Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.5The JetBooking plugin for WordPress is vulnerable to SQL Injection via the 'check_in_date' parameter in all versions up to, and including, 4.0.3.Check if you run itEPSS 0.48%Mar 11, 2026
- Medium5.5A vulnerability was determined in itsourcecode University Management System 1.0.Check if you run itEPSS 0.59%Mar 11, 2026
- High7.5The Appointment Booking Calendar — Simply Schedule Appointments Booking Plugin plugin for WordPress is vulnerable to blind SQL Injection in all versions up to, and inc…Check if you run itEPSS 0.41%Mar 11, 2026
- Low0.1An SQL injection vulnerability has been reported to affect Video Station.Check if you run itEPSS 0.14%Mar 11, 2026
- High8.7An authenticated SQL Injection vulnerability (CWE-89) exists in the Koha staff interface in the /cgi-bin/koha/suggestion/suggestion.pl endpoint due to improper validat…Check if you run itEPSS 0.59%Mar 11, 2026
- High7.5The WP Maps plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'location_id' parameter in all versions up to, and including, 4.9.1.Check if you run itEPSS 0.73%Mar 11, 2026
- High7.5The Ally – Web Accessibility & Usability plugin for WordPress is vulnerable to SQL Injection via the URL path in all versions up to, and including, 4.0.3.Patch nowKEVEPSS 2.33%Mar 11, 2026
- Medium5.3Sylius is an Open Source eCommerce Framework on Symfony.Check if you run itEPSS 0.34%Mar 10, 2026
- High7.5Sequelize is a Node.js ORM tool.Check if you run itEPSS 0.50%Mar 10, 2026
- High8.7Craft Commerce is an ecommerce platform for Craft CMS.Check if you run itEPSS 0.54%Mar 10, 2026
- High8.7Craft Commerce is an ecommerce platform for Craft CMS.Check if you run itEPSS 0.54%Mar 10, 2026
- Critical9.3Nefteprodukttekhnika BUK TS-G Gas Station Automation System 2.9.1 on Linux contains a SQL Injection vulnerability (CWE-89) in the system configuration module.Check if you run itEPSS 0.98%Mar 10, 2026
- High7.3Glances is an open-source system cross-platform monitoring tool.Check if you run itEPSS 0.43%Mar 10, 2026
- High8.8Improper neutralization of special elements used in an sql command ('sql injection') in SQL Server allows an authorized attacker to elevate privileges over a network.Check if you run itEPSS 1.03%Mar 10, 2026
- High7.5SQL Injection vulnerability in LimeSurvey before v.6.15.4+250710 allows a remote attacker to obtain sensitive information from the database.Check if you run itEPSS 0.49%Mar 10, 2026
- High7.2An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.…Check if you run itEPSS 0.46%Mar 10, 2026
- Medium6.4SAP NetWeaver Feedback Notifications Service contains a SQL injection vulnerability that allows an authenticated attacker to inject arbitrary SQL code through user-con…Check if you run itEPSS 0.34%Mar 10, 2026
- Medium5.5A flaw has been found in Tiandy Easy7 CMS Windows 7.17.0.Check if you run itEPSS 0.61%Mar 9, 2026
- High8.7A SQL injection vulnerability has been found in Eventobot.Check if you run itEPSS 0.33%Mar 9, 2026
- Low2.1A weakness has been identified in SourceCodester/janobe Resort Reservation System 1.0.Check if you run itEPSS 0.49%Mar 9, 2026
- Low2.1A vulnerability was determined in SourceCodester Sales and Inventory System 1.0.Check if you run itEPSS 0.49%Mar 9, 2026
- Low2.1A vulnerability was found in SourceCodester Sales and Inventory System 1.0.Check if you run itEPSS 0.49%Mar 9, 2026
- Low2.1A vulnerability has been found in SourceCodester Sales and Inventory System 1.0.Check if you run itEPSS 0.49%Mar 9, 2026
- Low2.1A flaw has been found in SourceCodester Sales and Inventory System 1.0.Check if you run itEPSS 0.49%Mar 9, 2026
- Low2.1A security flaw has been discovered in EasyCMS up to 1.6.Check if you run itEPSS 0.50%Mar 8, 2026