oretnom23 online eyewear shop

Name: oretnom23 online eyewear shop
Brand: oretnom23

productUS

cpe:2.3:a:oretnom23:online_eyewear_shop:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

by severity

8critical10high7medium0low

updated 2026-10-28

vulnerabilities (29)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2024-8949US	high8.8	0.72% (54th)	Exploit	no fix	2024-09-17	= 1.0
CVE-2023-1969US	critical9.8	0.78% (56th)	—	no fix	2023-04-10	= 1.0
CVE-2023-0966US	high8.8	0.78% (56th)	—	no fix	2023-02-22	= 1.0
CVE-2023-2244US	critical9.8	0.73% (54th)	—	no fix	2023-04-22	= 1.0
CVE-2025-2651US	—	0.70% (53rd)	—	no fix	2025-03-23	= 1.0
CVE-2025-2846US	critical9.8	0.65% (51st)	—	no fix	2025-03-27	= 1.0
CVE-2024-5894US	critical9.8	0.65% (51st)	—	no fix	2024-06-12	= 1.0
CVE-2024-9974US	critical9.8	0.57% (47th)	—	no fix	2024-10-15	= 1.0
CVE-2023-0686US	critical9.8	0.55% (46th)	—	no fix	2023-02-06	= 1.0
CVE-2025-0173US	high7.5	0.55% (46th)	—	no fix	2025-01-02	= 1.0
CVE-2025-3817US	high8.8	0.53% (45th)	—	no fix	2025-04-19	= 1.0
CVE-2024-9082US	critical9.8OT elevated	0.53% (45th)	—	no fix	2024-09-22	= 1.0
CVE-2024-9905US	high8.8	0.53% (45th)	—	no fix	2024-10-13	= 1.0
CVE-2024-9317US	high8.8	0.53% (45th)	—	no fix	2024-09-28	= 1.0
CVE-2025-4173US	high8.8	0.53% (44th)	—	no fix	2025-05-01	= 1.0
CVE-2024-9973US	critical9.8	0.52% (44th)	—	no fix	2024-10-15	= 1.0
CVE-2024-11247US	medium5.4	0.49% (42nd)	—	no fix	2024-11-15	= 1.0
CVE-2025-3018US	high7.5	0.47% (41st)	—	no fix	2025-03-31	= 1.0
CVE-2023-0673US	high8.1	0.46% (40th)	—	no fix	2023-02-04	= 1.0
CVE-2024-9081US	high7.5	0.45% (39th)	—	no fix	2024-09-22	= 1.0
CVE-2024-9906US	medium5.4	0.44% (38th)	—	no fix	2024-10-13	= 1.0
CVE-2024-9952US	medium4.8	0.44% (38th)	—	no fix	2024-10-15	= 1.0
CVE-2024-9809US	medium6.5	0.43% (38th)	—	no fix	2024-10-10	= 1.0
CVE-2024-9808US	medium6.5	0.43% (38th)	—	no fix	2024-10-10	= 1.0
CVE-2025-3297US	—	0.42% (36th)	—	no fix	2025-04-05	= 1.0
CVE-2025-3298US	—	0.41% (35th)	—	no fix	2025-04-05	= 1.0
CVE-2025-3296US	—	0.40% (34th)	—	no fix	2025-04-05	= 1.0
CVE-2023-0732US	medium6.1	0.39% (33rd)	—	no fix	2023-02-07	= 1.0
CVE-2025-3692US	medium5.4	0.39% (33rd)	—	no fix	2025-04-16	= 1.0

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')18 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')7 CVEs
CWE-74Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')6 CVEs
CWE-94Improper Control of Generation of Code ('Code Injection')3 CVEs
CWE-266Incorrect Privilege Assignment2 CVEs
CWE-282Improper Ownership Management1 CVEs
CWE-284Improper Access Control1 CVEs
CWE-285Improper Authorization1 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE29 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan