The archive.

Cleanersoft Software1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2020-37000 · Cleanersoft Software Free MP3 CD Ripper

Free MP3 CD Ripper 2.8 - Stack Buffer Overflow (SEH + Egghunter)

EPSS 0.6%public exploit CVSS 9.8

Crystal Shard1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2020-37056 · Crystal Shard http-protection

Crystal Shard http-protection 0.2.0 - IP Spoofing Bypass

EPSS 0.6%public exploit CVSS 9.8

Eclipse Foundation2 vulnerabilities on this pageMax CVSS 10.0Priority 49KEV 0

CVE-2026-1699 · Eclipse Foundation Eclipse Theia - Website

In the Eclipse Theia Website repository, the GitHub Actions workflow .github/workflows/preview.yml used pull_request_target trigger while…

EPSS 0.6%public exploit CVSS 10.0

CVE-2026-1188 · Eclipse Foundation Eclipse OMR

In the Eclipse OMR port library component since release 0.2.0, an API function to return the textual names of all supported processor fea…

EPSS 0.5%CVSS 9.8

kata-containers1 vulnerability on this pageMax CVSS 10.0Priority 49KEV 0

CVE-2026-24054 · kata-containers kata-containers

Kata Containers Runtime: Host block device can be hotplugged to the VM if the container image is malformed or contains no layers

EPSS 0.5%public exploit CVSS 10.0

sunnygkp101 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2020-37057 · sunnygkp10 Online-Exam-System

Online-Exam-System 2015 - 'fid' SQL Injection

EPSS 0.6%public exploit CVSS 9.8

Tenda1 vulnerability on this pageMax CVSS 9.2Priority 49KEV 0

CVE-2026-1610 · Tenda AX12 Pro V2

Tenda AX12 Pro V2 Telnet Service hard-coded credentials

EPSS 0.7%public exploit CVSS 9.2

BearshareOfficial1 vulnerability on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2020-37010 · BearshareOfficial BearShare Lite

BearShare Lite 5.2.5 - 'Advanced Search'Buffer Overflow in (PoC)

itsourcecode7 vulnerabilities on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2026-1593 · itsourcecode Society Management System

itsourcecode Society Management System edit_expenses_query.php sql injection

CVE-2026-1594 · itsourcecode Society Management System

itsourcecode Society Management System add_expenses.php sql injection

CVE-2026-1701 · itsourcecode School Management System

itsourcecode School Management System index.php sql injection

CVE-2026-1595 · itsourcecode Society Management System

itsourcecode Society Management System edit_student_query.php sql injection

CVE-2026-1688 · itsourcecode Directory Management System

itsourcecode Directory Management System index.php sql injection

CVE-2026-1589 · itsourcecode School Management System

itsourcecode School Management System index.php sql injection

CVE-2026-1590 · itsourcecode School Management System

itsourcecode School Management System index.php sql injection

SunFounder1 vulnerability on this pageMax CVSS 9.3Priority 48KEV 0

CVE-2026-25069 · SunFounder Pironman Dashboard (pm_dashboard)

SunFounder Pironman Dashboard <= 1.3.13 Path Traversal Arbitrary File Read/Deletion

EPSS 0.7%public exploit CVSS 9.3

Dummysoftware1 vulnerability on this pageMax CVSS 9.8Priority 46KEV 0

CVE-2020-36997 · Dummysoftware BacklinkSpeed

BacklinkSpeed 2.4 - Buffer Overflow PoC (SEH)

jishenghua1 vulnerability on this pageMax CVSS 9.8Priority 46KEV 0

CVE-2026-1546 · jishenghua jshERP

jishenghua jshERP com.jsh.erp.datasource.mappers.DepotItemMapperEx importItemExcel getBillItemByParam sql injection

VulDB1 vulnerability on this pageMax CVSS 9.8Priority 46KEV 0

CVE-2026-1552 · VulDB

SEMCMS SEMCMS_Info.php sql injection

Johnson Controls1 vulnerability on this pageMax CVSS 9.5Priority 43KEV 0

CVE-2025-26385 · Johnson Controls Metasys

Metasys product command injection vulnerability could allow remote SQL execution

EPSS 1%CVSS 9.5

Arcadia Technology, LLC1 vulnerability on this pageMax CVSS 9.9Priority 41KEV 0

CVE-2026-0963 · Arcadia Technology, LLC Crafty Controller

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Crafty Controller

EPSS 0.7%CVSS 9.9

orval-labs1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2026-25141 · orval-labs orval

Orval has a code injection via unsanitized x-enum-descriptions uing JS comments

EPSS 0.7%CVSS 9.8

sharpred1 vulnerability on this pageMax CVSS 9.4Priority 40KEV 0

CVE-2026-25047 · sharpred deepHas

deepHas vulnerable to Prototype Pollution via constructor.prototype

EPSS 0.8%CVSS 9.4

EFM1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2026-1740 · EFM ipTIME A8004T

EFM ipTIME A8004T Hidden Hiddenloginsetup timepro.cgi httpcon_check_session_url improper authentication

EPSS 0.5%CVSS 9.8

KiloView1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2026-1453 · KiloView Encoder Series E1 hardware Version 1.4

Missing Authentication for Critical Function in KiloView Encoder Series

EPSS 0.5%CVSS 9.8

Internet Information Co., Ltd2 vulnerabilities on this pageMax CVSS 10.0Priority 37KEV 0

CVE-2026-24728 · Internet Information Co., Ltd DreamMaker

Interinfo DreamMaker - Missing Authentication for Critical Function

EPSS 0.5%CVSS 9.3

CVE-2026-24729 · Internet Information Co., Ltd DreamMaker

Interinfo DreamMaker - Unrestricted Upload of File with Dangerous Type

EPSS 0.4%CVSS 10.0

Global Interactive Design Media Software Inc.1 vulnerability on this pageMax CVSS 9.8Priority 36KEV 0

CVE-2025-7714 · Global Interactive Design Media Software Inc. Content Management System (CMS)

Time Based SQLi in Global Medya's PHP CMS

loft-sh1 vulnerability on this pageMax CVSS 9.1Priority 36KEV 0

CVE-2026-22806 · loft-sh loft

vCluster Platform's Access Keys Allows Access Beyond Scope

EPSS 0.5%CVSS 9.1

QR Menu Pro Smart Menu Systems1 vulnerability on this pageMax CVSS 9.8Priority 36KEV 0

CVE-2025-7013 · QR Menu Pro Smart Menu Systems Menu Panel

IDOR in QRMenumPro's Menu Panel