Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

8 records

Priority MEDIUM 46

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in pebas Lisfinity Core lisfinity-core allows SQL Injection.This issue affects Lisfinity Core: from n/a through <= 1.5.0.

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.00398 Published 2026-03-25 No fix listed CWE-89
Priority MEDIUM 49

Incorrect Privilege Assignment vulnerability in pebas CouponXxL couponxxl allows Privilege Escalation.This issue affects CouponXxL: from n/a through <= 3.0.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00452 Published 2025-10-22 No fix listed CWE-266
Priority MEDIUM 49

Deserialization of Untrusted Data vulnerability in pebas CouponXxL couponxxl allows Object Injection.This issue affects CouponXxL: from n/a through <= 3.0.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00464 Published 2025-06-27 No fix listed CWE-502
Priority MEDIUM 49

Incorrect Privilege Assignment vulnerability in pebas CouponXL couponxl allows Privilege Escalation.This issue affects CouponXL: from n/a through <= 4.5.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00516 Published 2025-05-23 No fix listed CWE-266