Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Low2.1A vulnerability was detected in CodeAstro Online Classroom 1.0.May 4, 2026
- Low2.1A security vulnerability has been detected in code-projects BloodBank Managing System 1.0.May 4, 2026
- Medium6.9A vulnerability was determined in Shandong Hoteam Software PDM Product Data Management System up to 8.3.9.May 4, 2026
- Low2.1A vulnerability was found in code-projects Gym Management System In PHP and Windows NT 1.0.May 4, 2026
- Low2.1A security flaw has been discovered in Dromara MaxKey up to 3.5.13.May 3, 2026
- Low2.0A vulnerability was determined in AMTT Hotel Broadband Operation System 1.0.May 3, 2026
- Medium5.5A vulnerability has been found in Acrel Electrical EEMS Enterprise Power Operation and Maintenance Cloud Platform 1.3.0.May 3, 2026
- Medium5.5A flaw has been found in Acrel Electrical ECEMS Enterprise Microgrid Energy Efficiency Management System 1.3.0.May 3, 2026
- Low1.3A vulnerability was identified in Dolibarr ERP CRM up to 23.0.2.May 3, 2026
- Low2.1A vulnerability was identified in YunaiV yudao-cloud up to 2026.01.May 3, 2026
- Low2.1A security vulnerability has been detected in youlaitech youlai-boot up to 2.21.1.May 3, 2026
- Medium5.5A flaw has been found in Jinher OA 1.0.May 2, 2026
- Medium5.5A vulnerability was determined in code-projects Online Hospital Management System 1.0.May 2, 2026
- High7.5The Geo Mashup plugin for WordPress is vulnerable to Time-Based SQL Injection via the 'object_ids' and 'exclude_object_ids' parameters in all versions up to, and inclu…May 2, 2026
- High7.5The Geo Mashup plugin for WordPress is vulnerable to Time-Based SQL Injection via the 'map_post_type' parameter in all versions up to, and including, 1.13.18.May 2, 2026
- High7.5The Geo Mashup plugin for WordPress is vulnerable to Time-Based SQL Injection via the 'sort' parameter in all versions up to, and including, 1.13.18.May 2, 2026
- Low2.0A vulnerability was determined in itsourcecode Courier Management System 1.0.May 2, 2026
- High8.7CTMS developed by Sunnet has a SQL Injection vulnerability, allowing authenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete database contents.May 2, 2026
- High7.5The ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup plugin for WordPress is vulnerable to time-based blind SQL Injection v…May 2, 2026
- Medium6.5The Geo Mashup plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'geo_mashup_null_fields' parameter in all versions up to, and including, 1.…May 2, 2026
- Medium5.5A weakness has been identified in itsourcecode Courier Management System 1.0.May 1, 2026
- Low2.1A security flaw has been discovered in TimBroddin astro-mcp-server up to 1.1.1.May 1, 2026
- Medium6.5SQL injection vulnerability in MixPHP Framework 2.x thru 2.2.17 via crafted array to the joinOn function in BuildHelper.php.May 1, 2026
- Medium6.5SQL injection vulnerability in MixPHP Framework 2.x thru 2.2.17 via crafted array to the data function in BuildHelper.php.May 1, 2026
- Medium4.9SQL Injection via ORDER BY clause in V2Board thru 1.7.4.May 1, 2026