cubecart cubecart

Name: cubecart cubecart
Brand: cubecart

productUS

cpe:2.3:a:cubecart:cubecart:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

by severity

4critical6high12medium0low

updated 2026-10-28

vulnerabilities (29)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2009-3904US	high7.5	8.67% (95th)	Exploit	no fix	2009-11-06	= 4.3.4
CVE-2013-1465US	critical9.8	7.09% (94th)	Exploit	no fix	2013-02-08	5.0.0 → 5.2.0
CVE-2014-2341US	medium6.8	5.83% (93rd)	Exploit	no fix	2014-04-22	9 versions
CVE-2024-34832US	critical9.8	5.01% (92nd)	Exploit	6.5.5	2024-06-06	< 6.5.5
CVE-2012-0865US	medium5.8	2.82% (87th)	Exploit	no fix	2012-02-21	21 versions
CVE-2009-4060US	high7.5	2.24% (83rd)	Exploit	no fix	2009-11-24	38 versions
CVE-2010-1931US	high7.5	1.26% (69th)	Exploit	no fix	2010-06-10	6 versions
CVE-2024-33438US	—	1.12% (66th)	Exploit	6.5.5	2024-04-29	< 6.5.5
CVE-2017-2098US	medium6.5	2.47% (84th)	—	no fix	2017-04-28	≤ 6.1.3
CVE-2017-2090US	medium6.5	2.47% (84th)	—	no fix	2017-04-28	≤ 6.1.3
CVE-2015-6928US	medium6.8	2.19% (82nd)	—	no fix	2015-09-28	11 versions
CVE-2017-2117US	medium4.9	2.13% (82nd)	—	no fix	2017-04-28	≤ 6.1.4
CVE-2011-3724US	medium5.0	1.33% (71st)	—	no fix	2011-09-23	= 4.4.3
CVE-2023-42428US	medium6.5	1.29% (70th)	—	6.5.3	2023-11-17	< 6.5.3
CVE-2026-21719US	—	1.20% (68th)	—	6.6.0	2026-04-17	< 6.6.0
CVE-2023-47283US	medium4.9	1.18% (68th)	—	6.5.3	2023-11-17	< 6.5.3
CVE-2018-20716US	critical9.8	1.18% (68th)	—	6.1.13	2019-01-15	< 6.1.13
CVE-2010-4903US	high7.5	1.12% (66th)	—	no fix	2011-10-08	= 4.3.3
CVE-2008-1550US	medium4.3	1.03% (64th)	—	no fix	2008-03-31	= 4.2.1
CVE-2023-47675US	high7.2	0.98% (62nd)	—	6.5.3	2023-11-17	< 6.5.3
CVE-2021-33394US	medium5.4	0.70% (53rd)	—	no fix	2021-05-27	= 6.4.2
CVE-2018-20703US	medium5.4	0.64% (50th)	—	no fix	2019-01-13	= 6.2.2
CVE-2025-59413US	—OT elevated	0.40% (34th)	—	6.5.11	2025-09-22	< 6.5.11
CVE-2023-38130US	high8.1	0.35% (29th)	—	6.5.3	2023-11-17	< 6.5.3
CVE-2026-35496US	—	0.32% (25th)	—	6.6.0	2026-04-17	< 6.6.0
CVE-2025-59411US	—	0.30% (22nd)	—	6.5.11	2025-09-22	< 6.5.11
CVE-2025-59412US	—	0.29% (21st)	—	6.5.11	2025-09-22	< 6.5.11
CVE-2025-59335US	—	0.21% (11th)	—	6.5.11	2025-09-22	< 6.5.11
CVE-2026-34018US	critical9.8	0.18% (7th)	—	6.6.0	2026-04-17	< 6.6.0

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')7 CVEs
CWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')5 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')4 CVEs
CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')2 CVEs
CWE-20Improper Input Validation1 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor1 CVEs
CWE-264CWE-2641 CVEs
CWE-284Improper Access Control1 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE29 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan