Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium6.3SOPlanning 1.52.00 is vulnerable to SQL Injection by an authenticated user via projets.php with statut[].EPSS 0.2%May 8, 2026
- High7.3Prison Management System Using PHP v1.0 was discovered to contain a SQL injection vulnerability via the username on the Admin login page.EPSS 0.8%May 8, 2026
- Medium5.5A security vulnerability has been detected in zyx0814 FilePress up to 2.2.0.May 8, 2026
- Medium5.5A weakness has been identified in CodeAstro Leave Management System 1.0.May 8, 2026
- Medium5.5A security flaw has been discovered in SourceCodester SUP Online Shopping 1.0.May 8, 2026
- Medium5.5A vulnerability was identified in SourceCodester SUP Online Shopping 1.0.May 8, 2026
- Medium5.5A vulnerability was determined in SourceCodester SUP Online Shopping 1.0.May 8, 2026
- Medium5.5A vulnerability was found in SourceCodester SUP Online Shopping 1.0.May 8, 2026
- Medium5.5A flaw has been found in SourceCodester Comment System 1.0.May 8, 2026
- Low2.1A vulnerability was detected in code-projects Simple Chat System 1.0.May 8, 2026
- Low2.1A vulnerability was identified in JeecgBoot up to 3.9.1.May 7, 2026
- Medium5.5A security vulnerability has been detected in code-projects Feedback System 1.0.May 7, 2026
- Low2.1A security flaw has been discovered in CodeAstro Online Classroom 1.0.May 7, 2026
- Critical9.3BerriAI LiteLLM SQL Injection VulnerabilityKEVEPSS 5.8%May 7, 2026
- Medium5.5A vulnerability was found in SourceCodester Pharmacy Sales and Inventory System 1.0.May 7, 2026
- High7.1Daptin is a GraphQL/JSON-API headless CMS.May 7, 2026
- High8.3Daptin is a GraphQL/JSON-API headless CMS.May 7, 2026
- High8.3Dagster is an orchestration platform for the development, production, and observation of data assets.May 7, 2026
- High7.6Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPMart Team Member allows Blind SQL Injection.EPSS 0.2%May 7, 2026
- High7.5The BetterDocs Pro plugin for WordPress is vulnerable to SQL Injection via the and AJAX actions in all versions up to, and including, 3.7.0.May 7, 2026
- High7.2NocoBase is an AI-powered no-code/low-code platform for building business applications and enterprise solutions.May 7, 2026
- High8.8YesWiki is a wiki system written in PHP.May 7, 2026
- High8.8NocoBase is an AI-powered no-code/low-code platform for building business applications and enterprise solutions.May 7, 2026
- Critical9.0### Summary A SQL injection vulnerability exists in Rucio versions 1.30.0 and later before 35.8.5, 38.5.5, 39.4.2, and 40.1.1, in .May 6, 2026
- Critical9.4A SQL injection vulnerability in allows any authenticated Rucio user to execute arbitrary SQL against the backend database through the DID search endpoint ( ).May 6, 2026