Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5An unauthenticated remote attacker can exploit a Pre-Auth blind SQL Injection vulnerability in the userinfo endpoint’s authentication method due to improper neutraliza…Check if you run itEPSS 0.64%Mar 23, 2026
- Medium5.5A weakness has been identified in code-projects Simple Laundry System 1.0.Check if you run itEPSS 0.52%Mar 23, 2026
- Medium5.5A security flaw has been discovered in code-projects Simple Laundry System 1.0.Check if you run itEPSS 0.57%Mar 23, 2026
- Medium5.5A vulnerability was identified in code-projects Simple Laundry System 1.0.Check if you run itEPSS 0.57%Mar 23, 2026
- Low2.1A vulnerability was detected in SourceCodester Simple E-learning System 1.0.Check if you run itEPSS 0.32%Mar 23, 2026
- Low2.1A security vulnerability has been detected in SourceCodester Simple E-learning System 1.0.Check if you run itEPSS 0.32%Mar 23, 2026
- Low2.1A weakness has been identified in SourceCodester Sales and Inventory System 1.0.Check if you run itEPSS 0.37%Mar 23, 2026
- Low2.1A security flaw has been discovered in SourceCodester Sales and Inventory System 1.0.Check if you run itEPSS 0.37%Mar 23, 2026
- Low2.1A vulnerability was identified in SourceCodester Sales and Inventory System 1.0.Check if you run itEPSS 0.47%Mar 23, 2026
- Low2.1A vulnerability was determined in SourceCodester Sales and Inventory System 1.0.Check if you run itEPSS 0.37%Mar 23, 2026
- Low2.1A vulnerability was found in SourceCodester Sales and Inventory System 1.0.Check if you run itEPSS 0.35%Mar 23, 2026
- High7.5The WP Maps – Store Locator,Google Maps,OpenStreetMap,Mapbox,Listing,Directory & Filters plugin for WordPress is vulnerable to time-based SQL Injection via the ‘orderb…Check if you run itEPSS 0.51%Mar 23, 2026
- Low2.0A vulnerability has been found in code-projects Simple Gym Management System up to 1.0.Check if you run itEPSS 0.35%Mar 22, 2026
- Medium5.5A vulnerability was detected in projectworlds Online Notes Sharing System 1.0.Check if you run itEPSS 0.41%Mar 22, 2026
- Low2.1A vulnerability was detected in code-projects Simple Food Ordering System 1.0.Check if you run itEPSS 0.47%Mar 22, 2026
- Low1.9A security flaw has been discovered in apconw Aix-DB up to 1.2.3.Check if you run itEPSS 0.18%Mar 22, 2026
- High8.8i-doit CMDB 1.12 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the…Check if you run itEPSS 0.35%Mar 21, 2026
- High8.8phpTransformer 2016.9 contains an SQL injection vulnerability that allows remote attackers to execute arbitrary SQL queries by injecting malicious code through the idn…Check if you run itEPSS 0.38%Mar 21, 2026
- High8.8Kepler Wallpaper Script 1.1 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code…Check if you run itEPSS 0.34%Mar 21, 2026
- High8.8SimplePress CMS 1.0.7 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code throug…Check if you run itEPSS 0.34%Mar 21, 2026
- High7.1Green CMS 2.x contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code through the cat parameter.Check if you run itEPSS 0.34%Mar 21, 2026
- Low2.1A vulnerability was detected in vanna-ai vanna up to 2.0.2.Check if you run itEPSS 0.32%Mar 21, 2026
- Medium6.5The Pre* Party Resource Hints plugin for WordPress is vulnerable to SQL Injection via the 'hint_ids' parameter of the pprh_update_hints AJAX action in all versions up…Check if you run itEPSS 0.45%Mar 21, 2026
- High8.8The CMS Commander plugin for WordPress is vulnerable to SQL Injection via the 'or_blogname', 'or_blogdescription', and 'or_admin_email' parameters in all versions up t…Check if you run itEPSS 0.48%Mar 21, 2026
- Medium6.5The ElementCamp plugin for WordPress is vulnerable to time-based SQL Injection via the 'meta_query[compare]' parameter in the 'tcg_select2_search_post' AJAX action in…Check if you run itEPSS 0.24%Mar 21, 2026