Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low2.7Sourcecodester Online Resort Management System v1.0 is vulnerable to SQL injection in /orms/admin/rooms/view_room.php.Check if you run itEPSS 0.25%Apr 13, 2026
- Low2.7Sourcecodester Online Resort Management System v1.0 is vulnerable to SQL injection in /orms/admin/reservations/view_details.php.Check if you run itEPSS 0.19%Apr 13, 2026
- Low2.7Sourcecodester Cab Management System 1.0 is vulnerable to SQL Injection in the file /cms/admin/bookings/view_booking.php.Check if you run itEPSS 0.23%Apr 13, 2026
- Low2.7Sourcecodester Cab Management System v1.0 is vulnerable to SQL injection in the file /cms/admin/categories/view_category.php.Check if you run itEPSS 0.23%Apr 13, 2026
- Low2.7Sourcecodester Online Reviewer System v1.0 is vulnerable to SQL Injection in the file /system/system/admins/assessments/examproper/questions-view.php.Check if you run itEPSS 0.23%Apr 13, 2026
- Low2.7Sourcecodester Online Reviewer System v1.0 is vulnerale to SQL Injection in the file /system/system/admins/assessments/examproper/exam-update.php.Check if you run itEPSS 0.23%Apr 13, 2026
- Low2.7Sourcecodester Basic Library System v1.0 is vulnerable to SQL Injection in /librarysystem/load_student.php.Check if you run itEPSS 0.23%Apr 13, 2026
- Low2.7Sourcecodester Basic Library System v1.0 is vulnerable to SQL Injection in /librarysystem/load_admin.php.Check if you run itEPSS 0.23%Apr 13, 2026
- Low2.7Sourcecodester Basic Library System v1.0 is vulnerable to SQL Injection in /librarysystem/load_book.php.Check if you run itEPSS 0.23%Apr 13, 2026
- Medium5.8An issue was discovered in HAProxy before 3.3.6.Check if you run itEPSS 0.32%Apr 13, 2026
- Medium6.5An issue in the Bluetooth RFCOMM service of Parani M10 Motorcycle Intercom v2.1.3 allows unauthorized attackers to cause a Denial of Service (DoS) via supplying crafted RFCOMM framCheck if you run itEPSS 0.42%Apr 13, 2026
- High7.5A heap buffer overflow in the av_bprint_finalize() function of FFmpeg v8.0.1 allows attackers to cause a Denial of Service (DoS) via a crafted input.Check if you run itEPSS 0.46%Apr 13, 2026
- High7.5An improper resource deallocation and closure vulnerability in the tools/zmqsend.c component of FFmpeg v8.0.1 allows attackers to cause a Denial of Service (DoS) via supplying a crCheck if you run itEPSS 0.41%Apr 13, 2026
- High7.5An out-of-bounds read in the read_global_param() function (libavcodec/av1dec.c) of FFmpeg v8.0.1 allows attackers to cause a Denial of Service (DoS) via a crafted input.Check if you run itEPSS 0.35%Apr 13, 2026
- High8.8The endpoint in KubePlus 4.14 in the kubeconfiggenerator component is vulnerable to command injection.Check if you run itEPSS 2.22%Apr 13, 2026
- Medium6.2A stack overflow in the experimental/tinyobj_loader_opt.h file of tinyobjloader commit d56555b allows attackers to cause a Denial of Service (DoS) via supplying a crafted .mtl fileCheck if you run itEPSS 0.18%Apr 13, 2026
- Unknownmjdm majordomo Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 6.90%Apr 13, 2026
- Medium5.4Vtiger CRM 8.4.0 contains a reflected cross-site scripting (XSS) vulnerability in the MailManager module.Check if you run itEPSS 0.14%Apr 13, 2026
- High8.4Nitro PDF Pro for Windows 14.41.1.4 contains a heap use-after-free vulnerability in the implementation of the JavaScript method this.mailDoc().Check if you run itEPSS 0.21%Apr 13, 2026
- High7.5Nitro PDF Pro before 14.43 for Windows contains a NULL pointer dereference vulnerability in the JavaScript implementation of app.alert().Check if you run itEPSS 0.45%Apr 13, 2026
- High7.5A NULL pointer dereference in Nitro PDF Pro for Windows v14.41.1.4 allows attackers to cause a Denial of Service (DoS) via a crafted XFA packet.Check if you run itEPSS 0.46%Apr 13, 2026
- Medium5.4Cross-Site Scripting vulnerability in the Snipe-IT web-based asset management system v8.3.0 to up and including v8.3.1 allows authenticated attacker with lowest privileges sufficieCheck if you run itEPSS 0.24%Apr 13, 2026
- High8.8In Phpgurukul Online Course Registration v3.1, an arbitrary file upload vulnerability was discovered within the profile picture upload functionality on the /my-profile.php page.Check if you run itEPSS 0.32%Apr 13, 2026
- High8.7A vulnerability was detected in Tenda F451 1.0.0.7_cn_svn7958.Check if you run itEPSS 0.54%Apr 12, 2026
- High7.4A security flaw has been discovered in Tenda F451 1.0.0.7_cn_svn7958.Check if you run itEPSS 0.67%Apr 12, 2026
Sort