Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Unknowncar_rental_management_system_project car_rental_management_system Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 4.56%Sep 14, 2026
- Unknowncar_rental_management_system_project car_rental_management_system Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 4.56%Sep 14, 2026
- UnknownNagios Nagios XI Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 42.05%Sep 14, 2026
- UnknownNagios Nagios XI Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 42.05%Sep 14, 2026
- UnknownStellarWP the_events_calendar Deserialization of Untrusted DataPatch nowKEVEPSS 1.47%Sep 12, 2026
- Unknowncomsenz duomicms Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 1.26%Sep 11, 2026
- UnknownImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.39%Sep 10, 2026
- UnknownImproper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')Patch nowKEVEPSS 0.59%Sep 10, 2026
- Unknownsensiolabs symfony Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Patch nowKEVEPSS 63.60%Sep 10, 2026
- UnknownImproper AuthenticationPatch nowKEVEPSS 2.91%Sep 9, 2026
- Unknownpickplugins comboblocks Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 0.45%Sep 4, 2026
- Unknowndeconf analytics_insights URL Redirection to Untrusted Site ('Open Redirect')Patch nowKEVEPSS 1.25%Sep 1, 2026
- UnknownUnauthenticated PHP Object Injection to Remote Code Execution on GiveWPPatch nowKEVEPSS 2.25%Aug 28, 2026
- UnknownThemeum tutor_lms Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Patch nowKEVEPSS 0.62%Aug 28, 2026
- Critical9.3rConfig Core 8.0.0 before 8.2.10 contains an authentication bypass vulnerability that allows unauthenticated attackers to self-register accounts with full Administrato…Check if you run itEPSS 0.77%Aug 24, 2026
- Critical9.3phpIPAM before 1.8.2 contains an authentication bypass vulnerability in the REST API that allows unauthenticated attackers to gain full API access by exploiting an ins…Check if you run itEPSS 0.64%Aug 24, 2026
- High8.2YOURLS is a self-hosted, customizable URL shortener written in PHP.Check if you run itEPSS 0.43%Aug 21, 2026
- High8.6Joomla Extension - j2commerce.com - Stored XSS in Guest checkout in J2Store 1.0.0-3.3.20, 4.0.0-4.0.20, 4.1.0-4.1.5 - J2Commerce 4.1.5 is vulnerable to Stored Cross-Si…Check if you run itEPSS 0.52%Aug 21, 2026
- High7.3Combodo iTop is a web based IT service management tool.Check if you run itEPSS 0.37%Aug 21, 2026
- UnknownMiniOrange saml_sp_single_sign_on Improper AuthenticationPatch nowKEVEPSS 1.88%Aug 21, 2026
- UnknownUnrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 0.83%Aug 21, 2026
- UnknownSPIP SPIP Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 2.29%Aug 20, 2026
- Unknownmotopress restaurant_menu Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')Patch nowKEVEPSS 0.47%Aug 18, 2026
- Unknownpodsfoundation pods Incorrect AuthorizationPatch nowKEVEPSS 3.52%Aug 15, 2026
- UnknownDeserialization of Untrusted DataPatch nowKEVEPSS 0.56%Aug 4, 2026