQL Injection
|
4 |
WEB
|
i0akiN SEC-LABORATORY
|
|
2016-01-25
|
|
pfSense Firewall 2.2.5 - Config File Cross-Site Request Forgery
|
6 |
WEB
|
Aatif Shahdad
|
|
2014-09-08
|
|
WordPress Plugin W3 Total Cache - 'admin.php' Cross-Site Request Forgery
|
6 |
WEB
|
Voxel@Night
|
|
2014-09-08
|
|
WordPress Plugin Xhanch My Twitter - Cross-Site Request Forgery
|
4 |
WEB
|
Voxel@Night
|
|
2014-09-08
|
|
WordPress Plugin WP to Twitter - Authentication Bypass
|
4 |
WEB
|
Voxel@Night
|
|
2014-09-08
|
|
WordPress Plugin Ninja Forms 2.7.7 - Authentication Bypass
|
4 |
WEB
|
Voxel@Night
|
|
2014-09-07
|
|
WordPress Plugin Spider Facebook - 'facebook.php' SQL Injection
|
4 |
WEB
|
Claudio Viviani
|
|
2014-09-08
|
|
WordPress Theme Antioch - 'download.php' Arbitrary File Download
|
4 |
WEB
|
Ashiyane Digital Security Team
|
|
2014-09-08
|
|
WordPress Theme Epic - 'download.php' Arbitrary File Download
|
4 |
WEB
|
Ashiyane Digital Security Team
|
|
2014-09-08
|
|
WordPress Theme Authentic - 'download.php' Arbitrary File Download
|
4 |
WEB
|
Ashiyane Digital Security Team
|
|
2014-09-08
|
|
WordPress Theme Urban City - 'download.php' Arbitrary File Download
|
6 |
WEB
|
Ashiyane Digital Security Team
|
|
2014-08-26
|
|
Joomla! Component spidervideoplayer - 'theme' SQL Injection
|
4 |
WEB
|
Claudio Viviani
|
|
2014-08-24
|
|
WordPress Plugin KenBurner Slider - 'admin-ajax.php' Arbitrary File Download
|
5 |
WEB
|
MF0x
|
|
2014-08-22
|
|
MyAwards MyBB Module - Cross-Site Request Forgery
|
4 |
WEB
|
Vagineer
|
|
2014-08-20
|
|
ArticleFR - 'id' SQL Injection
|
4 |
WEB
|
High-Tech Bridge
|
|
2014-08-20
|
|
ManageEngine Password Manager Pro / ManageEngine IT360 - SQL Injection
|
4 |
WEB
|
Pedro Ribeiro
|
|
2014-08-19
|
|
WordPress Plugin WP Content Source Control - 'download.php' Directory Traversal
|
3 |
WEB
|
Henri Salo
|
|
2014-07-28
|
|
WordPress Plugin FB Gorilla - 'game_play.php' SQL Injection
|
4 |
WEB
|
Amirh03in
|
|
2014-08-11
|
|
WordPress Plugin GB Gallery Slideshow - '/wp-admin/admin-ajax.php' SQL Injection
|
5 |
WEB
|
Claudio Viviani
|
|
2014-08-08
|
|
VoipSwitch - 'user.php' Local File Inclusion
|
7 |
WEB
|
0x4148
|
|
2014-05-28
|
|
WordPress Plugin HDW Player - '/wp-admin/admin.php' SQL Injection
|
6 |
WEB
|
Anant Shrivastava
|
|
2014-08-06
|
|
WordPress Plugin wpSS - 'ss_handler.php' SQL Injection
|
6 |
WEB
|
Ashiyane Digital Security Team
|
|
2014-07-28
|
|
CMSimple 4.4.4 - 'color' Remote Code Execution
|
5 |
WEB
|
Govind Singh
|
|
2014-07-28
|
|
CMSimple 4.4.4 - Remote File Inclusion
|
5 |
WEB
|
Govind Singh
|
|
2014-07-28
|
|
CMSimple - Default Administrator Credentials
|
5 |
WEB
|
Govind Singh
|
|
2014-07-28
|
|
WordPress Plugin WhyDoWork AdSense - 'options-general.php' Cross-Site Request Forgery (Option Manipu
|
5 |
WEB
|
Dylan Irzi
|
|
2014-07-28
|
|
WordPress Plugin Lead Octopus Power - 'id' SQL Injection
|
6 |
WEB
|
Amirh03in
|
|
2014-07-23
|
|
Ubiquiti Networks UniFi Video Default - 'crossdomain.xml' Security Bypass
|
5 |
WEB
|
Seth Art
|
|
2014-07-23
|
|
Ilya Birman E2 - '/@actions/comment-process' SQL Injection
|
5 |
WEB
|
High-Tech Bridge
|
