Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5HCL Aftermarket DPC is affected by Hardcoded Sensitive Data which allows attacker to gain access to the source code or if it is stored in insecure repositories, they c…Check if you run itEPSS 0.20%Mar 26, 2026
- High8.6River Past CamDo 3.7.6 contains a structured exception handler (SEH) buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying a…Check if you run itEPSS 0.19%Mar 26, 2026
- Medium6.8River Past Audio Converter 7.7.16 contains a local buffer overflow vulnerability in the activation code field that allows local attackers to crash the application by s…Check if you run itEPSS 0.12%Mar 26, 2026
- Medium6.9MyVideoConverter Pro 3.14 contains a local buffer overflow vulnerability that allows attackers to crash the application by supplying an excessively long string to the…Check if you run itEPSS 0.19%Mar 26, 2026
- High8.6PassFab Excel Password Recovery 8.3.1 contains a structured exception handling buffer overflow vulnerability that allows local attackers to execute arbitrary code by s…Check if you run itEPSS 0.25%Mar 26, 2026
- High8.6PassFab RAR Password Recovery 9.3.2 contains a structured exception handler (SEH) buffer overflow vulnerability that allows local attackers to execute arbitrary code b…Check if you run itEPSS 0.22%Mar 26, 2026
- High8.6PDF Explorer 1.5.66.2 contains a structured exception handler (SEH) overflow vulnerability that allows local attackers to execute arbitrary code by overwriting SEH rec…Check if you run itEPSS 0.22%Mar 26, 2026
- Medium6.9AnyBurn 4.3 contains a local buffer overflow vulnerability that allows local attackers to crash the application by supplying an excessively long string in the image fi…Check if you run itEPSS 0.19%Mar 26, 2026
- Medium6.8Excel Password Recovery Professional 8.2.0.0 contains a local buffer overflow vulnerability that allows attackers to cause a denial of service by supplying an excessiv…Check if you run itEPSS 0.18%Mar 26, 2026
- Medium6.9MegaPing contains a local buffer overflow vulnerability that allows local attackers to crash the application by supplying an oversized payload to the Destination Addre…Check if you run itEPSS 0.20%Mar 26, 2026
- High8.6Nsauditor 3.0.28.0 contains a structured exception handling buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying malicious…Check if you run itEPSS 0.25%Mar 26, 2026
- High8.6Boxoft wav-wma Converter 1.0 contains a local buffer overflow vulnerability in structured exception handling that allows attackers to execute arbitrary code by craftin…Check if you run itEPSS 0.21%Mar 26, 2026
- High8.5Allok Video Splitter 3.1.1217 contains a buffer overflow vulnerability that allows local attackers to cause a denial of service or execute arbitrary code by supplying…Check if you run itEPSS 0.26%Mar 26, 2026
- Medium6.5HCL Aftermarket DPC is affected by Use of Vulnerable/Outdated Versions vulnerability using which an attacker may make use of the exploits available across the internet…Check if you run itEPSS 0.18%Mar 26, 2026
- Medium4.3HCL Aftermarket DPC is affected by Cross Domain Script Include vulnerability where an attacker using external scripts can tamper with the DOM, altering the content or…Check if you run itEPSS 0.24%Mar 26, 2026
- Medium5.3HCL Aftermarket DPC is affected by Banner Disclosure vulnerability where attackers gain insights into the system’s software and version details which would allow them…Check if you run itEPSS 0.23%Mar 26, 2026
- Critical9.8HCL Aftermarket DPC is affected by Weak Password Policy vulnerability, which makes it easier for attackers to guess weak passwords or use brute-force techniques to gai…Check if you run itEPSS 0.25%Mar 26, 2026
- Critical9.8HCL Aftermarket DPC is affected by Unrestricted File Upload vulnerability, allows attacker to upload and execute malicious scripts, gaining full control over the server.Check if you run itEPSS 0.31%Mar 26, 2026
- High8.8WebOfisi E-Ticaret 4.0 contains an SQL injection vulnerability in the 'urun' GET parameter of the endpoint that allows unauthenticated attackers to manipulate database queries.Check if you run itEPSS 0.28%Mar 26, 2026
- High8.8OpenBiz Cubi Lite 3.0.8 contains a SQL injection vulnerability in the login form that allows unauthenticated attackers to manipulate database queries through the usern…Check if you run itEPSS 0.33%Mar 26, 2026
- High8.8qdPM 9.1 contains an SQL injection vulnerability that allows unauthenticated attackers to extract database information by injecting SQL code through filter_by parameters.Check if you run itEPSS 0.34%Mar 26, 2026
- High7.1Online Quiz Maker 1.0 contains SQL injection vulnerabilities in the catid and usern parameters that allow authenticated attackers to execute arbitrary SQL commands.Check if you run itEPSS 0.27%Mar 26, 2026
- High8.8KomSeo Cart 1.3 contains an SQL injection vulnerability that allows attackers to inject SQL commands through the 'my_item_search' parameter in edit.php.Check if you run itEPSS 0.25%Mar 26, 2026
- High8.8ASP.NET jVideo Kit 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to inject SQL commands through the 'query' parameter in the search…Check if you run itEPSS 0.27%Mar 26, 2026
- High8.8Library CMS 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to bypass authentication by injecting SQL code through the username parameter.Check if you run itEPSS 0.55%Mar 26, 2026
Sort