Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.9TwistedBrush Pro Studio 24.06 contains a denial of service vulnerability that allows local attackers to crash the application by importing a malformed .srp script file.Check if you run itEPSS 0.18%Mar 21, 2026
- Medium6.9TwistedBrush Pro Studio 24.06 contains a denial of service vulnerability in the Resize Image function that allows local attackers to crash the application by supplying…Check if you run itEPSS 0.20%Mar 21, 2026
- Medium6.9TwistedBrush Pro Studio 24.06 contains a denial of service vulnerability in the Script Recorder component that allows local attackers to crash the application by suppl…Check if you run itEPSS 0.19%Mar 21, 2026
- Medium6.8Tomabo MP4 Converter 3.25.22 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in…Check if you run itEPSS 0.20%Mar 21, 2026
- Medium6.9CEWE PHOTO IMPORTER 6.4.3 contains a denial of service vulnerability that allows local attackers to crash the application by importing a specially crafted image file.Check if you run itEPSS 0.18%Mar 21, 2026
- High8.7CEWE PHOTO SHOW 6.4.3 contains a denial of service vulnerability that allows attackers to crash the application by submitting an excessively long buffer to the password field.Check if you run itEPSS 0.42%Mar 21, 2026
- Medium6.9Sandboxie 5.30 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the Program A…Check if you run itEPSS 0.18%Mar 21, 2026
- Medium6.9Encrypt PDF 2.3 contains a buffer overflow vulnerability that allows local attackers to crash the application by inputting excessively long strings into password fields.Check if you run itEPSS 0.19%Mar 21, 2026
- Medium6.9VeryPDF PCL Converter 2.7 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long password string.Check if you run itEPSS 0.12%Mar 21, 2026
- Medium6.9BlueStacks 4.80.0.1060 contains a denial of service vulnerability that allows local attackers to crash the application by submitting oversized input to the search field.Check if you run itEPSS 0.18%Mar 21, 2026
- Medium6.9NetAware 1.20 contains a buffer overflow vulnerability in the User Blocking feature that allows local attackers to crash the application by supplying oversized input.Check if you run itEPSS 0.20%Mar 21, 2026
- Medium6.9NetAware 1.20 contains a buffer overflow vulnerability in the Share Name field that allows local attackers to crash the application by supplying an excessively long string.Check if you run itEPSS 0.20%Mar 21, 2026
- Medium6.9Terminal Services Manager 3.2.1 contains a local buffer overflow vulnerability that allows attackers to crash the application by supplying an excessively long string i…Check if you run itEPSS 0.20%Mar 21, 2026
- Medium6.9Pidgin 2.13.0 contains a denial of service vulnerability that allows local attackers to crash the application by providing an excessively long username string during a…Check if you run itEPSS 0.20%Mar 21, 2026
- Medium6.9TransMac 12.3 contains a buffer overflow vulnerability in the volume name field that allows local attackers to crash the application by supplying an excessively long string.Check if you run itEPSS 0.19%Mar 21, 2026
- Low2.1A vulnerability has been found in Foundation Agents MetaGPT up to 0.8.1.Check if you run itEPSS 0.26%Mar 21, 2026
- Low2.1A flaw has been found in PbootCMS up to 3.2.12.Check if you run itEPSS 0.21%Mar 21, 2026
- Low2.1A vulnerability was detected in vanna-ai vanna up to 2.0.2.Check if you run itEPSS 0.20%Mar 21, 2026
- Low2.1A security vulnerability has been detected in vanna-ai vanna up to 2.0.2.Check if you run itEPSS 0.24%Mar 21, 2026
- Low2.1A weakness has been identified in PbootCMS up to 3.2.12.Check if you run itEPSS 0.28%Mar 21, 2026
- High7.5The JetFormBuilder plugin for WordPress is vulnerable to arbitrary file read via path traversal in all versions up to, and including, 3.5.6.2.Check if you run itEPSS 0.41%Mar 21, 2026
- Low2.1A security flaw has been discovered in PbootCMS up to 3.2.12.Check if you run itEPSS 0.30%Mar 21, 2026
- High8.8The CMS Commander plugin for WordPress is vulnerable to SQL Injection via the 'or_blogname', 'or_blogdescription', and 'or_admin_email' parameters in all versions up t…Check if you run itEPSS 0.36%Mar 21, 2026
- High7.2The myLinksDump plugin for WordPress is vulnerable to SQL Injection via the 'sort_by' and 'sort_order' parameters in all versions up to, and including, 1.6 due to insu…Check if you run itEPSS 0.38%Mar 21, 2026
- Medium6.4The Show Posts list – Easy designs, filters and more plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'post_type' shortcode attribute in the 'swiftpost-lisCheck if you run itEPSS 0.25%Mar 21, 2026
Sort