Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.9A vulnerability was identified in D-Link DIR-852 up to 1.00CN B09.Check if you run itEPSS 1.01%Sep 8, 2025
- Medium5.1Reflected Cross-Site Scripting (XSS) vulnerability in WebWork, which allows remote attackers to execute arbitrary code through the 'q' and 'engine' request parameters in /search.Check this weekEPSS 52.00%Sep 8, 2025
- High8.4WeiPHP v5.0 and before is vulnerable to SQL Injection via the SucaiController.class.php file and the cancelTemplateeCheck this weekEPSS 20.00%Sep 8, 2025
- Medium5.3A weakness has been identified in itsourcecode POS Point of Sale System 1.0.Check this weekEPSS 40.00%Sep 7, 2025
- Medium5.3A security flaw has been discovered in itsourcecode POS Point of Sale System 1.0.Check this weekEPSS 40.00%Sep 7, 2025
- Medium5.3A vulnerability was identified in itsourcecode POS Point of Sale System 1.0.Check this weekEPSS 40.00%Sep 6, 2025
- Medium6.9A vulnerability was determined in itsourcecode Student Information Management System 1.0.Check this weekEPSS 43.00%Sep 6, 2025
- Medium5.3A vulnerability has been found in Khanakag-17 Library Management System up to 60ed174506094dcd166e34904a54288e5d10ff24.Check this weekEPSS 39.00%Sep 5, 2025
- Medium5.1A vulnerability was found in itsourcecode POS Point of Sale System 1.0.Check this weekEPSS 29.00%Sep 5, 2025
- Medium6.9A vulnerability has been found in PHPGurukul Online Course Registration 3.1.Check this weekEPSS 42.00%Sep 5, 2025
- High8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in gavias Indutri indutri allows PHP Local File Inclusion.ThisCheck this weekEPSS 59.00%Sep 5, 2025
- Medium5.3A security vulnerability has been detected in Portabilis i-Educar up to 2.10.Check if you run itEPSS 0.38%Sep 5, 2025
- High8.1The WordPress Helpdesk Integration plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 5.8.10 via the portal_type parameter.Check this weekEPSS 92.00%Sep 5, 2025
- High7.2The atec Debug plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation on the 'debug_path' parameter in all versions up to, and incluCheck this weekEPSS 92.00%Sep 4, 2025
- Medium5.3A vulnerability has been found in CodeAstro Real Estate Management System 1.0.Check this weekEPSS 49.00%Sep 4, 2025
- Medium5.3A flaw has been found in CodeAstro Real Estate Management System 1.0.Check this weekEPSS 49.00%Sep 4, 2025
- Medium5.1A vulnerability was detected in CodeAstro Real Estate Management System 1.0.Check this weekEPSS 29.00%Sep 4, 2025
- Medium5.1A security vulnerability has been detected in CodeAstro Real Estate Management System 1.0.Check this weekEPSS 24.00%Sep 4, 2025
- Medium5.4PHPGurukul Online Shopping Portal 2.1 is vulnerable to Cross Site Scripting (XSS) in /admin/updateorder.php.Check this weekEPSS 21.00%Sep 4, 2025
- High7.2An authenticated SQL injection vulnerability in VX Guestbook 1.07 allows attackers with admin access to inject malicious SQL payloads via the "word" POST parameter in the words.phpCheck this weekEPSS 40.00%Sep 4, 2025
- Medium6.9A vulnerability has been found in PHPGurukul Beauty Parlour Management System 1.1.Check this weekEPSS 44.00%Sep 3, 2025
- Medium6.9A flaw has been found in PHPGurukul Beauty Parlour Management System 1.1.Check this weekEPSS 44.00%Sep 3, 2025
- Medium6.9A security vulnerability has been detected in 1000projects Beauty Parlour Management System 1.0.Check this weekEPSS 46.00%Sep 3, 2025
- Medium4.8A weakness has been identified in code-projects Responsive Blog Site 1.0.Check this weekEPSS 31.00%Sep 3, 2025
- Medium6.9A security flaw has been discovered in projectworlds Travel Management System 1.0.Check this weekEPSS 44.00%Sep 3, 2025