Vulnerabilities (CVE)

Total 395696 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2024-44918 1 Seacms 1 Seacms 2026-06-17 N/A 3.5 LOW
A cross-site scripting (XSS) vulnerability in the component admin_datarelate.php of SeaCMS v12.9 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.
CVE-2024-44915 1 Irfanview 1 Exr 2026-06-17 N/A 5.5 MEDIUM
An issue in the component EXR!ReadEXR+0x4eef0 of Irfanview v4.67.1.0 allows attackers to cause an access violation via a crafted EXR file. This vulnerability can lead to a Denial of Service (DoS).
CVE-2024-44914 1 Irfanview 1 Exr 2026-06-17 N/A 5.5 MEDIUM
An issue in the component EXR!ReadEXR+0x3df50 of Irfanview v4.67.1.0 allows attackers to cause an access violation via a crafted EXR file. This vulnerability can lead to a Denial of Service (DoS).
CVE-2024-44913 1 Irfanview 1 Exr 2026-06-17 N/A 5.5 MEDIUM
An issue in the component EXR!ReadEXR+0x40ef1 of Irfanview v4.67.1.0 allows attackers to cause an access violation via a crafted EXR file. This vulnerability can lead to a Denial of Service (DoS).
CVE-2024-44912 1 Nasa 1 Cryptolib 2026-06-17 N/A 7.5 HIGH
NASA CryptoLib v1.3.0 was discovered to contain an Out-of-Bounds read via the TM subsystem (crypto_tm.c).
CVE-2024-44911 1 Nasa 1 Cryptolib 2026-06-17 N/A 7.5 HIGH
NASA CryptoLib v1.3.0 was discovered to contain an Out-of-Bounds read via the TC subsystem (crypto_tc.c).
CVE-2024-44910 1 Nasa 1 Cryptolib 2026-06-17 N/A 7.5 HIGH
NASA CryptoLib v1.3.0 was discovered to contain an Out-of-Bounds read via the AOS subsystem (crypto_aos.c).
CVE-2024-44906 1 Uptrace 1 Pgdriver 2026-06-17 N/A 6.5 MEDIUM
uptrace pgdriver v1.2.1 was discovered to contain a SQL injection vulnerability via the appendArg function in /pgdriver/format.go. The maintainer has stated that the issue is fixed in v1.2.15.
CVE-2024-44905 1 Uptrace 1 Pg 2026-06-17 N/A 6.5 MEDIUM
go-pg pg v10.13.0 was discovered to contain a SQL injection vulnerability via the component /types/append_value.go.
CVE-2024-44903 2026-06-17 N/A 7.5 HIGH
SQL Injection can occur in the SirsiDynix Horizon Information Portal (IPAC20) through 3.25_9382; however, a patch is available from the vendor. This is in ipac.jsp in a SELECT WHERE statement, in a part of the uri= variable in the second part of the full= inner variable.
CVE-2024-44893 1 Jeecg 1 Jimureport 2026-06-17 N/A 9.8 CRITICAL
An issue in the component /jeecg-boot/jmreport/dict/list of JimuReport v1.7.8 allows attacker to escalate privileges via a crafted GET request.
CVE-2024-44872 1 Mozilo 1 Mozilocms 2026-06-17 N/A 6.1 MEDIUM
A reflected cross-site scripting (XSS) vulnerability in moziloCMS v3.0 allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload.
CVE-2024-44871 1 Mozilo 1 Mozilocms 2026-06-17 N/A 7.2 HIGH
An arbitrary file upload vulnerability in the component /admin/index.php of moziloCMS v3.0 allows attackers to execute arbitrary code via uploading a crafted file.
CVE-2024-44867 1 Phpok 1 Phpok 2026-06-17 N/A 7.5 HIGH
phpok v3.0 was discovered to contain an arbitrary file read vulnerability via the component /autoload/file.php.
CVE-2024-44866 2026-06-17 N/A 6.8 MEDIUM
A buffer overflow in the GuitarPro1::read function of MuseScore Studio v4.3.2 allows attackers to to execute arbitrary code or cause a Denial of Service (DoS) via opening a crafted GuitarPro file.
CVE-2024-44860 1 Solvait 1 Solvait 2026-06-17 N/A 7.5 HIGH
An information disclosure vulnerability in the /Letter/PrintQr/ endpoint of Solvait v24.4.2 allows attackers to access sensitive data via a crafted request.
CVE-2024-44859 1 Tenda 2 Fh1201, Fh1201 Firmware 2026-06-17 N/A 8.0 HIGH
Tenda FH1201 v1.2.0.14 has a stack buffer overflow vulnerability in `formWrlExtraGet`.
CVE-2024-44856 1 Openrobotics 1 Robot Operating System 2026-06-17 N/A 7.5 HIGH
Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble was discovered to contain a NULL pointer dereference via the component nav2_smac_planner().
CVE-2024-44855 1 Openrobotics 1 Robot Operating System 2026-06-17 N/A 7.5 HIGH
Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble was discovered to contain a NULL pointer dereference via the component nav2_navfn_planner().
CVE-2024-44854 1 Openrobotics 1 Robot Operating System 2026-06-17 N/A 7.5 HIGH
Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble was discovered to contain a NULL pointer dereference via the component smoothPlan().