Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.5A vulnerability was found in Shenzhen Ruiming Technology Streamax Crocus 1.3.44.Check if you run itEPSS 0.41%Mar 27, 2026
- Low2.1A security vulnerability has been detected in mingSoft MCMS up to 5.5.0.Check if you run itEPSS 0.32%Mar 27, 2026
- High8.8Group-Office is an enterprise customer relationship management and groupware tool.Check if you run itEPSS 0.46%Mar 27, 2026
- Critical9.1A chained attack via SQL Expressions and a Grafana Enterprise plugin can lead to a remote arbitrary code execution impact (RCE).Check if you run itEPSS 1.38%Mar 27, 2026
- High8.2Dovecot SQL based authentication can be bypassed when auth_username_chars is cleared by admin.Check if you run itEPSS 0.40%Mar 27, 2026
- High7.5Spring AI's spring-ai-neo4j-store contains a Cypher injection vulnerability in Neo4jVectorFilterExpressionConverter.Check if you run itEPSS 0.25%Mar 27, 2026
- Medium5.5A security vulnerability has been detected in Shenzhen Ruiming Technology Streamax Crocus up to 1.3.44.Check if you run itEPSS 0.41%Mar 27, 2026
- Medium5.5A security flaw has been discovered in code-projects Simple Laundry System 1.0.Check if you run itEPSS 0.57%Mar 27, 2026
- Medium6.5MobSF is a mobile application security testing tool used.Check if you run itEPSS 0.40%Mar 26, 2026
- Medium4.9InvenTree is an Open Source Inventory Management System.Check if you run itEPSS 0.38%Mar 26, 2026
- High7.2Ory Keto is am open source authorization server for managing permissions at scale.Check if you run itEPSS 0.29%Mar 26, 2026
- High7.7Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists.Check if you run itEPSS 0.46%Mar 26, 2026
- High7.7Daylight Studio FuelCMS v1.5.2 was discovered to contain a SQL injection vulnerability via the /controllers/Login.php component.Check if you run itEPSS 0.34%Mar 26, 2026
- High7.2Ory Hydra is an OAuth 2.0 Server and OpenID Connect Provider.Check if you run itEPSS 0.45%Mar 26, 2026
- High7.2Ory Kratos is an identity, user management and authentication system for cloud services.Check if you run itEPSS 0.34%Mar 26, 2026
- High8.1Kysely is a type-safe TypeScript SQL query builder.Check if you run itEPSS 0.45%Mar 26, 2026
- High8.1Kysely is a type-safe TypeScript SQL query builder.Check if you run itEPSS 0.45%Mar 26, 2026
- Low2.1A vulnerability was identified in itsourcecode Free Hotel Reservation System 1.0.Check if you run itEPSS 0.32%Mar 26, 2026
- High7.5The JS Help Desk – AI-Powered Support & Ticketing System plugin for WordPress is vulnerable to SQL Injection via the parameter in the function in all versions up to, a…Check if you run itEPSS 0.30%Mar 26, 2026
- High7.5HCL Aftermarket DPC is affected by SQL Injection which allows attacker to exploit this vulnerability to retrieve sensitive information from the database.Check if you run itEPSS 0.27%Mar 26, 2026
- High8.8OpenBiz Cubi Lite 3.0.8 contains a SQL injection vulnerability in the login form that allows unauthenticated attackers to manipulate database queries through the usern…Check if you run itEPSS 0.33%Mar 26, 2026
- High8.8qdPM 9.1 contains an SQL injection vulnerability that allows unauthenticated attackers to extract database information by injecting SQL code through filter_by parameters.Check if you run itEPSS 0.34%Mar 26, 2026
- High7.1Online Quiz Maker 1.0 contains SQL injection vulnerabilities in the catid and usern parameters that allow authenticated attackers to execute arbitrary SQL commands.Check if you run itEPSS 0.27%Mar 26, 2026
- High8.8KomSeo Cart 1.3 contains an SQL injection vulnerability that allows attackers to inject SQL commands through the 'my_item_search' parameter in edit.php.Check if you run itEPSS 0.24%Mar 26, 2026
- High8.8ASP.NET jVideo Kit 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to inject SQL commands through the 'query' parameter in the search…Check if you run itEPSS 0.27%Mar 26, 2026