Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.6River Past CamDo 3.7.6 contains a structured exception handler (SEH) buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying a malicious stCheck if you run itEPSS 0.19%Mar 26, 2026
- Medium6.8River Past Audio Converter 7.7.16 contains a local buffer overflow vulnerability in the activation code field that allows local attackers to crash the application by supplying an oCheck if you run itEPSS 0.12%Mar 26, 2026
- Medium6.9MyVideoConverter Pro 3.14 contains a local buffer overflow vulnerability that allows attackers to crash the application by supplying an excessively long string to the registrationCheck if you run itEPSS 0.19%Mar 26, 2026
- High8.6PassFab Excel Password Recovery 8.3.1 contains a structured exception handling buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying a maCheck if you run itEPSS 0.26%Mar 26, 2026
- High8.6PassFab RAR Password Recovery 9.3.2 contains a structured exception handler (SEH) buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying aCheck if you run itEPSS 0.23%Mar 26, 2026
- High8.6PDF Explorer 1.5.66.2 contains a structured exception handler (SEH) overflow vulnerability that allows local attackers to execute arbitrary code by overwriting SEH records with malCheck if you run itEPSS 0.23%Mar 26, 2026
- Medium6.9AnyBurn 4.3 contains a local buffer overflow vulnerability that allows local attackers to crash the application by supplying an excessively long string in the image file name fieldCheck if you run itEPSS 0.19%Mar 26, 2026
- Medium6.8Excel Password Recovery Professional 8.2.0.0 contains a local buffer overflow vulnerability that allows attackers to cause a denial of service by supplying an excessively long striCheck if you run itEPSS 0.19%Mar 26, 2026
- Medium6.9MegaPing contains a local buffer overflow vulnerability that allows local attackers to crash the application by supplying an oversized payload to the Destination Address List fieldCheck if you run itEPSS 0.21%Mar 26, 2026
- High8.6Nsauditor 3.0.28.0 contains a structured exception handling buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying malicious input to theCheck if you run itEPSS 0.26%Mar 26, 2026
- High8.6Boxoft wav-wma Converter 1.0 contains a local buffer overflow vulnerability in structured exception handling that allows attackers to execute arbitrary code by crafting malicious WCheck if you run itEPSS 0.21%Mar 26, 2026
- High8.5Allok Video Splitter 3.1.1217 contains a buffer overflow vulnerability that allows local attackers to cause a denial of service or execute arbitrary code by supplying an oversizedCheck if you run itEPSS 0.27%Mar 26, 2026
- Medium6.5etcd is a distributed key-value store for the data of a distributed system.Check if you run itEPSS 0.22%Mar 26, 2026
- Critical9.8HCL Aftermarket DPC is affected by Missing Functional Level Access Control which will allow attacker to escalate his privileges and may compromise the application and may steal andCheck if you run itEPSS 0.33%Mar 26, 2026
- High8.3HCL Aftermarket DPC is affected by SQL Injection which allows attacker to exploit this vulnerability to retrieve sensitive information from the database.Check if you run itEPSS 0.28%Mar 26, 2026
- Medium5.3A security flaw has been discovered in itsourcecode Payroll Management System up to 1.0.Check if you run itEPSS 0.28%Mar 26, 2026
- Medium5.3A vulnerability was identified in itsourcecode Free Hotel Reservation System 1.0.Check if you run itEPSS 0.20%Mar 26, 2026
- High7.5HCL Aftermarket DPC is affected by Hardcoded Sensitive Data which allows attacker to gain access to the source code or if it is stored in insecure repositories, they can easily retCheck if you run itEPSS 0.20%Mar 26, 2026
- Medium5.5HCL Aftermarket DPC is affected by Failure to Invalidate Session on Password Change will allow attacker to access to a session, then they can maintain control over the account despCheck if you run itEPSS 0.13%Mar 26, 2026
- High7.5HCL Aftermarket DPC is affected by File Discovery which allows attacker could exploit this issue to read sensitive files present in the system and may use it to craft further attacCheck if you run itEPSS 0.34%Mar 26, 2026
- Medium6.5HCL Aftermarket DPC is affected by Session Fixation which allows attacker to takeover the user's session and use it carry out unauthorized transaction behalf of the user.Check if you run itEPSS 0.27%Mar 26, 2026
- Critical9.8HCL Aftermarket DPC is affected by Unrestricted File Upload vulnerability, allows attacker to upload and execute malicious scripts, gaining full control over the server.Check if you run itEPSS 0.31%Mar 26, 2026
- Medium5.3HCL Aftermarket DPC is affected by Spamming Vulnerability which can allow the actor to excessive spamming can consume server bandwidth and processing resources which may lead to DeCheck if you run itEPSS 0.29%Mar 26, 2026
- Critical9.8HCL Aftermarket DPC is affected by Weak Password Policy vulnerability, which makes it easier for attackers to guess weak passwords or use brute-force techniques to gain unauthorizeCheck if you run itEPSS 0.26%Mar 26, 2026
- Critical9.8HCL Aftermarket DPC is affected by Improper Input Validation which allows an attacker to inject executable code and can carry out attacks such as XSS, SQL Injection, Command InjectCheck if you run itEPSS 1.06%Mar 26, 2026
Sort