Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Critical9.9Saltcorn is an extensible, open source, no-code database application builder.Apr 24, 2026
- High8.9Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers.Apr 24, 2026
- High8.1Xibo is an open source digital signage platform with a web content management system and Windows display player software.Apr 24, 2026
- Critical9.8Jizhicms v2.5.4 is vulnerable to SQL injection in the product editing module.EPSS 0.4%Apr 23, 2026
- Critical9.3SocialEngine versions 7.8.0 and prior contain a SQL injection vulnerability in the /activity/index/get-memberall endpoint where user-supplied input passed via the text…Apr 23, 2026
- Critical9.3Borg SPM 2007 (Sales Ended in 2008) developed by BorG Technology Corporation has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arb…Apr 23, 2026
- Medium5.1CMS ALAYA provided by KANATA Limited contains an SQL injection vulnerability.Apr 23, 2026
- Critical9.8In Rocket.Chat <8.3.0, <8.2.1, <8.1.2, <8.0.3, <7.13.5, <7.12.6, <7.11.6, and <7.10.9, a NoSQL injection vulnerability can lead to account takeover of the first user w…Apr 23, 2026
- Critical9.1Jellystat is a free and open source Statistics App for Jellyfin.Apr 22, 2026
- High7.1The a+HRD developed by aEnrich has a SQL Injection vulnerability, allowing authenticated remote attackers to inject arbitrary SQL commands to read database contents.Apr 22, 2026
- Medium6.9OwnTone Server versions 28.4 through 29.0 contain a SQL injection vulnerability in DAAP query and filter handling that allows attackers to inject arbitrary SQL express…Apr 22, 2026
- High8.8Electric is a Postgres sync engine.Apr 21, 2026
- Medium6.5Frappe HR is an open-source human resources management solution (HRMS).Apr 21, 2026
- Critical9.1Vendure is an open-source headless commerce platform.Apr 21, 2026
- High7.2mailcow: dockerized is an open source groupware/email suite based on docker.Apr 21, 2026
- Critical9.3SQL injection vulnerability in Zeon Academy Pro by Zeon Global Tech.EPSS 0.2%Apr 21, 2026
- Medium6.5The Plugin: CMS für Motorrad Werkstätten plugin for WordPress is vulnerable to SQL Injection via the 'arttype' parameter in all versions up to, and including, 1.0.0 du…Apr 21, 2026
- Medium4.6OpenBao is an open source identity-based secrets management system.Apr 21, 2026
- Medium6.3Glances is an open-source system cross-platform monitoring tool.Apr 21, 2026
- High7.5SQL Injection vulnerability in Apartment Visitors Management System Apartment Visitors Management System V1.1 in the email parameter of the forgot password page (forgo…Apr 20, 2026
- High8.2SQL Injection vulnerability in Apartment Visitors Management System Apartment Visitors Management System V1.1 in the contactno parameter of the forgot password page (f…Apr 20, 2026
- Critical9.4SQL Injection vulnerability in Apartment Visitors Management System Apartment Visitors Management System V1.1 within the username parameter of the login page (index.php).Apr 20, 2026
- Medium5.3Apache Doris MCP Server versions earlier than 0.6.1 are affected by an improper neutralization flaw in query context handling that may allow execution of unintended SQ…EPSS 0.7%Apr 20, 2026
- Medium5.5A vulnerability has been found in Metasoft 美特软件 MetaCRM up to 6.4.0.Apr 20, 2026
- Low2.1A flaw has been found in phili67 Ecclesia CRM up to 8.0.0.Apr 20, 2026