Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High8.8PHP Timeclock 1.04 contains time-based and boolean-based blind SQL injection vulnerabilities in the login_userid parameter of login.php that allows unauthenticated att…EPSS 0.3%May 15, 2026
- Medium4.9The NEX-Forms – Ultimate Forms Plugin for WordPress plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'table' parameter in all versions up t…May 15, 2026
- High7.1ClipBucket v5 is an open source video sharing platform.May 14, 2026
- Critical9.3Strapi is an open source headless content management system.EPSS 1.2%May 14, 2026
- High8.8SQL injection in PostgreSQL logical replication ALTER SUBSCRIPTION ...May 14, 2026
- High8.8Stack buffer overflow in PostgreSQL module "refint" allows an unprivileged database user to execute arbitrary code as the operating system user running the database.May 14, 2026
- High7.2SQL injection in PostgreSQL pg_createsubscriber allows an attacker with pg_create_subscription rights to execute arbitrary SQL as a superuser.May 14, 2026
- Critical9.8Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Akilli Commerce Software Technologies Ltd.EPSS 0.4%May 14, 2026
- Medium6.5The Taskbuilder – Project Management & Task Management Tool With Kanban Board plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'project_sea…May 14, 2026
- Medium6.5The Unlimited Elements for Elementor plugin for WordPress is vulnerable to SQL Injection via the 'data[filter_search]' parameter in the get_cat_addons AJAX action in v…May 14, 2026
- High7.1SOGo before 5.12.7, when PostgreSQL or MariaDB is used, and cleartext passwords are stored, allows SQL injection.May 14, 2026
- High7.1SOGo before 5.12.7, when PostgreSQL is used, allows SQL injection.May 14, 2026
- High8.1Insufficient sanitization of SQL queries in the utility script allows SQL Injections on behalf of the root user if Slow Query logging is enabled.May 13, 2026
- High7.5ERPNext is a free and open source Enterprise Resource Planning tool.May 13, 2026
- High7.5ERPNext is a free and open source Enterprise Resource Planning tool.May 13, 2026
- Medium4.9CubeCart is an ecommerce software solution.May 13, 2026
- High8.7EcclesiaCRM is CRM Software for church management.May 13, 2026
- Critical9.3MISP is an open source threat intelligence and sharing platform.May 13, 2026
- High7.2CubeCart is an ecommerce software solution.May 13, 2026
- High8.8Flight is an extensible micro-framework for PHP.May 13, 2026
- High8.3CKAN is an open-source DMS (data management system) for powering data hubs and data portals.May 13, 2026
- Medium6.1A SQL injection vulnerability in Trust Protection Foundation allows an authenticated attacker to execute arbitrary SQL commands against the product database.EPSS 0.2%May 13, 2026
- High7.1Joomla J2 JOBS 1.3.0 contains an authenticated SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code thr…EPSS 0.3%May 13, 2026
- High7.1Joomla J2 JOBS 1.3.0 contains an authenticated SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code thr…EPSS 0.3%May 13, 2026
- High8.8Joomla com_hdwplayer 4.2 contains an SQL injection vulnerability in the search.php file that allows unauthenticated attackers to execute arbitrary SQL queries by injec…EPSS 0.3%May 13, 2026