Catalog

Findings

Filter the merged record by severity, source, stack, and weakness type.

SearchSeveritySourceStackWeaknessSort

Known exploited only

Reset

Critical9.9A vulnerability allowing a Backup Viewer to perform remote code execution (RCE) as the postgres user.CVE-2026-21708 · veeam · veeam backup & replication · NIST NVD · PostgreSQL, VeeamMar 12, 2026
High8.8Netartmedia Real Estate Portal 5.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code t…CVE-2019-25543 · netartmedia · real estate portal · NIST NVDMar 12, 2026
High8.8Netartmedia Real Estate Portal 5.0 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code th…CVE-2019-25542 · netartmedia · real estate portal · NIST NVDMar 12, 2026
High8.8Netartmedia PHP Mall 4.1 contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to manipulate database queries through unvalidated parameters.CVE-2019-25541 · netartmedia · php mall · NIST NVD · PHPMar 12, 2026
High8.8Netartmedia PHP Mall 4.1 contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to manipulate database queries by injecting SQL code thro…CVE-2019-25540 · netartmedia · php mall · NIST NVD · PHPMar 12, 2026
High8.8202CMS v10 beta contains a blind SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the log…CVE-2019-25539 · konradpl99 · 202cms · NIST NVDMar 12, 2026
High8.8202CMS v10 beta contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the log_user parameter.CVE-2019-25538 · konradpl99 · 202cms · NIST NVDMar 12, 2026
High8.8Netartmedia Event Portal 2.0 contains a time-based blind SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting…CVE-2019-25537 · NIST NVDMar 12, 2026
High8.8Netartmedia PHP Real Estate Agency 4.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting mali…CVE-2019-25536 · netartmedia · real estate portal · NIST NVDMar 12, 2026
High8.8Netartmedia PHP Dating Site contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through t…CVE-2019-25535 · NIST NVDMar 12, 2026
High8.8Netartmedia PHP Car Dealer contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code t…CVE-2019-25534 · NIST NVDMar 12, 2026
High8.8Netartmedia PHP Business Directory 4.2 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL co…CVE-2019-25533 · NIST NVDMar 12, 2026
High8.8Netartmedia Jobs Portal 6.1 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through…CVE-2019-25532 · NIST NVDMar 12, 2026
High8.8Netartmedia Deals Portal contains an SQL injection vulnerability in the Email parameter of loginaction.php that allows unauthenticated attackers to manipulate database queries.CVE-2019-25531 · NIST NVD · PHPMar 12, 2026
High8.8uHotelBooking System contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the sys…CVE-2019-25530 · NIST NVDMar 12, 2026
High7.1Placeto CMS Alpha rv.4 contains an SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code through the 'pa…CVE-2019-25529 · NIST NVDMar 12, 2026
High8.8Inout EasyRooms Ultimate Edition v1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL cod…CVE-2019-25528 · inoutscripts · inout homestay · NIST NVDMar 12, 2026
High8.8Inout EasyRooms Ultimate Edition v1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL cod…CVE-2019-25527 · inoutscripts · inout homestay · NIST NVDMar 12, 2026
High8.8Inout EasyRooms Ultimate Edition v1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL cod…CVE-2019-25526 · inoutscripts · inout homestay · NIST NVDMar 12, 2026
High8.8Inout EasyRooms Ultimate Edition v1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL cod…CVE-2019-25525 · inoutscripts · inout homestay · NIST NVDMar 12, 2026
High8.8XooGallery Latest contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'p' parameter.CVE-2019-25524 · xooscripts · xoogallery · NIST NVDMar 12, 2026
High8.8XooGallery Latest contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the cat_id parameter.CVE-2019-25523 · xooscripts · xoogallery · NIST NVDMar 12, 2026
High8.8XooGallery Latest contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to manipulate database queries by injecting SQL code through the…CVE-2019-25522 · xooscripts · xoogallery · NIST NVDMar 12, 2026
High8.8XooGallery Latest contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the gal_id parameter.CVE-2019-25521 · xooscripts · xoogallery · NIST NVDMar 12, 2026
High8.8Jettweb PHP Hazir Haber Sitesi Scripti V1 contains an authentication bypass vulnerability in the administration panel that allows unauthenticated attackers to gain adm…CVE-2019-25520 · jettweb · php stock news site script · NIST NVD · PHPMar 12, 2026