A vulnerability was found in Kashipara College Management System 1.0. It has been rated as problematic. Affected by this
A vulnerability was found in Kashipara College Management System 1.0. It has been declared as problematic. Affected by t
A vulnerability was found in Kashipara College Management System 1.0. It has been classified as problematic. Affected is
A vulnerability was found in Kashipara College Management System 1.0 and classified as problematic. This issue affects s
Mattermost versions 9.5.x <= 9.5.3, 9.6.x <= 9.6.1 and 8.1.x <= 8.1.12 fail to enforce proper access controls which allo
github.com/huandu/facebook is a Go package that fully supports the Facebook Graph API with file upload, batch request an
A vulnerability classified as problematic has been found in JFinalCMS up to 20221020. This affects an unknown part of th
** DISPUTED ** A vulnerability was found in zzdevelop lenosp up to 20230831. It has been classified as problematic. This
A vulnerability was found in FastCMS up to 0.1.5 and classified as problematic. Affected by this issue is some unknown f
A vulnerability, which was classified as problematic, has been found in xuliangzhan vxe-table up to 3.7.9. This issue af
A vulnerability was found in Qiwen Netdisk up to 1.4.0. It has been declared as problematic. Affected by this vulnerabil
vantage6 is an open-source infrastructure for privacy preserving analysis. Collaboration administrators can add extra or
The Flattr WordPress plugin through 1.2.2 does not sanitise and escape some of its settings, which could allow high priv
The Button contact VR WordPress plugin through 4.7 does not sanitise and escape some of its settings, which could allow
Veeam Backup Enterprise Manager allows high-privileged users to read backup session logs.
In the Linux kernel, the following vulnerability has been resolved: net: encx24j600: check error in devm_regmap_init_en
OpenBD 20210306203917-6cbe797 is vulnerable to Deserialization of Untrusted Data. The cookies bdglobals and bdclient_spo
In the Linux kernel, the following vulnerability has been resolved: drivers: perf: Do not broadcast to other cpus when
In the Linux kernel, the following vulnerability has been resolved: xfrm/compat: prevent potential spectre v1 gadget in
In the Linux kernel, the following vulnerability has been resolved: x86/entry: Clear X86_FEATURE_SMAP when CONFIG_X86_S
A vulnerability classified as problematic was found in PHPGurukul Directory Management System 1.0. Affected by this vuln
A vulnerability classified as problematic has been found in PHPGurukul Directory Management System 1.0. Affected is an u
A vulnerability was found in SourceCodester Event Registration System 1.0. It has been declared as problematic. Affected
In the Linux kernel, the following vulnerability has been resolved: btrfs: send: handle path ref underflow in header it
A vulnerability was found in Emlog Pro 2.3.4. It has been classified as problematic. This affects an unknown part of the
Authentication Bypass by Spoofing vulnerability in helderk Maintenance Mode allows Functionality Bypass.This issue affec
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS vulnerability in Bill Minozzi Car Dealer al
Authentication Bypass by Spoofing vulnerability in Pippin Williamson CGC Maintenance Mode allows Functionality Bypass.Th
Authentication Bypass by Spoofing vulnerability in Filipe Seabra WordPress Manutenção allows Functionality Bypass.This i
Out-of-bounds read for some Intel(R) Trace Analyzer and Collector software before version 2022.0.0 published Nov 2023 ma
NULL pointer dereference in some Intel(R) oneVPL software before version 23.3.5 may allow an authenticated user to poten
Out-of-bounds write in Intel(R) Media SDK all versions and some Intel(R) oneVPL software before version 23.3.5 may allow
Improper buffer restrictions in Intel(R) Media SDK software all versions may allow an authenticated user to potentially
Hardware logic contains race conditions in some Intel(R) Processors may allow an authenticated user to potentially enabl
Improper input validation in some Intel(R) CBI software before version 1.1.0 may allow an authenticated user to potentia
Improper conditions check in Intel(R) Power Gadget software for macOS all versions may allow an authenticated user to po
Out-of-bounds read in Intel(R) Media SDK and some Intel(R) oneVPL software before version 23.3.5 may allow an authentica
idccms V1.35 was discovered to contain a Cross-Site Request Forgery (CSRF) via admin/tplSys_deal.php?mudi=area.
In JetBrains TeamCity between 2024.03 and 2024.03.1 several stored XSS in the available updates page were possible
A vulnerability, which was classified as problematic, has been found in code-projects Simple Chat System 1.0. This issue
A vulnerability, which was classified as problematic, was found in code-projects Simple Chat System 1.0. Affected is an
A vulnerability was found in SourceCodester Interactive Map with Marker 1.0. It has been rated as problematic. Affected
A vulnerability, which was classified as problematic, was found in SourceCodester Simple Image Stack Website 1.0. This a
Broken Authentication vulnerability discovered in OpenText™ iManager 3.2.6.0200. This vulnerability allows an attacker t
On Windows systems, the Arc configuration files resulted to be world-readable. This can lead to information disclosur
The Base64 Encoder/Decoder WordPress plugin through 0.9.2 does not have CSRF check when updating its settings, and is mi
The HL Twitter WordPress plugin through 2014.1.18 does not have CSRF check in place when updating its settings, which co
Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4, when clo
Git is a revision control system. Prior to versions 2.45.1, 2.44.1, 2.43.4, 2.42.2, 2.41.1, 2.40.2, and 2.39.4, local cl
sshproxy is used on a gateway to transparently proxy a user SSH connection on the gateway to an internal host via SSH. P
Frequently Asked Questions
What does LOW severity mean for CVEs?
CVSS 0.1–3.9 — low-impact vulnerabilities with limited exploitability or minimal consequences
How many low severity CVEs exist?
There are 15,415 CVE records rated LOW in our database. Of these, 6 are listed in CISA's Known Exploited Vulnerabilities catalog.
How should I prioritize low severity vulnerabilities?
LOW severity vulnerabilities should be addressed as part of regular patching cycles. Prioritize those with high EPSS scores or that affect critical systems. CyberStrike helps you assess real-world exploitability beyond CVSS scores.
Detect LOW Vulnerabilities
CyberStrike scans your infrastructure and detects low severity vulnerabilities in real time.
Get Started