Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
sitewatch vulnerabilities and exploits
(subscribe to this query)
5
CVSSv2
CVE-2017-6049
Detcon Sitewatch Gateway, all versions without cellular, an attacker can edit settings on the device using a specially crafted URL.
3m Detcon Sitewatch Gateway
5
CVSSv2
CVE-2017-6047
Detcon Sitewatch Gateway, all versions without cellular, Passwords are presented in plaintext in a file that is accessible without authentication.
3m Detcon Sitewatch Gateway -
4.3
CVSSv2
CVE-2011-0050
Cross-site scripting (XSS) vulnerability in the nonjs interface (interfaces/nonjs.pm) in CGI:IRC prior to 0.5.10 allows remote malicious users to inject arbitrary web script or HTML via the R parameter.
Cgiirc Cgi\\ Irc
5
CVSSv2
CVE-2011-0049
Directory traversal vulnerability in the _list_file_get function in lib/Majordomo.pm in Majordomo 2 prior to 20110131 allows remote malicious users to read arbitrary files via .. (dot dot) sequences in the help command, as demonstrated using (1) a crafted email and (2) cgi-bin/mj...
Mj2 Majordomo 2 20110128
Mj2 Majordomo 2 20110113
Mj2 Majordomo 2
Mj2 Majordomo 2 20110124
Mj2 Majordomo 2 20110108
Mj2 Majordomo 2 20110127
Mj2 Majordomo 2 20110125
Mj2 Majordomo 2 20110117
Mj2 Majordomo 2 20110101
Mj2 Majordomo 2 20110116
Mj2 Majordomo 2 20110109
Mj2 Majordomo 2 20110115
Mj2 Majordomo 2 20110114
Mj2 Majordomo 2 20110123
Mj2 Majordomo 2 20110112
Mj2 Majordomo 2 20110103
Mj2 Majordomo 2 20110118
Mj2 Majordomo 2 20110121
Mj2 Majordomo 2 20110104
Mj2 Majordomo 2 20110129
Mj2 Majordomo 2 20110111
Mj2 Majordomo 2 20110126
1 EDB exploit
2 Nmap scripts
7.5
CVSSv2
CVE-2011-5022
SQL injection vulnerability in search.php in Pligg CMS 1.1.2 allows remote malicious users to execute arbitrary SQL commands via the status parameter.
Pligg Pligg Cms 1.1.2
1 EDB exploit
4.3
CVSSv2
CVE-2011-3852
Cross-site scripting (XSS) vulnerability in the EvoLve theme prior to 1.2.6 for WordPress allows remote malicious users to inject arbitrary web script or HTML via the s parameter.
Theme4press Evolve
Theme4press Evolve 1.0
Theme4press Evolve 1.0.0
Theme4press Evolve 1.0.1
Theme4press Evolve 1.0.2
Theme4press Evolve 1.0.3
Theme4press Evolve 1.0.4
Theme4press Evolve 1.0.5
Theme4press Evolve 1.0.6
Theme4press Evolve 1.0.7
Theme4press Evolve 1.0.8
Theme4press Evolve 1.0.9
Theme4press Evolve 1.1.0
Theme4press Evolve 1.1.1
Theme4press Evolve 1.1.2
Theme4press Evolve 1.1.3
Theme4press Evolve 1.1.4
Theme4press Evolve 1.1.5
Theme4press Evolve 1.1.6
Theme4press Evolve 1.1.7
Theme4press Evolve 1.1.8
Theme4press Evolve 1.1.9
1 EDB exploit
4.3
CVSSv2
CVE-2011-3856
Cross-site scripting (XSS) vulnerability in the Elegant Grunge theme prior to 1.0.4 for WordPress allows remote malicious users to inject arbitrary web script or HTML via the s parameter.
Atastypixel Elegant Grunge
Atastypixel Elegant Grunge 0.1
Atastypixel Elegant Grunge 0.2
Atastypixel Elegant Grunge 0.2.1
Atastypixel Elegant Grunge 0.2.2
Atastypixel Elegant Grunge 0.3
Atastypixel Elegant Grunge 0.4.1
Atastypixel Elegant Grunge 0.4.2
Atastypixel Elegant Grunge 0.4.3
Atastypixel Elegant Grunge 0.4.4
Atastypixel Elegant Grunge 0.4.5
Atastypixel Elegant Grunge 1.0
Atastypixel Elegant Grunge 1.0.1
Atastypixel Elegant Grunge 1.0.2
1 EDB exploit
4.3
CVSSv2
CVE-2011-3859
Cross-site scripting (XSS) vulnerability in the Trending theme prior to 0.2 for WordPress allows remote malicious users to inject arbitrary web script or HTML via the cpage parameter.
Themehybrid Trending
1 EDB exploit
4.3
CVSSv2
CVE-2011-3862
Cross-site scripting (XSS) vulnerability in the Morning Coffee theme prior to 3.6 for WordPress allows remote malicious users to inject arbitrary web script or HTML via the PATH_INFO to index.php.
Adazing Morning Coffee
Adazing Morning Coffee 2.7
Adazing Morning Coffee 2.8
Adazing Morning Coffee 2.9
Adazing Morning Coffee 3.0
Adazing Morning Coffee 3.1
Adazing Morning Coffee 3.2
Adazing Morning Coffee 3.4
1 EDB exploit
4.3
CVSSv2
CVE-2011-3863
Cross-site scripting (XSS) vulnerability in the RedLine theme prior to 1.66 for WordPress allows remote malicious users to inject arbitrary web script or HTML via the s parameter.
Post-scriptum Redline
Post-scriptum Redline 0.2.1
Post-scriptum Redline 0.2.2
Post-scriptum Redline 0.2.3
Post-scriptum Redline 0.2.5
Post-scriptum Redline 0.2.6
Post-scriptum Redline 0.2.7
Post-scriptum Redline 0.2.7.1
Post-scriptum Redline 0.2.9
Post-scriptum Redline 0.3
Post-scriptum Redline 0.5
Post-scriptum Redline 0.5.5
Post-scriptum Redline 0.7
Post-scriptum Redline 0.7.1
Post-scriptum Redline 0.7.5
Post-scriptum Redline 0.8
Post-scriptum Redline 0.85
Post-scriptum Redline 0.90
Post-scriptum Redline 1.0
Post-scriptum Redline 1.0.1
Post-scriptum Redline 1.0.3
Post-scriptum Redline 1.1
1 EDB exploit
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-29895
blind SQL injection
CVE-2024-5064
CVE-2023-52677
CVE-2023-52682
CVE-2024-30051
CVE-2024-35849
remote attackers
remote
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
NEXT »