CVEs we hold for Gen

Records whose assigning authority named Gen as the affected vendor. Newest identifiers first, capped at 200.

CVE-2026-90984Generate PDF using Contact Form 7 < 4.2.2 - Unauthenticated Server-Side Request Forgery via Array-Valued Form FieldUnknown Generate PDF using Contact Form 7

CVE-2026-82964Avast sandbox privilege escalation via unpreserved DACLs on virtualized files in aswSnx.sysGen Digital Norton Antivirus Plus, Norton 360 Standard…

CVE-2026-74933GenieWords 1.5.27 - 1.5.34 - Unauthenticated Stored XSS and Configuration OverwriteUnknown GenieWords

CVE-2026-67185TinyWeb 0.0.8 Path Traversal via URL Path ComponentGeneralSandman TinyWeb

CVE-2026-67184TinyWeb 0.0.8 Null Pointer Dereference DoS via Malformed HTTP RequestGeneralSandman TinyWeb

CVE-2026-67183TinyWeb 0.0.8 Memory Leak DoS via HTTP Request HandlingGeneralSandman TinyWeb

CVE-2026-67179Genkit improper host header validationgenkit-ai genkit

CVE-2026-6676Avira antivirus engine heap buffer OOB write when scanning a malformed POSIX tar archiveGen Digital Avira Antivirus

CVE-2026-55727no title heldGenetec Security Center

CVE-2026-44629no title heldGenetec Inc. Synergis Softwire

CVE-2026-40619no title heldGenetec Security Center

CVE-2026-3571Pie Register – User Registration, Profiles & Content Restriction <= 3.8.4.8 - Missing Authorization to Unauthenticated…genetechproducts Pie Register – User Registration, Profiles…

CVE-2026-33147GMT: Stack-based Buffer Overflow in gmt_remote_dataset_idGenericMappingTools gmt

CVE-2026-27768no title heldGenetec Security Center

CVE-2026-27750Avira Internet Security Optimizer TOCTOUGen Digital Inc. Avira Internet Security

CVE-2026-27749Avira Internet Security System Speedup Insecure DeserializationGen Digital Inc. Avira Internet Security

CVE-2026-27748Avira Internet Security Arbitrary File Deletion via Improper Link ResolutionGen Digital Inc. Avira Internet Security

CVE-2026-25112no title heldGenetec Inter-System Gateway

CVE-2026-24577WordPress Pie Register plugin <= 3.8.4.8 - Broken Access Control vulnerabilityGenetech Products Pie Register

CVE-2026-16520no title heldGenians Genian ZTNA V6.0

CVE-2026-1359Genolve – AI image AI video generation <= 5.0.5 - Authenticated (Contributor+) Incorrect Authorization to Privilege…Genolve AI Business Graphics, AI Images

CVE-2026-13211Genucenter Disclosure of SNMP Credentialsgenua genucenter

CVE-2026-12410CCleaner local privilege escalation via link following on uninstallGen Digital CCleaner

CVE-2026-12190Genspark AI Workspace App ai.mainfunc.genspark improper authorization in handler for custom url schemeGenspark AI Workspace App

CVE-2026-12068Avira Password Manager credential disclosure via cross-origin autofill in FirefoxGen Digital Avira Password Manager

CVE-2025-9851Appointmind <= 4.1.0 - Authenticated (Contributor+) Stored Cross-Site Scriptinggentlesource Appointmind

CVE-2025-9033Avira antivirus engine heap buffer OOB read when scanning a malformed PDF file (variant 3)Gen Digital Avira Antivirus

CVE-2025-9032Avira antivirus engine heap buffer OOB read when scanning a malformed PE fileGen Digital Avira Antivirus

CVE-2025-8351Avira antivirus engine heap buffer OOB read when scanning a malformed fileGen Digital Avira Antivirus

CVE-2025-7940Genshin Albedo Cat House App com.house.auscat AndroidManifest.xml improper export of android application componentsGenshin Albedo Cat House App

CVE-2025-7019Avast antivirus stack overflow when scanning a malformed Office Open XML fileGen Digital Avast Business Antivirus

CVE-2025-7018Avira antivirus engine null pointer dereference when scanning a malformed PE fileGen Digital Avira Antivirus

CVE-2025-7017Avira antivirus engine heap buffer OOB read when scanning a malformed Windows MSI fileGen Digital Avira Antivirus

CVE-2025-7011Avast antivirus heap OOB when scanning a malformed zip fileGen Digital Avast Business Antivirus

CVE-2025-7010Avast antivirus stack overflow when scanning a malformed PDF fileGen Digital Avast Business Antivirus

CVE-2025-7009Avast antivirus heap buffer OOB read when scanning a malformed PE fileGen Digital Avast Business Antivirus

CVE-2025-7008Avast antivirus heap buffer OOB read when scanning a malformed PE fileGen Digital Avast Business Antivirus

CVE-2025-7006Avast antivirus use of stack memory after free when scanning a malformed PE fileGen Digital Avast Business Antivirus

CVE-2025-7005Avast antivirus infinite recursion when scanning a malformed PE fileGen Digital Avast Business Antivirus

CVE-2025-7004Avast antivirus heap buffer OOB write when scanning a malformed PE fileGen Digital Avast Business Antivirus

CVE-2025-7003Avira antivirus engine heap buffer OOB read when scanning a malformed PDF file (variant 1)Gen Digital Avira Antivirus

CVE-2025-7002Avira antivirus engine heap buffer OOB read when scanning a malformed PDF file (variant 2)Gen Digital Avira Antivirus

CVE-2025-62765General Industrial Controls Lynx+ Gateway Cleartext Transmission of Sensitive InformationGeneral Industrial Controls Lynx+ Gateway

CVE-2025-62748WordPress Web and WooCommerce Addons for WPBakery Builder plugin <= 1.5 - Cross Site Scripting (XSS) vulnerabilityGenetech Products Web and WooCommerce Addons for WPBakery…

CVE-2025-59780General Industrial Controls Lynx+ Gateway Missing Authentication for Critical FunctionGeneral Industrial Controls Lynx+ Gateway

CVE-2025-58083General Industrial Controls Lynx+ Gateway Missing Authentication for Critical FunctionGeneral Industrial Controls Lynx+ Gateway

CVE-2025-58074Privilege escalation during the installation of Norton Secure VPN via the Microsoft StoreGen Digital Norton Secure VPN

CVE-2025-55034General Industrial Controls Lynx+ Gateway Weak Password RequirementsGeneral Industrial Controls Lynx+ Gateway

CVE-2025-43027no title heldGenetec Security Center

CVE-2025-34449Genymobile/scrcpy <= 3.3.3 Global Buffer OverflowGenymobile scrcpy

CVE-2025-34077WordPress Pie Register Plugin ≤ 3.7.1.4 Authentication Bypass RCEGenetech Solutions WordPress Pie Register Plugin

CVE-2025-3025CCleaner Link Following Local Privilege Escalation VulnerabilityGen Digital CCleaner

CVE-2025-2928no title heldGenetec Security Center

CVE-2025-24336no title heldGeneral Incorporated Association OCF SXF Common Library

CVE-2025-23900WordPress Genki Announcement plugin <= 1.4.1 - CSRF to Stored XSS vulnerabilitygenkisan Genki Announcement

CVE-2025-1790no title heldGenetec Sipelia

CVE-2025-1789no title heldGenetec Update Service

CVE-2025-1787no title heldGenetec Update Service

CVE-2025-15614ugrep before 7.6.0 Heap Buffer Over-read via .Z decompressionGenivia ugrep

CVE-2025-14098Avira antivirus engine heap buffer OOB write when scanning a malformed MS-DOS executable fileGen Digital Avira Antivirus

CVE-2025-12528Pie Forms for WP <= 1.6 - Unauthenticated Arbitrary File Uploadgenetechproducts Pie Forms — Drag & Drop Form Builder

CVE-2025-10101Avast antivirus heap buffer OOB read when scanning a malformed Mach-O fileGen Digital Avast Business Antivirus

CVE-2024-8022Genexis Tilgin Home Gateway cross site scriptingGenexis Tilgin Home Gateway

CVE-2024-7059no title heldGenetec Security Center

CVE-2024-6724Generate Images – Magic Post Thumbnail < 5.2.8 - Admin+ Stored XSSUnknown Generate Images

CVE-2024-6579Web and WooCommerce Addons for WPBakery Builder <= 1.4.5 - Missing Authorization to Authenticated (Subscriber+) Plugin…genetechproducts Web and WooCommerce Addons for WPBakery…

CVE-2024-6355Genexis Tilgin Fiber Home Gateway HG1522 cross site scriptingGenexis Tilgin Fiber Home Gateway HG1522

CVE-2024-6108Genexis Tilgin Home Gateway Login cross site scriptingGenexis Tilgin Home Gateway

CVE-2024-6069Pie Register - Basic <= 3.8.3.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Installationgenetechproducts Pie Register – User Registration, Profiles…

CVE-2024-58288Genexus Protection Server 9.7.2.10 Unquoted Service Path Privilege EscalationGenexus Protection Server

CVE-2024-53822WordPress Pie Register Premium plugin < 3.8.3.3 - Arbitrary File Upload vulnerabilityGenetech Pie Register Premium

CVE-2024-53821WordPress Pie Register Premium plugin < 3.8.3.3 - Cross Site Scripting (XSS) vulnerabilityGenetech Pie Register Premium

CVE-2024-52391WordPress Pie Register Premium plugin < 3.8.3.3 - Broken Access Control vulnerabilityGenetech Pie Register Premium

CVE-2024-51679WordPress Appointmind plugin <= 4.0.0 - CSRF to Stored XSS vulnerabilitygentlesource Appointmind

CVE-2024-51605WordPress Genoo plugin <= 6.0.10 - Cross Site Scripting (XSS) vulnerabilityGenoo

CVE-2024-4544Pie Register - Social Sites Login (Add on) <= 1.7.7 - Authentication BypassGenetech Solutions Pie Register - Social Sites Login (Add…

CVE-2024-4227gSOAP: Vulnerable to specially crafted unencrypted SDC messagesGenivia gSOAP

CVE-2024-3901Genesis Blocks <= 3.1.3 - Contributor+ Stored XSSUnknown Genesis Blocks

CVE-2024-3469GP Premium <= 2.4.0 - Reflected Cross-Site ScriptingGeneratePress GP Premium

CVE-2024-32689WordPress WP Social Comments plugin <= 1.7.3 - Broken Access Control vulnerabilityGenialSouls WP Social Comments

CVE-2024-2761Genesis Blocks < 3.1.3 - Contributor+ Stored XSSUnknown Genesis Blocks

CVE-2024-23843no title heldGenians Genian NAC LTS V5.0

CVE-2024-13818Registration Forms – User Registration Forms, Invitation-Based Registrations, Front-end User Profile, Login Form &…genetechproducts Pie Register – User Registration, Profiles…

CVE-2024-11436Drag & Drop Builder, Human Face Detector, Pre-built Templates, Spam Protection, User Email Notifications & more! <=…genetechproducts Pie Forms — Drag & Drop Form Builder

CVE-2024-11293Registration Forms – User Registration Forms, Invitation-Based Registrations, Front-end User Profile, Login Form &…Genetech Solutions Pie Register - Social Sites Login (Add…

CVE-2023-6807GeneratePress Premium <= 2.3.2 - Authenticated(Contributor+) Stored Cross-Site Scripting via Custom MetaGeneratePress Premium

CVE-2023-40254no title heldGenians Genian ZTNA

CVE-2023-40253no title heldGenians Genian ZTNA

CVE-2023-40252no title heldGenians Genian ZTNA

CVE-2023-40251no title heldGenians Genian ZTNA

CVE-2023-3797Gen Technology Four Mountain Torrent Disaster Prevention and Control of Monitoring and Early Warning System…Gen Technology Four Mountain Torrent Disaster Prevention…

CVE-2023-32637no title heldGeneric Model Organism Database Project GBrowse

CVE-2023-28424Soko SQL Injection vulnerabilitygentoo soko

CVE-2023-26033Gentoo soko contains DoS attack based on SQL Injectiongentoo soko

CVE-2023-1522no title heldGenetec Security Center

CVE-2023-0898Uncontrolled Search Path Element in GE MiCOM S1 AgileGeneral Electric MiCOM S1 Agile

CVE-2022-4980General Bytes Crypto Application Server (CAS) Unauthenticated Creation of Admin Account via…General Bytes Crypto Application Server (CAS)

CVE-2022-47192Admin password reset via file upload vulnerability in Generex CS141Generex UPS CS141

CVE-2022-47191Privilege Escalation via file upload vulnerability at Generex CS141Generex UPS CS141

CVE-2022-47190RCE via file upload vulnerability in Generex CS141Generex UPS CS141

CVE-2022-47189DoS via file upload vulnerability at Generex CS141Generex UPS CS141

CVE-2022-47188Improper Input Validation in Generex CS141Generex UPS CS141

CVE-2022-47187File upload XSS vulnerability in Generex CS141Generex UPS CS141

CVE-2022-47186Unrestricted Upload of File vulnerability in Generex CS141Generex UPS CS141

CVE-2022-4706Genesis Columns Advanced < 2.0.4 - Contributor+ Stored XSS via ShortcodeUnknown Genesis Columns Advanced

CVE-2022-3070Generate PDF using Contact Form 7 < 3.6 - Admin+ Stored Cross-Site ScriptingUnknown Generate PDF using Contact Form 7

CVE-2022-26041no title heldGENEREX SYSTEMS Computervertriebsgesellschaft mbH RCCMD

CVE-2022-23921ICSA-22-053-01 GE Proficy CIMPLICITY-IPMGeneral Electric Proficy CIMPLICITY

CVE-2022-21798ICSA-22-053-02 GE Proficy CIMPLICITY-CleartextGeneral Electric Proficy CIMPLICITY

CVE-2022-1758Genki Pre-Publish Reminder <= 1.4.1 - Stored XSS & RCE via CSRFUnknown Genki Pre-Publish Reminder

CVE-2021-47858Genexis Platinum-4410 P4410-V2-1.31A - 'start_addr' Persistent Cross-Site ScriptingGenexis Platinum-4410

CVE-2021-29507dlt-daemon could crash if there is special character in dlt.confGENIVI dlt-daemon

CVE-2021-26622Genian NAC remote code execution vulnerabilityGenians Co., Ltd Genian NAC V5.0 & Genian NAC Suite V5.0

CVE-2021-24751GenerateBlocks < 1.4.0 - Contributor+ Stored Cross-Site ScriptingUnknown GenerateBlocks

CVE-2021-24674Genie WP Favicon <= 0.5.2 - Arbitrary Favicon Change via CSRFUnknown Genie WP Favicon

CVE-2021-21783no title heldn/a Genivia

CVE-2020-36654GENI Portal sliceresource.php no_invocation_id_error cross site scriptingGENI Portal

CVE-2020-36653GENI Portal error-text.php cross site scriptingGENI Portal

CVE-2020-16246GE Reason S20 Ethernet SwitchGeneral Electric Reason S20 Ethernet Switch

CVE-2020-16242GE Reason S20 Ethernet SwitchGeneral Electric Reason S20 Ethernet Switch

CVE-2020-13578no title heldn/a Genivia

CVE-2020-13577no title heldn/a Genivia

CVE-2020-13576no title heldn/a Genivia

CVE-2020-13575no title heldGenivia gSOAP

CVE-2020-13574no title heldn/a Genivia

CVE-2019-25355Genivia gSOAP 2.8 - 'gSOAP' Path TraversalGenivia Inc. gSOAP

CVE-2019-25352Genivia Crystal Live HTTP Server 6.01 - 'Crystal Live HTTP Server' Path TraversalGenivia Inc. Crystal Live HTTP Server

CVE-2019-1010207no title heldGenetechsolutions Pie Register

CVE-2017-9663no title heldn/a General Motors and Shanghai OnStar (SOS) iOS Client

CVE-2017-12697no title heldn/a General Motors and Shanghai OnStar (SOS) iOS Client

CVE-2017-12695no title heldn/a General Motors and Shanghai OnStar (SOS) iOS Client

CVE-2016-15025generator-hottowel 404 Error _app.js cross site scriptingn/a generator-hottowel

132 records, read from the index as it stood on 20 Sep 2026. Every row opens the record it names, and every value on that record opens its own receipt.

Everything on this page is free. Public data. Withholding it protects nothing.