Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8Web Ofisi Rent a Car v3 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the…Check if you run itEPSS 0.28%Feb 22, 2026
- High8.8Web Ofisi Platinum E-Ticaret v5 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code thro…Check if you run itEPSS 0.39%Feb 22, 2026
- High8.8Web Ofisi Platinum E-Ticaret v5 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code thro…Check if you run itEPSS 0.39%Feb 22, 2026
- High8.8Web Ofisi Emlak V2 contains multiple SQL injection vulnerabilities in the endpoint that allow unauthenticated attackers to manipulate database queries through GET parameters.Check if you run itEPSS 0.46%Feb 22, 2026
- High8.8Web Ofisi Firma Rehberi v1 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through G…Check if you run itEPSS 0.51%Feb 22, 2026
- High8.8Web Ofisi Firma v13 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'oz'…Check if you run itEPSS 0.42%Feb 22, 2026
- High8.8Web Ofisi Emlak v2 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'ara'…Check if you run itEPSS 0.49%Feb 22, 2026
- High8.8Web Ofisi E-Ticaret v3 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'a' parameter.Check if you run itEPSS 0.42%Feb 22, 2026
- High8.8Dolibarr ERP/CRM 10.0.1 contains an SQL injection vulnerability in the elemid POST parameter of the viewcat.php endpoint that allows unauthenticated attackers to execu…Check if you run itEPSS 0.40%Feb 22, 2026
- High7.1Dolibarr ERP/CRM 10.0.1 contains multiple SQL injection vulnerabilities that allow authenticated attackers to manipulate database queries by injecting SQL code through…Check if you run itEPSS 0.32%Feb 22, 2026
- High8.8DIGIT CENTRIS ERP contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the datum1…Check if you run itEPSS 0.25%Feb 22, 2026
- High8.8Inventory Webapp contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through GET parameters.Check if you run itEPSS 0.25%Feb 22, 2026
- High8.8Web Wiz Forums 12.01 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the PF parameter.Check if you run itEPSS 0.40%Feb 22, 2026
- High8.8WebIncorp ERP contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the prod_id parameter.Check if you run itEPSS 0.25%Feb 22, 2026
- High8.8NoviSmart CMS contains an SQL injection vulnerability that allows remote attackers to execute arbitrary SQL queries by injecting malicious code through the Referer HTT…Check if you run itEPSS 0.28%Feb 22, 2026
- High8.8XOOPS CMS 2.5.9 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the cid parameter.Check if you run itEPSS 0.28%Feb 22, 2026
- High8.8Ashop Shopping Cart Software contains a time-based blind SQL injection vulnerability that allows attackers to manipulate database queries through the blacklistitemid parameter.Check if you run itEPSS 0.28%Feb 22, 2026
- High8.8microASP Portal+ CMS contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code into th…Check if you run itEPSS 0.37%Feb 22, 2026
- Medium5.5A vulnerability was found in code-projects Online Reviewer System 1.0.Check if you run itEPSS 0.60%Feb 22, 2026
- Medium5.5A vulnerability was determined in itsourcecode Vehicle Management System 1.0.Check if you run itEPSS 0.58%Feb 21, 2026
- Medium5.5A vulnerability was found in itsourcecode Agri-Trading Online Shopping System 1.0.Check if you run itEPSS 0.61%Feb 21, 2026
- High8.8ZoneMinder is a free, open source closed-circuit television software application.Check if you run itEPSS 0.57%Feb 21, 2026
- High8.8LabCollector 5.423 contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to execute arbitrary SQL commands by injecting malicious code t…Check if you run itEPSS 0.51%Feb 20, 2026
- High8.8Part-DB 0.4 contains an authentication bypass vulnerability that allows unauthenticated attackers to login by injecting SQL syntax into authentication parameters.Check if you run itEPSS 0.37%Feb 20, 2026
- High8.8delpino73 Blue-Smiley-Organizer 1.32 contains an SQL injection vulnerability in the datetime parameter that allows unauthenticated attackers to manipulate database queries.Check if you run itEPSS 0.28%Feb 20, 2026