The raw message of every server-side AuthenticationException is returned to the unauthenticated remote caller in the gRP
A vulnerability was determined in SourceCodester Pharmacy Sales and Inventory System 1.0. The impacted element is the fu
A vulnerability was found in SourceCodester Pharmacy Sales and Inventory System 1.0. Affected is an unknown function of
A vulnerability was determined in Artifex MuPDF up to 1.28.0. The impacted element is the function fz_subset_cff_for_gid
A vulnerability was determined in code-projects Coaching Management System 1.0. Affected by this vulnerability is an unk
A flaw has been found in code-projects Invoice System in Laravel 1.0. Affected is an unknown function of the file /item.
A vulnerability was determined in code-projects Chat System 1.0. Affected is an unknown function of the file update_user
A vulnerability was detected in code-projects Chat System 1.0. This affects an unknown function of the file /admin/send_
A vulnerability was detected in 666ghj MiroFish up to 0.1.2. The impacted element is an unknown function of the file /co
A weakness has been identified in tufantunc ssh-mcp up to 1.5.0. Impacted is an unknown function of the file src/index.t
A vulnerability was identified in D-Link DSL-2740R EU_01.15. Impacted is an unknown function of the component Wireless S
A weakness has been identified in SmythOS sre up to 0.0.15. This impacts an unknown function of the file packages/sdk/sr
A security flaw has been discovered in Ollama up to 0.20.2. This affects the function digestToPath of the file x/imagege
A vulnerability was found in MaxSite CMS up to 109.3. Impacted is an unknown function of the component ushki Plugin. Per
A vulnerability has been found in MaxSite CMS up to 109.3. This issue affects some unknown processing of the component G
A flaw has been found in MaxSite CMS up to 109.3. This vulnerability affects unknown code of the component down_count Pl
A security vulnerability has been detected in MaxSite CMS up to 109.3. Affected by this issue is some unknown functional
A vulnerability was detected in MaxSite CMS up to 109.3. This affects an unknown part of the component Redirect Plugin.
A weakness has been identified in MaxSite CMS up to 109.3. Affected by this vulnerability is an unknown functionality of
A vulnerability was found in Datacom DM4100 1.3.6.1.4.1.3709. This affects an unknown part of the component Ethernet Con
A vulnerability has been found in Datacom DM4100 1.3.6.1.4.1.3709. Affected by this issue is some unknown functionality
A flaw has been found in BIVOCOM TR321 21.1.1.50. Affected by this vulnerability is an unknown functionality of the comp
A vulnerability was detected in BDCOM P3310D 0.4.2 10.1.0F Build 86345. Affected is an unknown function of the component
A security vulnerability has been detected in BDCOM P3310D 0.4.2 10.1.0F Build 86345. This impacts an unknown function o
A weakness has been identified in BDCOM P3310D 0.4.2 10.1.0F Build 86345. This affects an unknown function of the compon
A security flaw has been discovered in BDCOM P3310D 0.4.2 10.1.0F Build 86345. The impacted element is an unknown functi
A vulnerability was found in projeto-siga siga 11.0.3.18. The affected element is an unknown function of the file /sigaw
A security vulnerability has been detected in Cesanta Mongoose up to 7.20. This issue affects the function mg_aes_gcm_de
LangChain is a framework for building agents and LLM-powered applications. Prior to 1.1.14, langchain-openai's _url_to_s
Axios is a promise based HTTP client for the browser and Node.js. Prior to 1.15.1 and 0.31.1, the encode() function in l
@astrojs/cloudflare is an SSR adapter for use with Cloudflare Workers targets. Prior to 13.1.10, the fetch() call for re
An issue in Hostbill v.2025-11-24 and 2025-12-01 allows a remote attacker to cause a denial of service via the Client Ba
OpenClaw before 2026.3.31 contains an environment variable leakage vulnerability in SSH-based sandbox backends that pass
OpenClaw before 2026.4.2 contains an insufficient scope vulnerability in Zalo webhook replay dedupe keys that allows leg
OpenClaw before 2026.3.31 contains an authentication rate limiting bypass vulnerability that allows attackers to circumv
A request smuggling vulnerability exists in libsoup's HTTP/1 header parsing logic. The soup_message_headers_append_commo
The reCaptcha by WebDesignBy WordPress plugin before 2.0 does not sanitize or escape the Site Key setting before outputt
uuid before 14.0.0 can make unexpected writes when external output buffers are used, and the UUID version is 3, 5, or 6.
IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to Security Misconfiguration vulnerability in the user a
nimiq-transaction provides the transaction primitive to be used in Nimiq's Rust implementation. Prior to version 1.3.0,
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.11 before 18.11.1 that under certain condi
A logic error in the cut utility of uutils coreutils causes the utility to ignore the -s (only-delimited) flag when usin
A logic error in the tr utility of uutils coreutils causes the program to incorrectly define the [:graph:] and [:print:]
A logic error in the expr utility of uutils coreutils causes the program to evaluate parenthesized subexpressions during
A logic error in the env utility of uutils coreutils causes a failure to correctly parse command-line arguments when uti
A logic error in the split utility of uutils coreutils causes the corruption of output filenames when provided with non-
A logic error in the ln utility of uutils coreutils causes the program to reject source paths containing non-UTF-8 filen
The id utility in uutils coreutils exhibits incorrect behavior in its "pretty print" output when the real UID and effect
The nohup utility in uutils coreutils creates its default output file, nohup.out, without specifying explicit restricted
The safe_traversal module in uutils coreutils, which provides protection against Time-of-Check to Time-of-Use (TOCTOU) s
Frequently Asked Questions
What does LOW severity mean for CVEs?
CVSS 0.1–3.9 — low-impact vulnerabilities with limited exploitability or minimal consequences
How many low severity CVEs exist?
There are 15,415 CVE records rated LOW in our database. Of these, 6 are listed in CISA's Known Exploited Vulnerabilities catalog.
How should I prioritize low severity vulnerabilities?
LOW severity vulnerabilities should be addressed as part of regular patching cycles. Prioritize those with high EPSS scores or that affect critical systems. CyberStrike helps you assess real-world exploitability beyond CVSS scores.
Detect LOW Vulnerabilities
CyberStrike scans your infrastructure and detects low severity vulnerabilities in real time.
Get Started