Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Critical9.3EasyFlow .NET developed by Digiwin has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, modify, and d…Apr 20, 2026
- Critical9.3EasyFlow .NET developed by Digiwin has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, modify, and d…Apr 20, 2026
- Medium5.5A vulnerability was identified in ProjectsAndPrograms School Management System up to 6b6fae5426044f89c08d0dd101c7fa71f9042a59.Apr 20, 2026
- Medium5.5A flaw has been found in dameng100 muucmf 1.9.5.20260309.Apr 19, 2026
- High7.1ChurchCRM is an open-source church management system.Apr 18, 2026
- High8.8WeGIA is a web manager for charitable institutions.Apr 17, 2026
- Critical9.8A SQL injection vulnerability in CodeAstro Simple Attendance Management System v1.0 allows remote unauthenticated attackers to bypass authentication via the username p…Apr 17, 2026
- Medium5.5A weakness has been identified in QueryMine sms up to 7ab5a9ea196209611134525ffc18de25c57d9593.Apr 17, 2026
- Low2.1A vulnerability was identified in QueryMine sms up to 7ab5a9ea196209611134525ffc18de25c57d9593.Apr 17, 2026
- Critical9.5Unauthenticated user is able to execute arbitrary SQL commands in Sparx Pro Cloud Server database in certain cases.EPSS 0.4%Apr 17, 2026
- Medium5.1An SQL injection vulnerability exists in CubeCart prior to 6.6.0, which may allow an attacker to execute an arbitrary SQL statement on the product.Apr 17, 2026
- Medium6.5The Tutor LMS plugin for WordPress is vulnerable to SQL Injection in versions up to and including 3.9.8.Apr 17, 2026
- Medium4.9The Form Maker by 10Web plugin for WordPress is vulnerable to SQL Injection via the 'ip_search', 'startdate', 'enddate', 'username_search', and 'useremail_search' para…Apr 17, 2026
- Medium6.5The MasterStudy LMS WordPress Plugin for Online Courses and Education plugin for WordPress is vulnerable to Time-based Blind SQL Injection via the 'order' and 'orderby…Apr 17, 2026
- High8.7DataEase is an open-source data visualization and analytics platform.Apr 16, 2026
- High8.6DataEase is an open-source data visualization and analytics platform.Apr 16, 2026
- High8.6DataEase is an open-source data visualization and analytics platform.Apr 16, 2026
- High8.7DataEase is an open-source data visualization and analytics platform.Apr 16, 2026
- High8.7DataEase is an open-source data visualization and analytics platform.Apr 16, 2026
- High8.7DataEase is an open-source data visualization and analytics platform.Apr 16, 2026
- High8.7DataEase is an open source data visualization analysis tool.Apr 16, 2026
- Critical9.1SourceCodester Payroll Management and Information System v1.0 is vulnerable to SQL Injection in the file /payroll/view_employee.php.Apr 16, 2026
- Medium4.7SourceCodester Payroll Management and Information System v1.0 is vulnerable to SQL Injection in the file /payroll/view_account.php?emp_id=.Apr 16, 2026
- Critical9.8SourceCodester Vehicle Parking Area Management System v1.0 is vulnerable to SQL Injection in the file /parking/manage_park.php.Apr 16, 2026
- High7.2SourceCodester Vehicle Parking Area Management System v1.0 is vulnerable to SQL Injection in the file /parking/manage_location.php.Apr 16, 2026