Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.1PHPads 2.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the banne…Check if you run itEPSS 0.33%Mar 4, 2026
- High8.8Simple Job Script contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting malicious SQL code through the app_id parameter.Check if you run itEPSS 0.35%Mar 4, 2026
- High8.8Simple Job Script contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the employ…Check if you run itEPSS 0.30%Mar 4, 2026
- High8.8Simple Job Script contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the job_id parameter.Check if you run itEPSS 0.46%Mar 4, 2026
- High8.8Simple Job Script contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the landin…Check if you run itEPSS 0.37%Mar 4, 2026
- Critical9.8SQL Injection vulnerability in vran-dev databaseir v.1.0.7 and before allows a remote attacker to execute arbitrary code via the query parameter in the search API endpointCheck if you run itEPSS 0.80%Mar 4, 2026
- Critical9.8An issue in the HwRwDrv.sys component of Nil Hardware Editor Hardware Read & Write Utility v1.25.11.26 and earlier allows attackers to execute arbitrary read and write…Check if you run itEPSS 0.67%Mar 4, 2026
- High7.5The JS Help Desk – AI-Powered Support & Ticketing System plugin for WordPress is vulnerable to SQL Injection via the 'js-support-ticket-token-tkstatus' cookie in versi…Check if you run itEPSS 1.32%Mar 4, 2026
- Medium6.5The WP-Members Membership Plugin plugin for WordPress is vulnerable to SQL Injection via the 'order_by' attribute of the [wpmem_user_membership_posts] shortcode in all…Check if you run itEPSS 0.26%Mar 4, 2026
- Medium6.5The Email Subscribers by Icegram Express plugin for WordPress is vulnerable to SQL Injection via the 'workflow_ids' parameter in all versions up to, and including, 5.9…Check if you run itEPSS 0.37%Mar 4, 2026
- Low2.0A vulnerability was found in itsourcecode College Management System 1.0.Check if you run itEPSS 0.50%Mar 3, 2026
- Low2.0A vulnerability has been found in itsourcecode College Management System 1.0.Check if you run itEPSS 0.50%Mar 3, 2026
- High7.2Sourcecodester Logistic Hub Parcel's Management System v1.0 is vulnerable to SQL Injection in /manage_carrier.php.Check if you run itEPSS 0.44%Mar 3, 2026
- Low2.7Sourcecodester Logistic Hub Parcel's Management System v1.0 is vulnerable to SQL Injection in /manage_parcel_type.php.Check if you run itEPSS 0.34%Mar 3, 2026
- Low2.7Sourcecodester Pharmacy Point of Sale System v1.0 is vulnerable to SQL Injection in /pharmacy/manage_category.php.Check if you run itEPSS 0.34%Mar 3, 2026
- Low2.7Sourcecodester Pharmacy Point of Sale System v1.0 is vulnerable to SQL Injection in /pharmacy/manage_stock.php.Check if you run itEPSS 0.34%Mar 3, 2026
- Low2.7Sourcecodester Pharmacy Point of Sale System v1.0 is vulnerable to SQL Injection in /pharmacy/manage_supplier.php.Check if you run itEPSS 0.34%Mar 3, 2026
- Low2.7Sourcecodester Pharmacy Point of Sale System v1.0 is vulnerable to SQL Injection in /pharmacy/manage_product.php.Check if you run itEPSS 0.34%Mar 3, 2026
- High8.2Nokia IMPACT through 19.11.2.10-20210118042150283 allows an authenticated user to perform a Time-based Boolean Blind SQL Injection attack on the endpoint /ui/rest-prox…Check if you run itEPSS 0.24%Mar 3, 2026
- Low2.7Sourcecodester Online Men's Salon Management System v1.0 is vulnerable to SQL Injection in /admin/services/manage_service.php.Check if you run itEPSS 0.34%Mar 3, 2026
- Low2.7Sourcecodester Online Men's Salon Management System v1.0 is vulnerable to SQL Injection in /classes/Master.php?f=delete_service.Check if you run itEPSS 0.34%Mar 3, 2026
- Low2.7Sourcecodester Online Men's Salon Management System v1.0 is vulnerable to SQL Injection in /msms/admin/appointments/view_appointment.php.Check if you run itEPSS 0.34%Mar 3, 2026
- Low2.7Sourcecodester Online Men's Salon Management System v1.0 is vulnerable to SQL Injection in /msms/classes/Master.php?f=delete_appointment.Check if you run itEPSS 0.34%Mar 3, 2026
- Critical9.8renren-secuity before v5.5.0 is vulnerable to SQL Injection in the BaseServiceImpl.java componentCheck if you run itEPSS 0.41%Mar 3, 2026
- Medium6.5The LatePoint – Calendar Booking Plugin for Appointments and Events plugin for WordPress is vulnerable to SQL Injection via the JSON Import in all versions up to, and…Check if you run itEPSS 0.33%Mar 3, 2026