KEV + Critical EPSS ≥ 50% Critical + PoC No Auth + Critical XSS (CWE-79) SQLi (CWE-89) Code Injection KEV + Has PoC

Results for "cwe:94"

626 found Export CSV
CVE Severity CVSS EPSS Published Flags Description
CVE-2026-6622 low 1.9 0.0021 2026-04-20 A vulnerability was identified in BichitroGan ISP Billing Software 2025.3.20. This affects an unknow
CVE-2026-6624 low 1.9 0.0021 2026-04-20 A weakness has been identified in BichitroGan ISP Billing Software 2025.3.20. Affected is an unknown
CVE-2026-6651 low 1.9 0.0021 2026-04-20 A security flaw has been discovered in erponline.xyz ERP Online up to 4.0.0. This vulnerability affe
CVE-2026-6995 low 1.9 0.0024 2026-04-25 A security flaw has been discovered in BDCOM P3310D 0.4.2 10.1.0F Build 86345. The impacted element
CVE-2026-6996 low 1.9 0.0024 2026-04-25 A weakness has been identified in BDCOM P3310D 0.4.2 10.1.0F Build 86345. This affects an unknown fu
CVE-2026-6997 low 1.9 0.0024 2026-04-25 A security vulnerability has been detected in BDCOM P3310D 0.4.2 10.1.0F Build 86345. This impacts a
CVE-2026-6998 low 1.9 0.0024 2026-04-25 A vulnerability was detected in BDCOM P3310D 0.4.2 10.1.0F Build 86345. Affected is an unknown funct
CVE-2026-6999 low 1.9 0.0027 2026-04-25 A flaw has been found in BIVOCOM TR321 21.1.1.50. Affected by this vulnerability is an unknown funct
CVE-2026-7000 low 1.9 0.0024 2026-04-25 A vulnerability has been found in Datacom DM4100 1.3.6.1.4.1.3709. Affected by this issue is some un
CVE-2026-7001 low 1.9 0.0024 2026-04-25 A vulnerability was found in Datacom DM4100 1.3.6.1.4.1.3709. This affects an unknown part of the co
CVE-2026-7011 low 1.9 0.0027 2026-04-26 A weakness has been identified in MaxSite CMS up to 109.3. Affected by this vulnerability is an unkn
CVE-2026-7012 low 1.9 0.0029 2026-04-26 A vulnerability was detected in MaxSite CMS up to 109.3. This affects an unknown part of the compone
CVE-2026-7013 low 1.9 0.0022 2026-04-26 A security vulnerability has been detected in MaxSite CMS up to 109.3. Affected by this issue is som
CVE-2026-7014 low 1.9 0.0027 2026-04-26 A flaw has been found in MaxSite CMS up to 109.3. This vulnerability affects unknown code of the com
CVE-2026-7015 low 1.9 0.0022 2026-04-26 A vulnerability has been found in MaxSite CMS up to 109.3. This issue affects some unknown processin
CVE-2026-7016 low 1.9 0.0022 2026-04-26 A vulnerability was found in MaxSite CMS up to 109.3. Impacted is an unknown function of the compone
CVE-2026-7027 low 1.9 0.0043 2026-04-26 A vulnerability was identified in D-Link DSL-2740R EU_01.15. Impacted is an unknown function of the
CVE-2026-7090 low 1.9 0.0025 2026-04-27 A vulnerability was detected in code-projects Chat System 1.0. This affects an unknown function of t
CVE-2026-7269 low 1.9 0.0021 2026-04-28 A vulnerability was found in SourceCodester Pharmacy Sales and Inventory System 1.0. Affected is an
CVE-2026-7281 low 1.9 0.0021 2026-04-28 A vulnerability was determined in SourceCodester Pharmacy Sales and Inventory System 1.0. The impact
CVE-2026-7294 low 1.9 0.0021 2026-04-28 A flaw has been found in SourceCodester Pizzafy Ecommerce System 1.0. Affected by this vulnerability
CVE-2026-8136 low 1.9 0.0020 2026-05-08 A flaw has been found in SourceCodester Pharmacy Sales and Inventory System 1.0. This affects an unk
CVE-2026-11338 low 1.9 0.0026 2026-06-05 A security vulnerability has been detected in SourceCodester Ship Ferry Ticket Reservation System 1.
CVE-2026-12822 low 1.9 0.0028 2026-06-22 A vulnerability was identified in langflow-ai langflow up to 1.9.3. This affects an unknown function
CVE-2026-14655 low 1.9 0.0037 2026-07-04 A weakness has been identified in code-projects Assessment Management 1.0. Affected by this issue is
CVE-2026-15532 low 1.9 0.0037 2026-07-13 A vulnerability was identified in SourceCodester Online Book Store System 1.0. This issue affects so
CVE-2026-16205 low 1.9 0.0035 2026-07-19 A weakness has been identified in Pluck CMS up to 4.7.21. This vulnerability affects the function ht
CVE-2026-19058 low 1.9 0.0019 2026-08-06 A vulnerability was found in FoundationAgents MetaGPT up to 0.8.2. The impacted element is the funct
CVE-2026-19060 low 1.9 0.0020 2026-08-06 A vulnerability was identified in FoundationAgents MetaGPT up to 0.8.2. This impacts an unknown func
CVE-2026-19207 low 1.9 0.0037 2026-08-07 A security vulnerability has been detected in PHPGurukul Company Visitor Management System 1.0. This
CVE-2026-112038 low 1.9 0.0021 2026-10-19 A vulnerability has been found in diem-project diem up to 116974edfb9a5b8bd69cb13586dc62bcdbb485ad.
CVE-2026-116100 low 1.9 0.0020 2026-10-26 A vulnerability has been found in gougucms up to 4.08.18. Impacted is the function Add of the file a
CVE-2026-8857 none — 0.0210 2026-07-01 A vulnerability in Wikimedia Foundation timeline. This vulnerability is associated with program fi
CVE-2018-1273 — — — — KEV Spring Data Commons contains a property binder vulnerability which can allow an attacker to perform
CVE-2018-7602 — — — — KEV A remote code execution vulnerability exists within multiple subsystems of Drupal that can allow att
CVE-2021-22205 — — — — KEV GitHub Community and Enterprise Editions that utilize the ability to upload images through GitLab Wo
CVE-2021-44529 — — — — KEV Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) contains a code injection vulnerability th
CVE-2023-3519 — — 0.9975 — KEV Citrix NetScaler ADC and NetScaler Gateway contains a code injection vulnerability that allows for u
CVE-2024-21351 — — 0.2780 — KEV Microsoft Windows SmartScreen contains a security feature bypass vulnerability that allows an attack
CVE-2024-20359 — — 0.1882 — KEV Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) contain a privilege escal
CVE-2024-23692 — — 0.9949 — KEV Rejetto HTTP File Server contains an improper neutralization of special elements used in a template
CVE-2025-3248 — — 0.9999 — KEV Langflow contains a missing authentication vulnerability in the /api/v1/validate/code endpoint that
CVE-2025-32432 — — 0.9979 — KEV Craft CMS contains a code injection vulnerability that allows a remote attacker to execute arbitrary
CVE-2025-3928 — — 0.0253 — KEV Commvault Web Server contains an unspecified vulnerability that allows a remote, authenticated attac
CVE-2025-62593 — — 0.6015 — KEV Ray-Project Ray contains a code injection vulnerability that could allow remote code execution. Deve
CVE-2026-33937 — — 0.0191 2026-03-27 Handlebars provides the power necessary to let users build semantic templates. In versions 4.0.0 thr
CVE-2026-33938 — — 0.0072 2026-03-27 Handlebars provides the power necessary to let users build semantic templates. In versions 4.0.0 thr
CVE-2026-33940 — — 0.0072 2026-03-27 Handlebars provides the power necessary to let users build semantic templates. In versions 4.0.0 thr
CVE-2026-35093 — — 0.0018 2026-04-01 A flaw was found in libinput. A local attacker who can place a specially crafted Lua bytecode file i
CVE-2026-34197 — — 0.9826 2026-04-07 KEV Apache ActiveMQ contains an improper input validation vulnerability that allows for code injection.