Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.9WinRAR 5.61 contains a denial of service vulnerability that allows local attackers to crash the application by placing a malformed winrar.lng language file in the inst…Check if you run itEPSS 0.44%Apr 5, 2026
- High8.8Ask Expert Script 3.0.5 contains cross-site scripting and SQL injection vulnerabilities that allow unauthenticated attackers to inject malicious code by manipulating U…Check if you run itEPSS 0.48%Apr 5, 2026
- High8.8eDirectory contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to bypass administrator authentication and disclose sensitive files by…Check if you run itEPSS 0.54%Apr 5, 2026
- High8.8CMSsite 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'post' parameter.Check if you run itEPSS 0.42%Apr 5, 2026
- High8.7UniSharp Laravel File Manager v2.0.0-alpha7 and v2.0 contain an arbitrary file upload vulnerability that allows authenticated attackers to upload malicious files by se…Check if you run itEPSS 0.43%Apr 5, 2026
- High8.8PilusCart 1.4.1 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'send' parameter.Check if you run itEPSS 0.39%Apr 5, 2026
- High8.7VA MAX 8.3.4 contains a remote code execution vulnerability that allows authenticated attackers to execute arbitrary commands by injecting shell metacharacters into th…Check if you run itEPSS 0.68%Apr 5, 2026
- High8.6River Past Video Cleaner 7.6.3 contains a structured exception handler buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying…Check if you run itEPSS 0.21%Apr 5, 2026
- High8.8qdPM 9.1 contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting SQL code through the search_by_extrafields[] parameter.Check if you run itEPSS 0.32%Apr 5, 2026
- High8.8News Website Script 2.0.5 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through th…Check if you run itEPSS 0.42%Apr 5, 2026
- Medium6.9TaskInfo 8.2.0.280 contains a local buffer overflow vulnerability that allows attackers to crash the application by supplying oversized input to registration fields.Check if you run itEPSS 0.20%Apr 5, 2026
- Medium6.9SpotAuditor 3.6.7 contains a local buffer overflow vulnerability in the Base64 Password Decoder component that allows attackers to crash the application.Check if you run itEPSS 0.25%Apr 5, 2026
- Medium6.9River Past Ringtone Converter 2.7.6.1601 contains a local buffer overflow vulnerability that allows attackers to crash the application by supplying oversized input to…Check if you run itEPSS 0.20%Apr 5, 2026
- High7.1SuiteCRM 7.10.7 contains a time-based SQL injection vulnerability in the record parameter of the Users module DetailView action that allows authenticated attackers to…Check if you run itEPSS 0.36%Apr 5, 2026
- High7.1SuiteCRM 7.10.7 contains a SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code through the parentTab parameter.Check if you run itEPSS 0.36%Apr 5, 2026
- High8.8ResourceSpace 8.6 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through th…Check if you run itEPSS 0.43%Apr 5, 2026
- Medium6.9Remote Process Explorer 1.0.0.16 contains a local buffer overflow vulnerability that allows attackers to cause a denial of service by sending a crafted payload to the…Check if you run itEPSS 0.15%Apr 5, 2026
- Medium6.9LanHelper 1.74 contains a local buffer overflow vulnerability that allows attackers to crash the application by sending excessively long input strings.Check if you run itEPSS 0.24%Apr 5, 2026
- Medium6.9ASPRunner Professional 6.0.766 contains a local buffer overflow vulnerability that allows attackers to cause a denial of service by supplying an excessively long project name.Check if you run itEPSS 0.15%Apr 5, 2026
- Medium6.8a-Mac Address Change 5.4 contains a local buffer overflow vulnerability that allows local attackers to crash the application by supplying oversized input to registrati…Check if you run itEPSS 0.14%Apr 5, 2026
- Medium6.8AnyBurn 4.3 x86 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string to the image co…Check if you run itEPSS 0.20%Apr 5, 2026
- High8.6R i386 3.5.0 contains a local buffer overflow vulnerability in the GUI Preferences dialog that allows local attackers to trigger a structured exception handler (SEH) o…Check if you run itEPSS 0.17%Apr 5, 2026
- Medium6.8IP TOOLS 2.50 contains a local buffer overflow vulnerability in the SNMP Scanner component that allows local attackers to crash the application by supplying oversized input.Check if you run itEPSS 0.21%Apr 5, 2026
- Low2.1A security vulnerability has been detected in griptape-ai griptape 0.19.4.Check if you run itEPSS 0.35%Apr 5, 2026
- Low2.1A weakness has been identified in premAI-io premsql up to 0.2.1.Check if you run itEPSS 0.25%Apr 5, 2026
Sort