Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8BitZoom 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the roll…Check if you run itEPSS 0.26%Mar 6, 2026
- High8.8Warranty Tracking System 11.06.3 contains an SQL injection vulnerability that allows attackers to execute arbitrary SQL queries by injecting malicious code through the…Check if you run itEPSS 0.23%Mar 6, 2026
- Medium5.7SiYuan is a personal knowledge management system.Check if you run itEPSS 0.50%Mar 6, 2026
- Medium6.9CocoIndex is a data transformation framework for AI.Check if you run itEPSS 0.52%Mar 6, 2026
- Critical9.3Ghostfolio is an open source wealth management software.Check if you run itEPSS 0.63%Mar 6, 2026
- High8.8Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts.Check if you run itEPSS 0.74%Mar 6, 2026
- Critical9.8WWBN AVideo is an open source video platform.Check if you run itEPSS 1.42%Mar 6, 2026
- Low2.1A vulnerability was detected in DefaultFuction Jeson Customer Relationship Management System 1.0.0.Check if you run itEPSS 0.35%Mar 6, 2026
- High8.8Frappe is a full-stack web application framework.Check if you run itEPSS 0.47%Mar 5, 2026
- Medium6.9OpenReplay is a self-hosted session replay suite.Check if you run itEPSS 0.51%Mar 5, 2026
- High8.6FreePBX is an open source IP PBX.Check if you run itEPSS 0.46%Mar 5, 2026
- High8.6FreePBX is an open source IP PBX.Check if you run itEPSS 0.56%Mar 5, 2026
- Medium6.5The Page and Post Clone plugin for WordPress is vulnerable to SQL Injection via the 'meta_key' parameter in the content_clone() function in all versions up to, and including, 6.3.Check if you run itEPSS 0.43%Mar 5, 2026
- Critical9.3Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in loopus WP Attractive Donations System - Easy Stripe & Paypal dona…Check if you run itEPSS 0.42%Mar 5, 2026
- High8.5Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Eagle-Themes Eagle Booking eagle-booking allows SQL Injection.Thi…Check if you run itEPSS 0.37%Mar 5, 2026
- High8.5Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Essekia Tablesome tablesome allows Blind SQL Injection.This issue…Check if you run itEPSS 0.37%Mar 5, 2026
- Critical9.3Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in don-themes Riode Core riode-core allows Blind SQL Injection.This…Check if you run itEPSS 0.40%Mar 5, 2026
- Medium4.9The Apocalypse Meow plugin for WordPress is vulnerable to SQL Injection via the 'type' parameter in all versions up to, and including, 22.1.0.Check if you run itEPSS 0.62%Mar 5, 2026
- Medium4.9A vulnerability in the REST API of Cisco Secure FMC Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system.Check if you run itEPSS 0.29%Mar 4, 2026
- High8.1A vulnerability in the web-based management interface of Cisco Secure FMC Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an…Check if you run itEPSS 0.35%Mar 4, 2026
- Medium6.5A vulnerability in the REST API of Cisco Secure FMC Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system.Check if you run itEPSS 0.34%Mar 4, 2026
- High8.8Ashop Shopping Cart Software contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through…Check if you run itEPSS 0.24%Mar 4, 2026
- High8.8FreeSMS 2.1.2 contains a boolean-based blind SQL injection vulnerability in the password parameter that allows unauthenticated attackers to bypass authentication by in…Check if you run itEPSS 0.46%Mar 4, 2026
- High7.1Tradebox 5.4 contains an SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code through the symbol parameter.Check if you run itEPSS 0.30%Mar 4, 2026
- High8.8NCrypted Jobgator contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the experi…Check if you run itEPSS 0.24%Mar 4, 2026