Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.9code-projects Simple Student Alumni System v1.0 is vulnerable to SQL Injection in /TracerStudy/modal_edit.php.Check if you run itEPSS 0.43%Mar 2, 2026
- Medium4.9code-projects Simple Student Alumni System v1.0 is vulnerable to SQL Injection in /TracerStudy/recordteacher_view.php?teacherID=.Check if you run itEPSS 0.43%Mar 2, 2026
- Critical9.3A Blind SQL injection vulnerability has been identified in DobryCMS.Check if you run itEPSS 0.47%Mar 2, 2026
- Medium6.9In the "CheckUnitCodeAndKey.pl" service, the "validateOrgUnit" function is vulnerable to SQL injection.Check if you run itEPSS 0.20%Mar 2, 2026
- High8.8SQL Injection vulnerability in "imageserver" module when processing C-FIND queries in CGM NETRAAD software allows attacker connected to PACS gaining access to database…Check if you run itEPSS 0.19%Mar 2, 2026
- Critical9.3A critical SQL Injection (SQLi) vulnerability has been identified in the authentication module of the system.Check if you run itEPSS 0.80%Mar 2, 2026
- Medium5.5A flaw has been found in itsourcecode University Management System 1.0.Check if you run itEPSS 0.59%Mar 2, 2026
- Medium5.5A security vulnerability has been detected in itsourcecode University Management System 1.0.Check if you run itEPSS 0.59%Mar 2, 2026
- Medium5.5A weakness has been identified in itsourcecode Society Management System 1.0.Check if you run itEPSS 0.59%Mar 2, 2026
- Medium5.5A vulnerability was found in projectworlds Online Art Gallery Shop 1.0.Check if you run itEPSS 0.59%Mar 2, 2026
- High8.8wpForo 2.4.14 contains an unauthenticated SQL injection vulnerability in Topics::get_topics() where the ORDER BY clause relies on ineffective esc_sql() sanitization on…Check if you run itEPSS 0.53%Feb 28, 2026
- High7.5Themeum tutor_lms Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.49%Feb 28, 2026
- Critical9.3openDCIM version 23.04, through commit 4467e9c4, contains a SQL injection vulnerability in Config::UpdateParameter.Check if you run itEPSS 1.58%Feb 27, 2026
- High7.1Group-Office is an enterprise customer relationship management and groupware tool.Check if you run itEPSS 0.47%Feb 27, 2026
- High8.8osCommerce 2.3.4.1 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the currency parameter.Check if you run itEPSS 0.34%Feb 27, 2026
- High8.8osCommerce 2.3.4.1 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the produc…Check if you run itEPSS 0.34%Feb 27, 2026
- High8.8osCommerce 2.3.4.1 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the review…Check if you run itEPSS 0.34%Feb 27, 2026
- High8.8Homey BNB V4 contains an SQL injection vulnerability in the administration panel login that allows unauthenticated attackers to bypass authentication by injecting SQL…Check if you run itEPSS 0.42%Feb 27, 2026
- High8.8Homey BNB V4 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'val' parameter.Check if you run itEPSS 0.33%Feb 27, 2026
- High8.8Homey BNB V4 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'pt' parameter.Check if you run itEPSS 0.33%Feb 27, 2026
- High8.8Homey BNB V4 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the catid parameter.Check if you run itEPSS 0.33%Feb 27, 2026
- High8.8Homey BNB V4 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'id' parameter.Check if you run itEPSS 0.33%Feb 27, 2026
- High8.8Homey BNB V4 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the hosting_id parameter.Check if you run itEPSS 0.41%Feb 27, 2026
- Critical9.8Blind SQL Injection via unsanitized array keys in Service Dependencies deletion.Check if you run itEPSS 0.51%Feb 27, 2026
- Critical9.3Pro3W CMS if vulnerable to SQL injection attacks.Check if you run itEPSS 0.55%Feb 27, 2026