Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.5A vulnerability was detected in itsourcecode College Management System 1.0.Check if you run itEPSS 0.62%Feb 25, 2026
- Low2.1A security vulnerability has been detected in itsourcecode College Management System 1.0.Check if you run itEPSS 0.49%Feb 25, 2026
- Low2.1A weakness has been identified in itsourcecode College Management System 1.0.Check if you run itEPSS 0.49%Feb 25, 2026
- Medium5.5A vulnerability was determined in SourceCodester Simple and Nice Shopping Cart Script 1.0.Check if you run itEPSS 0.62%Feb 25, 2026
- High7.1The SPIP interface_traduction_objets plugin versions prior to 2.2.2 contain an authenticated SQL injection vulnerability in interface_traduction_objets_pipelines.php.Check if you run itEPSS 0.57%Feb 25, 2026
- Critical9.3The SPIP referer_spam plugin versions prior to 1.3.0 contain an unauthenticated SQL injection vulnerability in the referer_spam_ajouter and referer_spam_supprimer action handlers.Check if you run itEPSS 0.75%Feb 25, 2026
- Medium5.5A weakness has been identified in itsourcecode News Portal Project 1.0.Check if you run itEPSS 0.61%Feb 25, 2026
- Medium5.5A security flaw has been discovered in itsourcecode News Portal Project 1.0.Check if you run itEPSS 0.61%Feb 25, 2026
- Medium5.5A vulnerability has been found in itsourcecode Document Management System 1.0.Check if you run itEPSS 0.61%Feb 25, 2026
- Critical9.3InSAT MasterSCADA BUK-TS is susceptible to SQL Injection through its main web interface.Check if you run itEPSS 0.56%Feb 24, 2026
- High8.8SummaryThis advisory addresses a SQL injection vulnerability in the API endpoint used for retrieving contact activities.Check if you run itEPSS 0.40%Feb 24, 2026
- Medium5.3Improper Neutralization of Special Elements used in a SQL Command ('SQL Injection') vulnerability in Apache Superset allows an authenticated user with read access to c…Check if you run itEPSS 0.65%Feb 24, 2026
- Medium5.3Apache Superset utilizes a configurable dictionary, DISALLOWED_SQL_FUNCTIONS, to restrict the execution of potentially sensitive SQL functions within SQL Lab and charts.Check if you run itEPSS 0.62%Feb 24, 2026
- Critical9.4A sandbox escape vulnerability exists in dotCMS’s Velocity scripting engine (VTools) that allows authenticated users with scripting privileges to bypass class and pack…Check if you run itEPSS 0.32%Feb 24, 2026
- Medium5.5A security vulnerability has been detected in itsourcecode Document Management System 1.0.Check if you run itEPSS 0.61%Feb 24, 2026
- Medium5.5A weakness has been identified in itsourcecode Document Management System 1.0.Check if you run itEPSS 0.61%Feb 24, 2026
- Medium6.9Pimcore is an Open Source Data & Experience Management Platform.Check if you run itEPSS 0.60%Feb 24, 2026
- Low2.1A security flaw has been discovered in a54552239 pearProjectApi up to 2.8.10.Check if you run itEPSS 0.54%Feb 24, 2026
- High7.5Ormar is a async mini ORM for Python.Check if you run itEPSS 0.71%Feb 24, 2026
- Medium5.5A security vulnerability has been detected in itsourcecode E-Logbook with Health Monitoring System for COVID-19 1.0.Check if you run itEPSS 0.61%Feb 24, 2026
- Medium5.5A vulnerability was detected in itsourcecode Event Management System 1.0.Check if you run itEPSS 0.61%Feb 24, 2026
- Critical9.3SQL injection vulnerability in Infoticketing.Check if you run itEPSS 0.34%Feb 23, 2026
- High8.3Zohocorp ManageEngine ADSelfService Plus versions 6522 and below are vulnerable to authenticated SQL Injection in the search report option.Check if you run itEPSS 7.89%Feb 23, 2026
- Critical9.8SQL Injection vulnerability in the /api/integrations/getintegrations endpoint of Order Up Online Ordering System 1.0 allows an unauthenticated attacker to access sensi…Check if you run itEPSS 0.38%Feb 23, 2026
- Low2.1A vulnerability was determined in Jinher OA C6 up to 20260210.Check if you run itEPSS 0.34%Feb 23, 2026