Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- Critical9.0Kestra is an open-source, event-driven orchestration platform.EPSS 0.7%Apr 3, 2026
- High7.2Piwigo is an open source photo gallery application for the web.EPSS 0.5%Apr 3, 2026
- High7.2Piwigo is an open source photo gallery application for the web.EPSS 0.5%Apr 3, 2026
- High8.7Piwigo is an open source photo gallery application for the web.EPSS 0.8%Apr 3, 2026
- Medium6.5** UNSUPPORTED WHEN ASSIGNED ** Focalboard version 8.0 fails to sanitize category IDs before incorporating them into dynamic SQL statements when reordering categories.EPSS 0.4%Apr 3, 2026
- High8.5NocoBase is an AI-powered no-code/low-code platform for building business applications and enterprise solutions.EPSS 0.5%Apr 2, 2026
- Medium5.5A vulnerability was determined in projectworlds Car Rental Project 1.0.EPSS 0.6%Apr 2, 2026
- High8.1OpenProject is an open-source, web-based project management software.EPSS 0.4%Apr 2, 2026
- Medium5.5A weakness has been identified in itsourcecode Online Enrollment System 1.0.EPSS 0.6%Apr 2, 2026
- High8.8OpenSTAManager is an open source management software for technical assistance and invoicing.EPSS 0.8%Apr 2, 2026
- High8.8OpenSTAManager is an open source management software for technical assistance and invoicing.EPSS 0.5%Apr 2, 2026
- Low2.1A weakness has been identified in shsuishang modulithshop up to 829bac71f507e84684c782b9b062b8bf3b5585d6.EPSS 0.3%Apr 2, 2026
- High7.5An unauthenticated remote attacker can exploit an unauthenticated blind SQL Injection vulnerability in the mb24api endpoint due to improper neutralization of special e…EPSS 0.6%Apr 2, 2026
- Critical9.1An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the setinfo endpoint due to improper neutralization of special element…EPSS 0.6%Apr 2, 2026
- High7.5An unauthenticated remote attacker can exploit an unauthenticated SQL Injection vulnerability in the getinfo endpoint due to improper neutralization of special element…EPSS 0.6%Apr 2, 2026
- Medium5.5A vulnerability has been found in AlejandroArciniegas mcp-data-vis bc597e391f184d2187062fd567599a3cb72adf51/de5a51525a69822290eaee569a1ab447b490746d.EPSS 0.4%Apr 2, 2026
- High8.2Payload is a free and open source headless content management system.EPSS 0.4%Apr 1, 2026
- High8.7Hi.Events is an open-source event management and ticket selling platform.EPSS 0.6%Apr 1, 2026
- High7.3pandas-ai v3.0.0 was discovered to contain a SQL injection vulnerability via the pandasai.agent.base._execute_sql_query component.EPSS 0.3%Apr 1, 2026
- Medium6.9Improperly built order clauses lead to a SQL injection vulnerability in the articles webservice endpoint.EPSS 0.3%Apr 1, 2026
- Medium5.5A vulnerability has been found in code-projects Simple Laundry System 1.0.EPSS 0.6%Apr 1, 2026
- Medium5.5A flaw has been found in code-projects Simple Laundry System 1.0.EPSS 0.6%Apr 1, 2026
- High8.8IBM Storage Protect Server 8.2.0 IBM Storage Protect Plus Server is vulnerable to SQL injection.EPSS 0.3%Apr 1, 2026
- Medium5.5A weakness has been identified in itsourcecode Payroll Management System 1.0.EPSS 0.4%Apr 1, 2026
- Medium6.5The Booking for Appointments and Events Calendar - Amelia plugin for WordPress is vulnerable to SQL Injection via the parameter in the payments listing endpoint in all…EPSS 0.4%Apr 1, 2026