Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.7Clinic Image System developed by Changing has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read database contents.Open the advisoryAug 29, 2025
- Low2.1A vulnerability has been found in Portabilis i-Educar up to 2.10.Open the advisoryAug 29, 2025
- Low2.1A flaw has been found in Portabilis i-Educar up to 2.10.Open the advisoryAug 29, 2025
- Low2.1A vulnerability was detected in Portabilis i-Educar up to 2.10.Open the advisoryAug 29, 2025
- Medium5.5A vulnerability was detected in itsourcecode Apartment Management System 1.0.Open the advisoryAug 29, 2025
- Medium5.5A security vulnerability has been detected in itsourcecode Apartment Management System 1.0.Open the advisoryAug 29, 2025
- Medium5.5A weakness has been identified in itsourcecode Apartment Management System 1.0.Open the advisoryAug 29, 2025
- Medium5.5A security flaw has been discovered in itsourcecode Apartment Management System 1.0.Open the advisoryAug 29, 2025
- Medium5.5A vulnerability was identified in itsourcecode Apartment Management System 1.0.Open the advisoryAug 29, 2025
- Medium5.5A vulnerability was determined in itsourcecode Sports Management System 1.0.Open the advisoryAug 29, 2025
- High8.5Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in purethemes Listeo Core listeo-core allows SQL Injection.This issu…Open the advisoryAug 28, 2025
- High8.5Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in scriptsbundle Exertio Framework exertio-framework allows Blind SQ…Open the advisoryAug 28, 2025
- Critical9.3Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WBW WooBeWoo Product Filter Pro allows SQL Injection.This issue a…Open the advisoryAug 28, 2025
- Critical10.0Sangoma FreePBX Authentication Bypass VulnerabilityPatch nowKEVEPSS 86.35%Aug 28, 2025
- Critical9.8Fortinet FortiWeb SQL Injection VulnerabilityPatch nowKEVEPSS 99.81%Jul 11, 2025
- High7.5Advantive VeraCore SQL Injection VulnerabilityPatch nowKEVEPSS 55.55%Feb 3, 2025
- Critical9.2Palo Alto Networks Expedition SQL Injection VulnerabilityPatch nowKEVEPSS 99.63%Oct 9, 2024
- Critical9.8Microsoft Configuration Manager SQL Injection VulnerabilityPatch nowKEVEPSS 81.04%Oct 8, 2024
- High7.2Ivanti Cloud Services Appliance (CSA) SQL Injection VulnerabilityPatch nowKEVEPSS 43.78%Oct 8, 2024
- Critical9.8Progress WhatsUp Gold SQL Injection VulnerabilityPatch nowKEVEPSS 93.00%Aug 29, 2024
- High8.8Ivanti Endpoint Manager (EPM) SQL Injection VulnerabilityPatch nowKEVEPSS 99.94%May 31, 2024
- Critical9.8Fortinet FortiClient EMS SQL Injection VulnerabilityPatch nowKEVEPSS 98.45%Mar 12, 2024
- High8.8F5 BIG-IP Configuration Utility SQL Injection VulnerabilityPatch nowKEVEPSS 4.47%Oct 26, 2023
- Critical9.8Progress MOVEit Transfer SQL Injection VulnerabilityPatch nowKEVEPSS 99.93%Jun 1, 2023
- Critical9.8In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the experimental back-sql backend to slapd, via a SQL statement within an LDAP query.Check this weekEPSS 64.49%May 4, 2022