Search vulnerabilities

Expected end of text, found ',' (at char 24), (line:1, col:25)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 425,959

CVE-2024-33763

lunasvg v2.3.9 was discovered to contain a stack-buffer-underflow at lunasvg/source/layoutcontext.cpp.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Sammycage
Products
Lunasvg
CVE-2024-33766

lunasvg v2.3.9 was discovered to contain an FPE (Floating Point Exception) at blend_transformed_tiled_argb.isra.0.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Sammycage
Products
Lunasvg
CVE-2024-33767

lunasvg v2.3.9 was discovered to contain a segmentation violation via the component composition_solid_source.

CVSS 3.1 · 5 Medium EPSS < 1% KEV · Not listed
Vendors
Sammycage
Products
Lunasvg
CVE-2024-33768

lunasvg v2.3.9 was discovered to contain a segmentation violation via the component composition_solid_source_over.

CVSS 3.1 · 9.8 Critical EPSS < 1% KEV · Not listed
Vendors
Sammycage
Products
Lunasvg
CVE-2024-57719

lunasvg v3.0.0 was discovered to contain a segmentation violation via the component blend_transformed_tiled_argb.isra.0.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Sammycage
Products
Lunasvg
CVE-2024-57720

lunasvg v3.0.0 was discovered to contain a segmentation violation via the component plutovg_blend.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Sammycage
Products
Lunasvg
CVE-2024-57721

lunasvg v3.0.0 was discovered to contain a segmentation violation via the component plutovg_path_add_path.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Sammycage
Products
Lunasvg
CVE-2024-57722

lunasvg v3.0.0 was discovered to contain a allocation-size-too-big bug via the component plutovg_surface_create.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Sammycage
Products
Lunasvg
CVE-2024-57723

lunasvg v3.0.0 was discovered to contain a segmentation violation via the component composition_source_over.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Sammycage
Products
Lunasvg
CVE-2024-57724

lunasvg v3.0.0 was discovered to contain a segmentation violation via the component gray_record_cell.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Sammycage
Products
Lunasvg
CVE-2024-55456

lunasvg v3.0.1 was discovered to contain a segmentation violation via the component gray_find_cell

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Sammycage
Products
Lunasvg
CVE-2025-2951

Bluestar Micro Mall data.php sql injection

A vulnerability classified as critical has been found in Bluestar Micro Mall 1.0. Affected is an unknown function of the file /api/data.php. The manipulation of the argument Search leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

CVSS 4.0 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Bluestar
Products
Micro Mall
CVE-2024-34957

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component admin/sysImages_deal.php?mudi=infoSet.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Idccms Idccms Project
Products
Idccms Idccms
CVE-2024-35011

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/infoType_deal.php?mudi=rev&nohrefStr=close.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Idccms Idccms Project
Products
Idccms Idccms
CVE-2024-35012

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/infoType_deal.php?mudi=add&nohrefStr=close.

CVSS 3.1 · 6.3 Medium EPSS < 1% KEV · Not listed
Vendors
Idccms Idccms Project
Products
Idccms Idccms
CVE-2024-35108

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin/homePro_deal.php?mudi=del&dataType=&dataTypeCN.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Idccms Idccms Project
Products
Idccms Idccms
CVE-2024-35109

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /homePro_deal.php?mudi=add&nohrefStr=close.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Idccms Idccms Project
Products
Idccms Idccms
CVE-2024-36670

idccms v1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component admin/vpsClass_deal.php?mudi=del

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Idccms
Products
Idccms