Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.8River Past Audio Converter 7.7.16 contains a local buffer overflow vulnerability in the activation code field that allows local attackers to crash the application by s…Check if you run itEPSS 0.12%Mar 26, 2026
- Medium6.9MyVideoConverter Pro 3.14 contains a local buffer overflow vulnerability that allows attackers to crash the application by supplying an excessively long string to the…Check if you run itEPSS 0.19%Mar 26, 2026
- High8.6PassFab RAR Password Recovery 9.3.2 contains a structured exception handler (SEH) buffer overflow vulnerability that allows local attackers to execute arbitrary code b…Check if you run itEPSS 0.23%Mar 26, 2026
- High8.6PDF Explorer 1.5.66.2 contains a structured exception handler (SEH) overflow vulnerability that allows local attackers to execute arbitrary code by overwriting SEH rec…Check if you run itEPSS 0.23%Mar 26, 2026
- Medium6.9MegaPing contains a local buffer overflow vulnerability that allows local attackers to crash the application by supplying an oversized payload to the Destination Addre…Check if you run itEPSS 0.21%Mar 26, 2026
- High8.6Nsauditor 3.0.28.0 contains a structured exception handling buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying malicious…Check if you run itEPSS 0.26%Mar 26, 2026
- High8.5Allok Video Splitter 3.1.1217 contains a buffer overflow vulnerability that allows local attackers to cause a denial of service or execute arbitrary code by supplying…Check if you run itEPSS 0.27%Mar 26, 2026
- Medium4.9The Complianz – GDPR/CCPA Cookie Consent plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 7.4.4.2.Check if you run itEPSS 0.24%Mar 26, 2026
- High7.2The Fluent Booking plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple parameters in all versions up to, and including, 2.0.01 due to insufficient inputCheck if you run itEPSS 0.32%Mar 26, 2026
- Medium4.3The Conditional Menus plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2.6.Check if you run itEPSS 0.17%Mar 26, 2026
- High7.5The JS Help Desk – AI-Powered Support & Ticketing System plugin for WordPress is vulnerable to SQL Injection via the parameter in the function in all versions up to, and including,Check if you run itEPSS 0.32%Mar 26, 2026
- High8.6PassFab Excel Password Recovery 8.3.1 contains a structured exception handling buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying a maCheck if you run itEPSS 0.26%Mar 26, 2026
- Medium6.9AnyBurn 4.3 contains a local buffer overflow vulnerability that allows local attackers to crash the application by supplying an excessively long string in the image file name fieldCheck if you run itEPSS 0.19%Mar 26, 2026
- Medium6.8Excel Password Recovery Professional 8.2.0.0 contains a local buffer overflow vulnerability that allows attackers to cause a denial of service by supplying an excessively long striCheck if you run itEPSS 0.19%Mar 26, 2026
- High8.6Boxoft wav-wma Converter 1.0 contains a local buffer overflow vulnerability in structured exception handling that allows attackers to execute arbitrary code by crafting malicious WCheck if you run itEPSS 0.21%Mar 26, 2026
- Low2.0A vulnerability was determined in itsourcecode Free Hotel Reservation System 1.0.Check if you run itEPSS 0.23%Mar 26, 2026
- Medium6.5HCL Aftermarket DPC is affected by Use of Vulnerable/Outdated Versions vulnerability using which an attacker may make use of the exploits available across the internet…Check if you run itEPSS 0.19%Mar 26, 2026
- Medium5.3HCL Aftermarket DPC is affected by Internal IP Disclosure vulnerability will give attackers a clearer map of the organization’s network layout.Check if you run itEPSS 0.21%Mar 26, 2026
- High8.1HCL Aftermarket DPC is affected by Admin Session Concurrency vulnerability using which an attacker can exploit concurrent sessions to hijack or impersonate an admin user.Check if you run itEPSS 0.23%Mar 26, 2026
- Medium4.3HCL Aftermarket DPC is affected by Cross-Origin Resource Sharing vulnerability.Check if you run itEPSS 0.19%Mar 26, 2026
- Medium4.3HCL Aftermarket DPC is affected by Cross Domain Script Include vulnerability where an attacker using external scripts can tamper with the DOM, altering the content or…Check if you run itEPSS 0.24%Mar 26, 2026
- Medium5.3HCL Aftermarket DPC is affected by Banner Disclosure vulnerability where attackers gain insights into the system’s software and version details which would allow them…Check if you run itEPSS 0.24%Mar 26, 2026
- High8.8HCL Aftermarket DPC is affected by HTTP Response Splitting vulnerability where in depending on how the web application handles the split response, an attacker may be a…Check if you run itEPSS 0.34%Mar 26, 2026
- Critical9.8HCL Aftermarket DPC is affected by Improper Input Validation which allows an attacker to inject executable code and can carry out attacks such as XSS, SQL Injection, C…Check if you run itEPSS 1.06%Mar 26, 2026
- Critical9.8HCL Aftermarket DPC is affected by Weak Password Policy vulnerability, which makes it easier for attackers to guess weak passwords or use brute-force techniques to gai…Check if you run itEPSS 0.26%Mar 26, 2026
Sort