Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.9FileZilla 3.40.0 contains a denial of service vulnerability in the local search functionality that allows local attackers to crash the application by supplying a malformed path strCheck if you run itEPSS 0.18%Apr 5, 2026
- Medium5.3CMSsite 1.0 contains a cross-site request forgery vulnerability that allows attackers to perform unauthorized administrative actions by crafting malicious HTML forms.Check if you run itEPSS 0.14%Apr 5, 2026
- High8.6Xlight FTP Server 3.9.1 contains a structured exception handler (SEH) overwrite vulnerability that allows local attackers to crash the application and overwrite SEH pointers by supCheck if you run itEPSS 0.21%Apr 5, 2026
- High8.8Advance Gift Shop Pro Script 2.0.3 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code througCheck if you run itEPSS 0.40%Apr 5, 2026
- High8.5RealTerm Serial Terminal 2.0.0.70 contains a structured exception handling (SEH) buffer overflow vulnerability in the Echo Port tab that allows local attackers to execute arbitraryCheck if you run itEPSS 0.33%Apr 5, 2026
- High8.8C4G Basic Laboratory Information System 3.4 contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to execute arbitrary SQL commands by injecting maliCheck if you run itEPSS 0.28%Apr 5, 2026
- Medium6.9WinRAR 5.61 contains a denial of service vulnerability that allows local attackers to crash the application by placing a malformed winrar.lng language file in the installation direCheck if you run itEPSS 0.44%Apr 5, 2026
- High8.8Ask Expert Script 3.0.5 contains cross-site scripting and SQL injection vulnerabilities that allow unauthenticated attackers to inject malicious code by manipulating URL parametersCheck if you run itEPSS 0.48%Apr 5, 2026
- High8.8CMSsite 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'post' parameter.Check if you run itEPSS 0.42%Apr 5, 2026
- High8.7UniSharp Laravel File Manager v2.0.0-alpha7 and v2.0 contain an arbitrary file upload vulnerability that allows authenticated attackers to upload malicious files by sending multipaCheck if you run itEPSS 0.43%Apr 5, 2026
- High8.8PilusCart 1.4.1 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'send' parameter.Check if you run itEPSS 0.39%Apr 5, 2026
- High8.7VA MAX 8.3.4 contains a remote code execution vulnerability that allows authenticated attackers to execute arbitrary commands by injecting shell metacharacters into the mtu_eth0 paCheck if you run itEPSS 0.68%Apr 5, 2026
- High8.6River Past Video Cleaner 7.6.3 contains a structured exception handler buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying a maliciousCheck if you run itEPSS 0.21%Apr 5, 2026
- High8.8qdPM 9.1 contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting SQL code through the search_by_extrafields[] parameter.Check if you run itEPSS 0.32%Apr 5, 2026
- High8.8News Website Script 2.0.5 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the news ID parCheck if you run itEPSS 0.42%Apr 5, 2026
- Medium6.9TaskInfo 8.2.0.280 contains a local buffer overflow vulnerability that allows attackers to crash the application by supplying oversized input to registration fields.Check if you run itEPSS 0.20%Apr 5, 2026
- Medium6.9SpotAuditor 3.6.7 contains a local buffer overflow vulnerability in the Base64 Password Decoder component that allows attackers to crash the application.Check if you run itEPSS 0.25%Apr 5, 2026
- Medium6.9River Past Ringtone Converter 2.7.6.1601 contains a local buffer overflow vulnerability that allows attackers to crash the application by supplying oversized input to activation fiCheck if you run itEPSS 0.20%Apr 5, 2026
- High7.1SuiteCRM 7.10.7 contains a time-based SQL injection vulnerability in the record parameter of the Users module DetailView action that allows authenticated attackers to manipulate daCheck if you run itEPSS 0.36%Apr 5, 2026
- High7.1SuiteCRM 7.10.7 contains a SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code through the parentTab parameter.Check if you run itEPSS 0.36%Apr 5, 2026
- High8.8ResourceSpace 8.6 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the 'ref' paramCheck if you run itEPSS 0.43%Apr 5, 2026
- Medium6.9Remote Process Explorer 1.0.0.16 contains a local buffer overflow vulnerability that allows attackers to cause a denial of service by sending a crafted payload to the Add ComputerCheck if you run itEPSS 0.15%Apr 5, 2026
- Medium6.9LanHelper 1.74 contains a local buffer overflow vulnerability that allows attackers to crash the application by sending excessively long input strings.Check if you run itEPSS 0.24%Apr 5, 2026
- Medium6.9ASPRunner Professional 6.0.766 contains a local buffer overflow vulnerability that allows attackers to cause a denial of service by supplying an excessively long project name.Check if you run itEPSS 0.15%Apr 5, 2026
- Medium6.8a-Mac Address Change 5.4 contains a local buffer overflow vulnerability that allows local attackers to crash the application by supplying oversized input to registration form fieldCheck if you run itEPSS 0.14%Apr 5, 2026
Sort