CVEs: Exploit-DB, page 5
582 CVEs with a public exploit on Exploit-DB, sorted by threat level then EPSS. Showing 481-582. Use search to combine filters.
MEDIUM 6.5
Exploit-DBATT&CK inferred
CVE-2025-68930CVE-2025-68930: Versions of the Traccar open-source GPS tracking system up to and including 6.11.1 contain…
traccar · traccar · EPSS 0.56% · Threat 40MEDIUM 6.5
Exploit-DBATT&CK inferred
CVE-2025-57176CVE-2025-57176: On Ceragon Networks / Siklu Communication EtherHaul and MultiHaul Series microwave antenna…
Unknown · · EPSS 0.41% · Threat 40MEDIUM 5.4
Exploit-DBATT&CK inferred
CVE-2025-60689CVE-2025-60689: An unauthenticated command injection vulnerability exists in the Start_EPI function of the…
linksys · e1200 firmware · EPSS 18.32% · Threat 39MEDIUM 5.3
Exploit-DBPublic PoCATT&CK inferred
CVE-2026-21876CVE-2026-21876: The OWASP core rule set (CRS) is a set of generic attack detection rules for use with comp…
owasp · owasp modsecurity core rule set · EPSS 17.88% · Threat 39MEDIUM 6.1
Exploit-DBATT&CK inferred
CVE-2022-3766CVE-2022-3766: Cross-site Scripting (XSS) - Reflected in GitHub repository thorsten/phpmyfaq prior to 3.1…
phpmyfaq · phpmyfaq · EPSS 6.48% · Threat 39MEDIUM 6.1
Exploit-DBATT&CK inferred
CVE-2020-7656CVE-2020-7656: jquery prior to 1.9.0 allows Cross-site Scripting attacks via the load method. The load me…
jquery · jquery · EPSS 6.43% · Threat 39MEDIUM 6.1
Exploit-DBATT&CK inferred
CVE-2020-15718CVE-2020-15718: RosarioSIS 6.7.2 is vulnerable to XSS, caused by improper validation of user-supplied inpu…
rosariosis · rosariosis · EPSS 6.30% · Threat 39MEDIUM 6.1
Exploit-DBATT&CK inferred
CVE-2020-15716CVE-2020-15716: RosarioSIS 6.7.2 is vulnerable to XSS, caused by improper validation of user-supplied inpu…
rosariosis · rosariosis · EPSS 5.56% · Threat 39MEDIUM 6.1
Exploit-DBATT&CK inferred
CVE-2022-4407CVE-2022-4407: Cross-site Scripting (XSS) - Reflected in GitHub repository thorsten/phpmyfaq prior to 3.1…
phpmyfaq · phpmyfaq · EPSS 4.85% · Threat 39MEDIUM 6.1
Exploit-DBATT&CK inferred
CVE-2023-24657CVE-2023-24657: phpipam v1.6 was discovered to contain a reflected cross-site scripting (XSS) vulnerabilit…
phpipam · phpipam · EPSS 3.90% · Threat 39MEDIUM 6.3
Exploit-DBATT&CK inferred
CVE-2024-54761CVE-2024-54761: BigAnt Office Messenger 5.6.06 is vulnerable to SQL Injection via the 'dev_code' parameter…
bigantsoft · bigant office messenger 5 · EPSS 1.77% · Threat 39MEDIUM 6.3
Exploit-DBATT&CK inferred
CVE-2024-30167CVE-2024-30167: /cgi-bin/time.cgi in Atlona AT-OME-MS42 Matrix Switcher 1.1.2 allow remote authenticated u…
Unknown · · EPSS 1.14% · Threat 39MEDIUM 6.3
Exploit-DBATT&CK inferred
CVE-2024-7801CVE-2024-7801: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulne…
microchip · timeprovider 4100 firmware · EPSS 0.84% · Threat 39MEDIUM 5.3
Exploit-DBATT&CK inferred
CVE-2024-8945CVE-2024-8945: A vulnerability has been found in CodeCanyon RISE Ultimate Project Manager 3.7.0 and class…
fairsketch · rise ultimate project manager · EPSS 15.96% · Threat 38MEDIUM 5.3
Exploit-DBATT&CK inferred
CVE-2024-30269CVE-2024-30269: DataEase, an open source data visualization and analysis tool, has a database configuratio…
dataease · dataease · EPSS 15.88% · Threat 38MEDIUM 4.3
Exploited in the wild · CISA KEVExploit-DBPublic PoCATT&CK inferred
CVE-2026-32202Microsoft Windows Protection Mechanism Failure Vulnerability
Microsoft · Windows · EPSS 4.90% · Threat 38MEDIUM 5.3
Metasploit moduleExploit-DBPublic PoCATT&CK inferred
CVE-2024-28397CVE-2024-28397: An issue in the component js2py.disable_pyimport() of js2py up to v0.74 allows attackers t…
Unknown · · EPSS 4.55% · Threat 38MEDIUM 5.4
Metasploit moduleExploit-DBATT&CK inferred
CVE-2025-52367CVE-2025-52367: Cross Site Scripting vulnerability in PivotX CMS v.3.0.0 RC 3 allows a remote attacker to …
pivotx · pivotx · EPSS 4.20% · Threat 38MEDIUM 6.1
Exploit-DBATT&CK inferred
CVE-2018-25080CVE-2018-25080: A vulnerability, which was classified as problematic, has been found in MobileDetect 2.8.3…
mobiledetect · mobiledetect · EPSS 2.66% · Threat 38MEDIUM 6.1
Exploit-DBATT&CK inferred
CVE-2017-6478CVE-2017-6478: paintballrefjosh/MaNGOSWebV4 before 4.0.8 is vulnerable to a reflected XSS in install/inde…
mangoswebv4 project · mangoswebv4 · EPSS 2.55% · Threat 38MEDIUM 6.1
Exploit-DBATT&CK inferred
CVE-2025-54589CVE-2025-54589: Copyparty is a portable file server. In versions 1.18.6 and below, when accessing the rece…
9001 · copyparty · EPSS 2.39% · Threat 38MEDIUM 6.1
Exploit-DBATT&CK inferred
CVE-2018-1000638CVE-2018-1000638: MiniCMS version 1.1 contains a Cross Site Scripting (XSS) vulnerability in http://example.…
1234n · minicms · EPSS 2.19% · Threat 38MEDIUM 6.1
Exploit-DBATT&CK inferred
CVE-2024-41358CVE-2024-41358: phpipam 1.6 is vulnerable to Cross Site Scripting (XSS) via app\admin\import-export\import…
phpipam · phpipam · EPSS 1.59% · Threat 38MEDIUM 6.1
Exploit-DBATT&CK inferred
CVE-2024-28623CVE-2024-28623: RiteCMS v3.0.0 was discovered to contain a cross-site scripting (XSS) vulnerability via th…
ritecms · ritecms · EPSS 1.32% · Threat 38MEDIUM 6.1
Exploit-DBATT&CK inferred
CVE-2025-28121CVE-2025-28121: code-projects Online Exam Mastering System 1.0 is vulnerable to Cross Site Scripting (XSS)…
code-projects · online exam mastering system · EPSS 0.91% · Threat 38MEDIUM 6.1
Exploit-DBATT&CK inferred
CVE-2026-51133CVE-2026-51133: Cross Site Scripting vulnerability in za-internet GmbH C-MOR Video Surveillance <= V6.0104…
Unknown · · EPSS 0.91% · Threat 38MEDIUM 6.1
Exploit-DBATT&CK inferred
CVE-2026-54644CVE-2026-54644: CubeCart is an ecommerce software solution. Prior to 6.7.5, the _errorMessage method in cl…
Unknown · · EPSS 0.90% · Threat 38MEDIUM 6.1
Exploit-DBATT&CK inferred
CVE-2024-42831CVE-2024-42831: A reflected cross-site scripting (XSS) vulnerability in Elaine's Realtime CRM Automation v…
Unknown · · EPSS 0.84% · Threat 38MEDIUM 6.1
Exploit-DBATT&CK inferred
CVE-2024-50861CVE-2024-50861: The ip_mod_dns_key_form.cgi request in GestioIP v3.5.7 is vulnerable to Stored XSS. An att…
gestioip · gestioip · EPSS 0.83% · Threat 38MEDIUM 6.1
Exploit-DBATT&CK inferred
CVE-2026-44376CVE-2026-44376: CubeCart is an ecommerce software solution. Prior to 6.7.0, an unauthenticated Reflected X…
Unknown · · EPSS 0.69% · Threat 38MEDIUM 5.3
Exploit-DBATT&CK inferred
CVE-2025-2126CVE-2025-2126: A vulnerability was found in JoomlaUX JUX Real Estate 3.4.0 on Joomla and classified as cr…
joomlaux · jux real estate · EPSS 11.23% · Threat 37MEDIUM 5.9
Exploit-DBATT&CK inferred
CVE-2026-9271CVE-2026-9271: Vulnerability Title
Unknown · · EPSS 0.61% · Threat 37MEDIUM 5.9
Exploit-DBATT&CK inferred
CVE-2026-6815CVE-2026-6815: An arbitrary file write vulnerability exists in Casdoor's Local File System storage provid…
casbin · casdoor · EPSS 0.59% · Threat 37MEDIUM 4.9
Exploit-DBATT&CK inferred
CVE-2022-23409CVE-2022-23409: The Logs plugin before 3.0.4 for Craft CMS allows remote attackers to read arbitrary files…
ethercreative · logs · EPSS 13.76% · Threat 36MEDIUM 5.3
Exploit-DBATT&CK inferred
CVE-2024-45440CVE-2024-45440: core/authorize.php in Drupal 11.x-dev allows Full Path Disclosure (even when error logging…
drupal · drupal · EPSS 9.27% · Threat 36MEDIUM 5.7
Exploit-DBATT&CK inferred
CVE-2024-57708CVE-2024-57708: An issue in OneTrust SDK v.6.33.0 allows a local attacker to cause a denial of service via…
Unknown · · EPSS 0.93% · Threat 36MEDIUM 5
Exploit-DBATT&CK inferred
CVE-2015-6830CVE-2015-6830: libraries/plugins/auth/AuthenticationCookie.class.php in phpMyAdmin 4.3.x before 4.3.13.2 …
phpmyadmin · phpmyadmin · EPSS 10.43% · Threat 35MEDIUM 5.4
Exploit-DBATT&CK inferred
CVE-2022-41358CVE-2022-41358: A stored cross-site scripting (XSS) vulnerability in Garage Management System v1.0 allows …
garage management system project · garage management system · EPSS 4.36% · Threat 35MEDIUM 5.5
Exploit-DBATT&CK inferred
CVE-2025-59342CVE-2025-59342: esm.sh is a nobuild content delivery network(CDN) for modern web development. In 136 and e…
Unknown · · EPSS 3.01% · Threat 35MEDIUM 5.4
Exploit-DBATT&CK inferred
CVE-2024-41947CVE-2024-41947: XWiki Platform is a generic wiki platform offering runtime services for applications built…
xwiki · xwiki · EPSS 1.67% · Threat 35MEDIUM 5.5
Exploit-DBATT&CK inferred
CVE-2026-100885CVE-2026-100885: A vulnerability was found in Krayin laravel-crm up to 2.2.4. This affects an unknown funct…
Unknown · · EPSS 1.00% · Threat 35MEDIUM 5.5
Exploit-DBATT&CK inferred
CVE-2024-36424CVE-2024-36424: K7RKScan.sys in K7 Ultimate Security before 17.0.2019 allows local users to cause a denial…
k7computing · k7 ultimate security · EPSS 0.99% · Threat 35MEDIUM 5.5
Exploit-DBATT&CK inferred
CVE-2025-8471CVE-2025-8471: A vulnerability, which was classified as critical, has been found in projectworlds Online …
projectworlds · online admission system · EPSS 0.73% · Threat 35MEDIUM 5.5
Exploit-DBATT&CK inferred
CVE-2022-1257CVE-2022-1257: Insecure storage of sensitive information vulnerability in MA for Linux, macOS, and Window…
mcafee · agent · EPSS 0.65% · Threat 35MEDIUM 5.3
Exploit-DBATT&CK inferred
CVE-2024-44762CVE-2024-44762: A discrepancy in error messages for invalid login attempts in Webmin Usermin v2.100 allows…
webmin · usermin · EPSS 2.57% · Threat 34MEDIUM 5.3
Exploit-DBATT&CK inferred
CVE-2024-53586CVE-2024-53586: An issue in the relPath parameter of WebFileSys version 2.31.0 allows attackers to perform…
Unknown · · EPSS 1.87% · Threat 34MEDIUM 5.3
Exploit-DBATT&CK inferred
CVE-2024-12344CVE-2024-12344: A vulnerability, which was classified as critical, was found in TP-Link VN020 F3v(T) TT_V6…
tp-link · vn020 f3v firmware · EPSS 1.87% · Threat 34MEDIUM 5.3
Exploit-DBATT&CK inferred
CVE-2025-6082CVE-2025-6082: The Birth Chart Compatibility plugin for WordPress is vulnerable to Full Path Disclosure i…
Unknown · · EPSS 1.70% · Threat 34MEDIUM 5.4
Exploit-DBATT&CK inferred
CVE-2024-1234CVE-2024-1234: The Exclusive Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site…
exclusiveaddons · exclusive addons for elementor · EPSS 1.59% · Threat 34MEDIUM 5.4
Exploit-DBATT&CK inferred
CVE-2024-47605CVE-2024-47605: silverstripe-asset-admin is a silverstripe assets gallery for asset management. When using…
Unknown · · EPSS 1.18% · Threat 34MEDIUM 5.4
Exploit-DBATT&CK inferred
CVE-2026-22704CVE-2026-22704: HAX CMS helps manage microsite universe with PHP or NodeJs backends. In versions 11.0.6 to…
psu · haxcms-nodejs · EPSS 1.03% · Threat 34MEDIUM 5.4
Exploit-DBATT&CK inferred
CVE-2025-51396CVE-2025-51396: A stored cross-site scripting (XSS) vulnerability in Live Helper Chat v4.60 allows attacke…
livehelperchat · live helper chat · EPSS 1.02% · Threat 34MEDIUM 5.4
Exploit-DBATT&CK inferred
CVE-2025-51397CVE-2025-51397: A stored cross-site scripting (XSS) vulnerability in the Facebook Chat module of Live Help…
livehelperchat · live helper chat · EPSS 1.00% · Threat 34MEDIUM 5.4
Exploit-DBATT&CK inferred
CVE-2025-51398CVE-2025-51398: A stored cross-site scripting (XSS) vulnerability in the Facebook registration page of Liv…
livehelperchat · live helper chat · EPSS 0.97% · Threat 34MEDIUM 5.4
Exploit-DBATT&CK inferred
CVE-2025-51400CVE-2025-51400: A stored cross-site scripting (XSS) vulnerability in the Personal Canned Messages of Live …
livehelperchat · live helper chat · EPSS 0.97% · Threat 34MEDIUM 5.4
Exploit-DBATT&CK inferred
CVE-2025-51401CVE-2025-51401: A stored cross-site scripting (XSS) vulnerability in the chat transfer function of Live He…
livehelperchat · live helper chat · EPSS 0.97% · Threat 34MEDIUM 5.4
Exploit-DBATT&CK inferred
CVE-2024-39143CVE-2024-39143: A stored cross-site scripting (XSS) vulnerability exists in ResidenceCMS 2.10.1 that allow…
coderberg · residencecms · EPSS 0.93% · Threat 34MEDIUM 5.3
Exploit-DBATT&CK inferred
CVE-2025-10493CVE-2025-10493: The Chained Quiz plugin for WordPress is vulnerable to Insecure Direct Object Reference in…
Unknown · · EPSS 0.92% · Threat 34MEDIUM 5.4
Exploit-DBATT&CK inferred
CVE-2025-52392CVE-2025-52392: Soosyze CMS 2.0 allows brute-force login attacks via the /user/login endpoint due to missi…
Unknown · · EPSS 0.90% · Threat 34MEDIUM 5.4
Exploit-DBATT&CK inferred
CVE-2024-51463CVE-2024-51463: IBM i 7.3, 7.4, and 7.5 is vulnerable to server-side request forgery (SSRF). This may al…
ibm · i · EPSS 0.85% · Threat 34MEDIUM 5.3
Exploit-DBATT&CK inferred
CVE-2024-6039CVE-2024-6039: A vulnerability, which was classified as critical, was found in Feng Office 3.11.1.2. Affe…
fengoffice · feng office · EPSS 0.73% · Threat 34MEDIUM 5.4
Exploit-DBATT&CK inferred
CVE-2024-48120CVE-2024-48120: X2CRM v8.5 is vulnerable to a stored Cross-Site Scripting (XSS) in the "Opportunities" mod…
x2engine · x2crm · EPSS 0.68% · Threat 34MEDIUM 5.4
Exploit-DBATT&CK inferred
CVE-2025-46041CVE-2025-46041: A stored cross-site scripting (XSS) vulnerability in Anchor CMS v0.12.7 allows attackers t…
anchorcms · anchor cms · EPSS 0.62% · Threat 34MEDIUM 4.3
Exploit-DBATT&CK inferred
CVE-2015-6176CVE-2015-6176: Microsoft Edge mishandles HTML attributes in HTTP responses, which allows remote attackers…
microsoft · edge · EPSS 14.12% · Threat 33MEDIUM 5.1
Exploit-DBATT&CK inferred
CVE-2026-41456CVE-2026-41456: Bludit CMS prior to commit 6732dde contains a reflected cross-site scripting vulnerability…
Unknown · · EPSS 2.72% · Threat 33MEDIUM 5.1
Exploit-DBATT&CK inferred
CVE-2025-26263CVE-2025-26263: GeoVision ASManager Windows desktop application with the version 6.1.2.0 or less (fixed in…
Unknown · · EPSS 1.37% · Threat 33MEDIUM 5.1
Exploit-DBATT&CK inferred
CVE-2024-7815CVE-2024-7815: A vulnerability has been found in CodeAstro Online Railway Reservation System 1.0 and clas…
online railway reservation system project · online railway reservation system · EPSS 1.20% · Threat 33MEDIUM 5.1
Exploit-DBATT&CK inferred
CVE-2024-11954CVE-2024-11954: A vulnerability classified as problematic was found in Pimcore 11.4.2. Affected by this vu…
pimcore · pimcore · EPSS 1.09% · Threat 33MEDIUM 5.1
Exploit-DBATT&CK inferred
CVE-2024-11956CVE-2024-11956: A vulnerability, which was classified as critical, has been found in Pimcore customer-data…
pimcore · pimcore · EPSS 0.86% · Threat 33MEDIUM 4.9
Exploit-DBATT&CK inferred
CVE-2025-10046CVE-2025-10046: The ELEX WooCommerce Google Shopping (Google Product Feed) plugin for WordPress is vulnera…
Unknown · · EPSS 0.71% · Threat 32UNKNOWN
Exploit-DBATT&CK inferred
CVE-2025-62639CVE-2025-62639: Rejected reason: Not used
Unknown · · EPSS n/a · Threat 32MEDIUM 4.8
Exploit-DBATT&CK inferred
CVE-2024-50857CVE-2024-50857: The ip_do_job request in GestioIP v3.5.7 is vulnerable to Cross-Site Scripting (XSS). It a…
gestioip · gestioip · EPSS 1.25% · Threat 31MEDIUM 4.8
Exploit-DBATT&CK inferred
CVE-2024-11605CVE-2024-11605: The wp-publications WordPress plugin through 1.2 does not escape filenames before outputti…
wp-publications project · wp-publications · EPSS 1.24% · Threat 31MEDIUM 4.8
Exploit-DBATT&CK inferred
CVE-2024-50562CVE-2024-50562: An Insufficient Session Expiration vulnerability [CWE-613] in FortiOS SSL-VPN version 7.6.…
fortinet · fortisase · EPSS 1.16% · Threat 31MEDIUM 4.8
Exploit-DBATT&CK inferred
CVE-2026-54645CVE-2026-54645: CubeCart is an ecommerce software solution. Prior to 6.7.5, admin/sources/products.index.i…
Unknown · · EPSS 1.08% · Threat 31MEDIUM 4.8
Exploit-DBATT&CK inferred
CVE-2025-5640CVE-2025-5640: A vulnerability was found in PX4-Autopilot 1.12.3. It has been classified as problematic. …
Unknown · · EPSS 1.02% · Threat 31MEDIUM 4.8
Exploit-DBATT&CK inferred
CVE-2024-50859CVE-2024-50859: The ip_import_acl_csv request in GestioIP v3.5.7 is vulnerable to Reflected XSS. When a us…
gestioip · gestioip · EPSS 0.90% · Threat 31MEDIUM 4.8
Exploit-DBATT&CK inferred
CVE-2024-9458CVE-2024-9458: The Reservit Hotel WordPress plugin before 3.0 does not sanitise and escape some of its se…
reservit · reservit hotel · EPSS 0.89% · Threat 31MEDIUM 4.8
Exploit-DBATT&CK inferred
CVE-2025-6563CVE-2025-6563: A cross-site scripting vulnerability is present in the hotspot of MikroTik's RouterOS on v…
Unknown · · EPSS 0.72% · Threat 31MEDIUM 4.8
Exploit-DBATT&CK inferred
CVE-2025-50481CVE-2025-50481: A cross-site scripting (XSS) vulnerability in the component /blog/blogpost/add of Mezzanin…
jupo · mezzanine · EPSS 0.69% · Threat 31MEDIUM 4.8
Exploit-DBATT&CK inferred
CVE-2025-70336CVE-2025-70336: A Stored cross-site scripting (XSS) vulnerability in 'Create New Live Item' in PodcastGene…
podcastgenerator · podcast generator · EPSS 0.57% · Threat 31MEDIUM 4.7
Exploit-DBATT&CK inferred
CVE-2026-14620CVE-2026-14620: webpack-dev-server versions 5.2.5 and earlier expose two internal developer endpoints, /we…
webpack.js · webpack-dev-server · EPSS 0.52% · Threat 31MEDIUM 4.7
Exploit-DBATT&CK inferred
CVE-2025-67586CVE-2025-67586: Missing Authorization vulnerability in Ronald Huereca Highlight and Share highlight-and-sh…
Unknown · · EPSS 0.44% · Threat 31MEDIUM 4.3
Exploit-DBATT&CK inferred
CVE-2026-33829CVE-2026-33829: Exposure of sensitive information to an unauthorized actor in Windows Snipping Tool allows…
microsoft · windows 10 1607 · EPSS 3.51% · Threat 30MEDIUM 4.3
Exploit-DBATT&CK inferred
CVE-2026-33534CVE-2026-33534: EspoCRM is an open source customer relationship management application. Versions 9.3.3 and…
espocrm · espocrm · EPSS 1.68% · Threat 29MEDIUM 4.3
Exploit-DBATT&CK inferred
CVE-2024-46528CVE-2024-46528: An Insecure Direct Object Reference (IDOR) vulnerability in KubeSphere 4.x before 4.1.3 an…
Unknown · · EPSS 1.58% · Threat 29MEDIUM 4.3
Exploit-DBATT&CK inferred
CVE-2024-51464CVE-2024-51464: IBM i 7.3, 7.4, and 7.5 is vulnerable to bypassing Navigator for i interface restrictions.…
ibm · i · EPSS 1.41% · Threat 29MEDIUM 4.3
Exploit-DBATT&CK inferred
CVE-2026-44595CVE-2026-44595: Yamcs is a mission control framework. Prior to 5.12.7, the IAM API endpoints listUsers, ge…
spaceapplications · yamcs · EPSS 1.06% · Threat 29MEDIUM 4.3
Exploit-DBATT&CK inferred
CVE-2026-42568CVE-2026-42568: Yamcs is a mission control framework. Prior to versions 5.13.0 and 5.12.7, an LDAP injecti…
Unknown · · EPSS 1.01% · Threat 29MEDIUM 4.3
Exploit-DBATT&CK inferred
CVE-2025-41228CVE-2025-41228: VMware ESXi and vCenter Server contain a reflected cross-site scripting vulnerability due …
Unknown · · EPSS 0.90% · Threat 29LOW 3.3
Exploit-DBATT&CK inferred
CVE-2025-47226CVE-2025-47226: Grokability Snipe-IT before 8.1.0 has incorrect authorization for accessing asset informat…
snipeitapp · snipe-it · EPSS 1.30% · Threat 24LOW 2.1
Exploit-DBATT&CK inferred
CVE-2025-9090CVE-2025-9090: A vulnerability was identified in Tenda AC20 16.03.08.12. Affected is the function websFor…
tenda · ac20 firmware · EPSS 16.65% · Threat 22LOW 2.1
Exploit-DBATT&CK inferred
CVE-2025-10327CVE-2025-10327: A weakness has been identified in MiczFlor RPi-Jukebox-RFID up to 2.8.0. Affected by this …
sourcefabric · rpi-jukebox-rfid · EPSS 10.16% · Threat 21LOW 2.3
Exploit-DBATT&CK inferred
CVE-2026-58057CVE-2026-58057: Flowise before 3.1.3 validates Custom MCP stdio environment variables against a denylist u…
flowiseai · flowise · EPSS 1.56% · Threat 19LOW 2.4
Exploit-DBATT&CK inferred
CVE-2026-55780CVE-2026-55780: NanaZip is the 7-Zip derivative intended for the modern Windows experience. Prior to 6.5.1…
Unknown · · EPSS 0.42% · Threat 19LOW 2
Exploit-DBPublic PoCATT&CK inferred
CVE-2025-8191CVE-2025-8191: A vulnerability, which was classified as problematic, was found in macrozheng mall up to 1…
macrozheng · mall · EPSS 1.79% · Threat 18LOW 2.1
Exploit-DBATT&CK inferred
CVE-2025-9140CVE-2025-9140: A vulnerability was identified in Shanghai Lingdang Information Technology Lingdang CRM up…
51mis · lingdang crm · EPSS 0.52% · Threat 18LOW 2
Exploit-DBATT&CK inferred
CVE-2025-10370CVE-2025-10370: A vulnerability was identified in MiczFlor RPi-Jukebox-RFID up to 2.8.0. This vulnerabilit…
sourcefabric · rpi-jukebox-rfid · EPSS 0.70% · Threat 17LOW 1.9
Exploit-DBATT&CK inferred
CVE-2025-8550CVE-2025-8550: A vulnerability was found in atjiu pybbs up to 6.0.0. It has been declared as problematic.…
pybbs project · pybbs · EPSS 0.65% · Threat 17LOW 2
Exploit-DBATT&CK inferred
CVE-2025-8573CVE-2025-8573: Concrete CMS versions 9 through 9.4.2 are vulnerable to Stored XSS from Home Folder on Mem…
concretecms · concrete cms · EPSS 0.44% · Threat 17LOW 1.8
Exploit-DBATT&CK inferred
CVE-2026-57588CVE-2026-57588: A SQL injection vulnerability in Nessus allows an attacker to craft a malicious scan resul…
tenable · nessus · EPSS 0.33% · Threat 16LOW 1.2
Exploit-DBATT&CK inferred
CVE-2025-69210