Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application.Check if you run itEPSS 0.48%Mar 19, 2026
- Medium6.5SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application.Check if you run itEPSS 0.43%Mar 19, 2026
- High8.8Devome GRR v4.5.0 was discovered to contain multiple authenticated SQL injection vulnerabilities in the include/session.inc.php file via the referer and user-agent.Check if you run itEPSS 0.47%Mar 19, 2026
- High7.5The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin plugin for WordPress is vulnerable to SQL Injection via the 'fields' parameter in all ve…Check if you run itEPSS 0.53%Mar 19, 2026
- Critical9.3Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Cozmoslabs Profile Builder Pro allows Blind SQL Injection.This is…Check if you run itEPSS 0.42%Mar 19, 2026
- High7.2OpenProject is an open-source, web-based project management software.Check if you run itEPSS 0.46%Mar 18, 2026
- High8.8ClipBucket v5 is an open source video sharing platform.Check if you run itEPSS 0.52%Mar 18, 2026
- High8.8Microsoft Dynamics 365 Customer Engagement (on-premises) 1612 (9.0.2.3034) allows the generation of customized reports via raw SQL queries in an upload of a .rdl (Repo…Check if you run itEPSS 0.48%Mar 18, 2026
- Critical9.1Glances is an open-source system cross-platform monitoring tool.Check if you run itEPSS 0.42%Mar 18, 2026
- Critical9.8Mura before 10.1.14 allows beanFeed.cfc getQuery sortby SQL injection.Check if you run itEPSS 0.33%Mar 18, 2026
- Critical9.8Mura before 10.1.14 allows beanFeed.cfc getQuery sortDirection SQL injection.Check if you run itEPSS 0.27%Mar 18, 2026
- High8.8A critical SQL injection vulnerability in Spring AI's MariaDBFilterExpressionConverter allows attackers to bypass metadata-based access controls and execute arbitrary SQL commands.Check if you run itEPSS 0.53%Mar 18, 2026
- High8.4Kanboard is project management software focused on Kanban methodology.Check if you run itEPSS 0.40%Mar 18, 2026
- Medium6.5Cockpit is a headless content management system.Check if you run itEPSS 0.41%Mar 18, 2026
- High8.8The GLPI Inventory Plugin handles network discovery, inventory, software deployment, and data collection for GLPI agents.Check if you run itEPSS 0.40%Mar 18, 2026
- High8.8GLPI is a free Asset and IT management software package.Check if you run itEPSS 0.47%Mar 17, 2026
- Medium5.5A vulnerability was identified in code-projects Simple Food Order System 1.0.Check if you run itEPSS 0.59%Mar 17, 2026
- Medium5.4A flaw was found in the Katello plugin for Red Hat Satellite.Check if you run itEPSS 0.45%Mar 17, 2026
- High7.5The WowStore – Store Builder & Product Blocks for WooCommerce plugin for WordPress is vulnerable to SQL Injection via the ‘search’ parameter in all versions up to, and…Check if you run itEPSS 0.53%Mar 17, 2026
- Medium5.5A security vulnerability has been detected in Tiandy Easy7 Integrated Management Platform up to 7.17.0.Check if you run itEPSS 0.43%Mar 17, 2026
- Medium5.5A weakness has been identified in Tiandy Easy7 Integrated Management Platform 7.17.0.Check if you run itEPSS 0.43%Mar 17, 2026
- Medium5.5A security flaw has been discovered in Tiandy Easy7 Integrated Management Platform 7.17.0.Check if you run itEPSS 0.43%Mar 17, 2026
- High8.8Chamilo LMS is a learning management system.Check if you run itEPSS 0.49%Mar 16, 2026
- Critical9.3Chamilo LMS is a learning management system.Check if you run itEPSS 0.61%Mar 16, 2026
- High7.5SQL Injection vulnerability in Chyrp v.2.5.2 and before allows a remote attacker to obtain sensitive information via the Admin.php componentCheck if you run itEPSS 0.43%Mar 16, 2026