Vulnerabilities
Summary — last 7 days
New vulnerabilities2,699▼ 343 vs. last week
Critical / high1,270▼ 197 vs. last week
New active exploitation (KEV)3▼ 5 vs. last week
Unscored (no CVSS)208▼ 123 vs. last week
616 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Awaiting Analysis | Low (2.1) | 0.32% | — | Xnview ClassicAI | 10/7/2026 | 10/7/2026 | A flaw has been found in XnView Classic 2.52.5. Impacted is an unknown function of the component FLI File Parser. This manipulation of the argument starting_line causes heap-based buffer overflow. Remote exploitation of the attack is possible. Upgrading to version 2.52.6 is recommended to address this issue. Upgrading… | |
| Deferred | High (7.5) | 0.39% | — | Plainviewplugins MycryptocheckoutAI | 5/25/2026 | 7/24/2026 | Missing Authorization vulnerability in edward_plainview MyCryptoCheckout allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects MyCryptoCheckout: from n/a through 2.161. | |
| Analyzed | Medium (6.2) | 0.17% | — | Xnview Nconvert | 3/23/2026 | 6/17/2026 | XnSoft NConvert 7.230 is vulnerable to Use-After-Free via a crafted .tiff file | |
| Analyzed | Medium (6.2) | 0.17% | — | Xnview Nconvert | 3/23/2026 | 6/17/2026 | XnSoft NConvert 7.230 is vulnerable to Stack Buffer Overrun via a crafted .tiff file. | |
| Analyzed | Medium (5.3) | 0.52% | — | Liujianview Gymxmjpa | 1/13/2025 | 6/17/2026 | A vulnerability classified as critical was found in liujianview gymxmjpa 1.0. This vulnerability affects the function MenberDaoInpl of the file src/main/java/com/liujian/gymxmjpa/controller/MenberConntroller.java. The manipulation of the argument hyname leads to sql injection. The attack can be initiated remotely. The… | |
| Analyzed | Medium (5.3) | 0.52% | — | Liujianview Gymxmjpa | 1/13/2025 | 6/17/2026 | A vulnerability classified as critical has been found in liujianview gymxmjpa 1.0. This affects the function MembertypeDaoImpl of the file src/main/java/com/liujian/gymxmjpa/controller/MembertypeController.java. The manipulation of the argument typeName leads to sql injection. It is possible to initiate the attack… | |
| Analyzed | Medium (5.3) | 0.65% | — | Liujianview Gymxmjpa | 1/13/2025 | 6/17/2026 | A vulnerability was found in liujianview gymxmjpa 1.0. It has been rated as critical. Affected by this issue is the function LoosDaoImpl of the file src/main/java/com/liujian/gymxmjpa/controller/LoosController.java. The manipulation of the argument loosName leads to sql injection. The attack may be launched remotely.… | |
| Analyzed | Medium (5.3) | 0.65% | — | Liujianview Gymxmjpa | 1/13/2025 | 6/17/2026 | A vulnerability was found in liujianview gymxmjpa 1.0. It has been declared as critical. Affected by this vulnerability is the function EquipmentDaoImpl of the file src/main/java/com/liujian/gymxmjpa/controller/EquipmentController.java. The manipulation of the argument hyname leads to sql injection. The attack can be… | |
| Analyzed | Medium (5.3) | 0.52% | — | Liujianview Gymxmjpa | 1/13/2025 | 6/17/2026 | A vulnerability was found in liujianview gymxmjpa 1.0. It has been classified as critical. Affected is the function SubjectDaoImpl of the file src/main/java/com/liujian/gymxmjpa/controller/SubjectController.java. The manipulation of the argument subname leads to sql injection. It is possible to launch the attack… | |
| Analyzed | Medium (5.3) | 0.65% | — | Liujianview Gymxmjpa | 1/13/2025 | 6/17/2026 | A vulnerability was found in liujianview gymxmjpa 1.0 and classified as critical. This issue affects the function GoodsDaoImpl of the file src/main/java/com/liujian/gymxmjpa/controller/GoodsController.java. The manipulation of the argument goodsName leads to sql injection. The attack may be initiated remotely. The… | |
| Deferred | Medium (5.3) | 0.31% | — | Liujianview GymxmjpaAI | 1/13/2025 | 6/17/2026 | A vulnerability has been found in liujianview gymxmjpa 1.0 and classified as critical. This vulnerability affects the function CoachController of the file src/main/java/com/liujian/gymxmjpa/controller/CoachController.java. The manipulation of the argument coachName leads to sql injection. The attack can be initiated… | |
| Analyzed | High (8.8) | 0.49% | — | Xnview | 12/12/2024 | 6/17/2026 | XnSoft XnView Classic RWZ File Parsing Integer Underflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of XnSoft XnView Classic. User interaction is required to exploit this vulnerability in that the target must visit a malicious… | |
| Analyzed | High (7.8) | 0.36% | — | Irfanview | 11/22/2024 | 6/17/2026 | IrfanView SID File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious… | |
| Analyzed | High (7.8) | 0.35% | — | Irfanview | 11/22/2024 | 6/17/2026 | IrfanView SID File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a… | |
| Analyzed | High (7.8) | 0.35% | — | Irfanview | 11/22/2024 | 6/17/2026 | IrfanView SID File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious… | |
| Analyzed | High (7.8) | 0.35% | — | Irfanview | 11/22/2024 | 6/17/2026 | IrfanView SID File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious… | |
| Analyzed | High (7.8) | 0.36% | — | Irfanview | 11/22/2024 | 6/17/2026 | IrfanView SID File Parsing Uninitialized Pointer Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a… | |
| Analyzed | High (7.8) | 0.52% | — | Irfanview | 11/22/2024 | 6/17/2026 | IrfanView CIN File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious… | |
| Analyzed | High (7.8) | 0.52% | — | Irfanview | 11/22/2024 | 6/17/2026 | IrfanView CIN File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious… | |
| Analyzed | High (7.8) | 0.52% | — | Irfanview | 11/22/2024 | 6/17/2026 | IrfanView AWD File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious… | |
| Analyzed | High (7.8) | 0.52% | — | Irfanview | 11/22/2024 | 6/17/2026 | IrfanView PSP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious… | |
| Analyzed | High (7.8) | 0.52% | — | Irfanview | 11/22/2024 | 6/17/2026 | IrfanView PSP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious… | |
| Analyzed | High (7.8) | 0.35% | — | Irfanview | 11/22/2024 | 6/17/2026 | IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious… | |
| Analyzed | High (7.8) | 0.35% | — | Irfanview | 11/22/2024 | 6/17/2026 | IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious… | |
| Analyzed | High (7.8) | 0.39% | — | Irfanview | 11/22/2024 | 6/17/2026 | IrfanView DXF File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of IrfanView. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious… |