Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.1i-doit CMDB 1.12 contains an arbitrary file download vulnerability that allows authenticated attackers to download sensitive files by manipulating the file parameter in index.php.Check if you run itEPSS 0.38%Mar 21, 2026
- High8.8i-doit CMDB 1.12 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the…Check if you run itEPSS 0.36%Mar 21, 2026
- High8.8ownDMS 4.7 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the IMG parameter.Check if you run itEPSS 0.34%Mar 21, 2026
- Medium6.8SeoToaster Ecommerce 3.0.0 contains a local file inclusion vulnerability that allows authenticated attackers to read arbitrary files by manipulating path parameters in…Check if you run itEPSS 0.92%Mar 21, 2026
- High8.8Kepler Wallpaper Script 1.1 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code…Check if you run itEPSS 0.35%Mar 21, 2026
- High8.8SimplePress CMS 1.0.7 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code throug…Check if you run itEPSS 0.35%Mar 21, 2026
- High8.7phpTransformer 2016.9 contains a directory traversal vulnerability that allows unauthenticated attackers to access arbitrary files by manipulating the path parameter.Check if you run itEPSS 1.13%Mar 21, 2026
- High8.8phpTransformer 2016.9 contains an SQL injection vulnerability that allows remote attackers to execute arbitrary SQL queries by injecting malicious code through the idnews parameterCheck if you run itEPSS 0.39%Mar 21, 2026
- High7.1Green CMS 2.x contains a path traversal vulnerability that allows authenticated attackers to download arbitrary files and directories by injecting directory traversal sequences.Check if you run itEPSS 1.15%Mar 21, 2026
- High7.1Green CMS 2.x contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code through the cat parameter.Check if you run itEPSS 0.36%Mar 21, 2026
- Low2.1A vulnerability was found in Foundation Agents MetaGPT up to 0.8.1.Check if you run itEPSS 0.26%Mar 21, 2026
- Medium6.9NordVPN 6.19.6 contains a denial of service vulnerability that allows local attackers to crash the application by submitting an excessively long string in the email input field.Check if you run itEPSS 0.16%Mar 21, 2026
- Medium6.9MediaMonkey 4.1.23 contains a denial of service vulnerability that allows local attackers to crash the application by opening a specially crafted MP3 file containing a…Check if you run itEPSS 0.18%Mar 21, 2026
- Medium6.8RealTerm Serial Terminal 2.0.0.70 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long stri…Check if you run itEPSS 0.23%Mar 21, 2026
- Medium6.9RealTerm Serial Terminal 2.0.0.70 contains a stack-based buffer overflow vulnerability in the Echo Port field that allows local attackers to crash the application by t…Check if you run itEPSS 0.20%Mar 21, 2026
- Critical9.3Memu Play 6.0.7 contains an insecure file permissions vulnerability that allows low-privilege users to escalate privileges by replacing the MemuService.exe executable.Check if you run itEPSS 0.33%Mar 21, 2026
- Medium6.9Valentina Studio 9.0.5 Linux contains a buffer overflow vulnerability in the Host field of the connection dialog that allows local attackers to crash the application b…Check if you run itEPSS 0.19%Mar 21, 2026
- Medium6.9Magic Iso Maker 5.5 build 281 contains a buffer overflow vulnerability in the Serial Code registration field that allows local attackers to crash the application by su…Check if you run itEPSS 0.19%Mar 21, 2026
- Medium6.8PCHelpWareV2 1.0.0.5 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the Group field.Check if you run itEPSS 0.44%Mar 21, 2026
- Medium6.9PCHelpWareV2 1.0.0.5 contains a denial of service vulnerability that allows local attackers to crash the application by supplying a malformed image file.Check if you run itEPSS 0.18%Mar 21, 2026
- Medium6.8jetAudio 8.1.7 contains a buffer overflow vulnerability in the video converter component that allows local attackers to crash the application by supplying an oversized…Check if you run itEPSS 0.21%Mar 21, 2026
- Medium6.9Lyric Maker 2.0.1.0 contains a buffer overflow vulnerability that allows local attackers to crash the application by supplying an excessively long string in the Title field.Check if you run itEPSS 0.19%Mar 21, 2026
- High8.7Lyric Video Creator 2.1 contains a denial of service vulnerability that allows attackers to crash the application by processing malformed MP3 files.Check if you run itEPSS 0.49%Mar 21, 2026
- Medium6.8SpotPaltalk 1.1.5 contains a denial of service vulnerability in the registration code input field that allows local attackers to crash the application by submitting an…Check if you run itEPSS 0.18%Mar 21, 2026
- Medium6.9Selfie Studio 2.17 contains a denial of service vulnerability in the Resize Image function that allows local attackers to crash the application by supplying an excessi…Check if you run itEPSS 0.19%Mar 21, 2026
Sort