The archive.

10-Strike Software1 vulnerability on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2020-37138 · 10-Strike Software Network Inventory Explorer

10-Strike Network Inventory Explorer 9.03 - 'Read from File' Buffer Overflow (SEH)(ROP)

Cyberoam1 vulnerability on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2020-37095 · Cyberoam Cyberoam Authentication Client

Cyberoam Authentication Client 2.1.2.7 - Buffer Overflow (SEH)

Parallaxis1 vulnerability on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2020-37159 · Parallaxis Cuckoo Clock

Cuckoo Clock 5.0 - Buffer Overflow

Drive Software Company1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2020-37126 · Drive Software Company Free Desktop Clock

Free Desktop Clock x86 Venetian Blinds Zipper 3.0 - Unicode Stack Overflow (SEH)

EPSS 0.6%public exploit CVSS 9.8

mathurvishal1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2026-2058 · mathurvishal CloudClassroom-PHP-Project

mathurvishal CloudClassroom-PHP-Project Post Query Details postquerypublic.php sql injection

EPSS 0.6%public exploit CVSS 9.8

PHP Fusion1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2020-37137 · PHP Fusion PHP Fusion

PHP-Fusion 9.03.50 - 'panels.php' Eval Injection

EPSS 0.6%public exploit CVSS 9.8

itsourcecode5 vulnerabilities on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2026-2013 · itsourcecode Student Management System

itsourcecode Student Management System index.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2026-2014 · itsourcecode Student Management System

itsourcecode Student Management System index.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2026-2012 · itsourcecode Student Management System

itsourcecode Student Management System index.php sql injection

CVE-2026-2018 · itsourcecode School Management System

itsourcecode School Management System controller.php sql injection

CVE-2026-2011 · itsourcecode Student Management System

itsourcecode Student Management System controller.php sql injection

Red Hat1 vulnerability on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2026-1709 · Red Hat Red Hat Enterprise Linux 10

Keylime: keylime: authentication bypass allows unauthorized administrative operations due to missing client-side tls authentication

EPSS 6%CVSS 9.8

SourceCodester2 vulnerabilities on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2026-2059 · SourceCodester Medical Center Portal Management System

SourceCodester Medical Center Portal Management System emp_edit1.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2026-2057 · SourceCodester Medical Center Portal Management System

SourceCodester Medical Center Portal Management System login.php sql injection

4Mhz1 vulnerability on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2020-37124 · 4Mhz B64dec

B64dec 1.1.2 - Buffer Overflow (SEH Overflow + Egg Hunter)

microsoft3 vulnerabilities on this pageMax CVSS 10.0Priority 47KEV 0

CVE-2026-25592 · microsoft semantic-kernel

Semantic Kernel has an Arbitrary File Write via AI Agent Function Calling in .NET SDK

EPSS 3%CVSS 10.0

CVE-2026-24302 · Microsoft Azure ARC

Azure Arc Elevation of Privilege Vulnerability

EPSS 1%CVSS 9.8

CVE-2026-24300 · Microsoft Azure Front Door

Azure Front Door Elevation of Privilege Vulnerability

EPSS 1%CVSS 9.8

Amssplus1 vulnerability on this pageMax CVSS 9.3Priority 46KEV 0

CVE-2020-37135 · Amssplus AMSS++

AMSS++ 4.7 - Backdoor Admin Account

EPSS 0.5%public exploit CVSS 9.3

code-projects1 vulnerability on this pageMax CVSS 9.8Priority 46KEV 0

CVE-2026-2060 · code-projects Simple Blood Donor Management System

code-projects Simple Blood Donor Management System editcampaignform.php sql injection

Microvirt1 vulnerability on this pageMax CVSS 9.8Priority 46KEV 0

CVE-2020-37129 · Microvirt Memu Play

Memu Play 7.1.3 - Insecure Folder Permissions

devcode-it1 vulnerability on this pageMax CVSS 9.4Priority 44KEV 0

CVE-2025-69212 · devcode-it openstamanager

OpenSTAManager has an OS Command Injection in P7M File Processing

EPSS 2%CVSS 9.4

Go standard library1 vulnerability on this pageMax CVSS 10.0Priority 42KEV 0

CVE-2025-68121 · Go standard library crypto/tls

Unexpected session resumption in crypto/tls

EPSS 0.9%CVSS 10.0

payloadcms1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2026-25544 · payloadcms payload

Payload has an SQL Injection in JSON/RichText Queries on PostgreSQL/SQLite Adapters

EPSS 0.8%CVSS 9.8

WaterFutures1 vulnerability on this pageMax CVSS 10.0Priority 41KEV 0

CVE-2026-25632 · WaterFutures EPyT-Flow

EPyT-Flow has unsafe JSON deserialization (type)

EPSS 0.8%CVSS 10.0

anthropics2 vulnerabilities on this pageMax CVSS 10.0Priority 39KEV 0

CVE-2026-25725 · anthropics claude-code

Claude Code Has Sandbox Escape via Persistent Configuration Injection in settings.json

EPSS 0.5%CVSS 10.0

CVE-2026-25722 · anthropics claude-code

Claude Code Vulnerable to Command Injection via Directory Change Bypasses Write Protection

EPSS 0.5%CVSS 9.1

opf1 vulnerability on this pageMax CVSS 9.9Priority 39KEV 0

CVE-2026-25763 · opf openproject

Command Injection on OpenProject repositories leads to Remote Code Execution

EPSS 0.5%CVSS 9.9

frangoteam2 vulnerabilities on this pageMax CVSS 9.3Priority 37KEV 0

CVE-2026-25752 · frangoteam FUXA

FUXA Unauthenticated Remote Arbitrary Device Tag Write

EPSS 0.5%CVSS 9.3

CVE-2026-25751 · frangoteam FUXA

FUXA Unauthenticated Exposure of Plaintext Database Credentials

EPSS 0.3%CVSS 9.1

antrea-io1 vulnerability on this pageMax CVSS 9.1Priority 36KEV 0

CVE-2026-25804 · antrea-io antrea

Antrea has invalid enforcement order for network policy rules caused by integer overflow

EPSS 0.5%CVSS 9.1

denpiligrim1 vulnerability on this pageMax CVSS 9.8Priority 36KEV 0

CVE-2026-25803 · denpiligrim 3dp-manager

3DP-MANAGER Uses Hard-coded Credentials

Praskla-Technology1 vulnerability on this pageMax CVSS 9.8Priority 36KEV 0

CVE-2026-25753 · Praskla-Technology assessment-placipy

PlaciPy has a Hard-Coded Default Password for All Student Accounts (Account Takeover)

Stackideas.com1 vulnerability on this pageMax CVSS 9.2Priority 35KEV 0

CVE-2026-21626 · Stackideas.com EasyDiscuss extension for Joomla

Extension - stackideas.com - Information disclosure in post custom fields in EasyDiscuss 1.0.0-5.0.15 for Joomla

EPSS 0.4%CVSS 9.2

VulDB2 vulnerabilities on this pageMax CVSS 9.8Priority 35KEV 0

CVE-2026-1962 · VulDB

WeKan Attachment Migration attachmentMigration.js AttachmentMigrationBleed access control

CVE-2026-1963 · VulDB

WeKan Attachment Storage attachments.js MoveStorageBleed access control