Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.5A vulnerability was found in RashminDungrani online-banking up to 2337ad552ea9d385b4e07b90e6f32d011b7c68a2.Check if you run itEPSS 0.32%Dec 7, 2025
- Medium5.5A flaw has been found in Chanjet TPlus up to 20251121.Check if you run itEPSS 0.30%Dec 7, 2025
- Medium5.5A vulnerability was detected in Chanjet CRM up to 20251121.Check if you run itEPSS 0.30%Dec 7, 2025
- Low2.0A security flaw has been discovered in AMTT Hotel Broadband Operation System 1.0.Open the advisoryDec 5, 2025
- High7.5The My auctions allegro plugin for WordPress is vulnerable to SQL Injection via the ‘auction_id’ parameter in all versions up to, and including, 3.6.32 due to insuffic…Open the advisoryDec 5, 2025
- High8.7Advantech iView versions 5.7.05.7057 and prior do not properly sanitize SNMP v1 trap (Port 162) requests, which could allow an attacker to inject SQL commands.Open the advisoryDec 4, 2025
- Low2.0A vulnerability was determined in JIZHICMS up to 2.5.5.Open the advisoryDec 4, 2025
- Low2.0A vulnerability was found in JIZHICMS up to 2.5.5.Open the advisoryDec 4, 2025
- Medium6.5The Tag, Category, and Taxonomy Manager – AI Autotagger with OpenAI plugin for WordPress is vulnerable to time-based SQL Injection via the "getTermsForAjax" function i…Open the advisoryDec 3, 2025
- Medium4.9The FluentCart plugin for WordPress is vulnerable to SQL Injection via the 'groupKey' parameter in all versions up to, and including, 1.3.1.Open the advisoryDec 3, 2025
- Medium4.3An issue was discovered in 5.2 before 5.2.9, 5.1 before 5.1.15, and 4.2 before 4.2.27.Open the advisoryDec 2, 2025
- High8.6A Blind SQL injection vulnerability has been identified in QuickCMS.Open the advisoryDec 2, 2025
- Medium4.9The WP Directory Kit plugin for WordPress is vulnerable to SQL Injection via the 'search' parameter in all versions up to, and including, 1.4.6 due to insufficient esc…Open the advisoryDec 2, 2025
- High7.5The VikRentCar Car Rental Management System plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'month' parameter in all versions up to, and i…Open the advisoryDec 2, 2025
- Medium6.5The Visualizer: Tables and Charts Manager for WordPress plugin for WordPress is vulnerable to SQL Injection via the 'query' parameter in all versions up to, and includ…Open the advisoryDec 2, 2025
- Medium4.1The donation WordPress plugin through 1.0 does not sanitize and escape a parameter before using it in a SQL statement, allowing high privilege users, such as admin to…Open the advisoryDec 2, 2025
- High7.7The db-access WordPress plugin through 0.8.7 does not have authorization in an AJAX action, allowing any authenticated users, such as subscriber to perform SQLI attacksOpen the advisoryDec 2, 2025
- Medium5.1ChurchCRM is an open-source church management system.Open the advisoryDec 1, 2025
- Low2.1A vulnerability was determined in jsnjfz WebStack-Guns 1.0.Open the advisoryDec 1, 2025
- Medium5.5A vulnerability has been found in Chanjet CRM up to 20251106.Open the advisoryNov 30, 2025
- Low2.1A security flaw has been discovered in taosir WTCMS up to 01a5f68a3dfc2fdddb44eed967bb2d4f60487665.Open the advisoryNov 30, 2025
- Low2.1A vulnerability was determined in itsourcecode Student Information System 1.0.Open the advisoryNov 18, 2025
- Medium5.5A security flaw has been discovered in code-projects Simple Pizza Ordering System 1.0.Open the advisoryNov 18, 2025
- Low2.1A flaw has been found in WeiYe-Jing datax-web up to 2.1.2.Open the advisoryNov 16, 2025
- Medium5.5A weakness has been identified in SourceCodester Patients Waiting Area Queue Management System 1.0.Open the advisoryNov 16, 2025