Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Unknownwpmanageninja ninja_tables Embedded Malicious CodePatch nowKEVEPSS 0.65%Aug 1, 2026
- UnknownEmbedded Malicious CodePatch nowKEVEPSS 0.67%Aug 1, 2026
- Critical9.8Ecommerce-project-with-php-and-mysqli-Fruits-Bazar 1.0 is vulnerable to SQL Injection in /show_price_by_pdtId.php.Check if you run itEPSS 0.39%Jul 30, 2026
- Critical9.3vBulletin vBulletin Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')Patch nowKEVEPSS 5.61%Jul 27, 2026
- UnknownImproper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 8.04%Jul 21, 2026
- Unknownphpbb phpbb Improper AuthenticationPatch nowKEVEPSS 2.89%Jul 20, 2026
- Unknownphpsysinfo phpsysinfo Exposure of Sensitive Information to an Unauthorized ActorPatch nowKEVEPSS 5.18%Jul 20, 2026
- UnknownCacti Cacti Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 88.79%Jul 6, 2026
- Unknowncreativethemes blocksy_companion Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 3.57%Jul 2, 2026
- UnknownUnrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 3.48%Jul 2, 2026
- Unknownberqier berqwp Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 0.96%Jun 23, 2026
- Critical10.0iCagenda Unrestricted Upload of File with Dangerous Type VulnerabilityPatch nowKEVEPSS 20.07%Jun 20, 2026
- UnknownImproper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')Patch nowKEVEPSS 0.94%Jun 19, 2026
- Unknowntheme-fusion avada_builder Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 3.01%Jun 18, 2026
- UnknownDrupal core - Critical - PHP object injection - SA-CORE-2026-005Check if you run itEPSS 0.35%Jun 17, 2026
- Critical10.0JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type VulnerabilityPatch nowKEVEPSS 88.51%Jun 15, 2026
- Critical10.0Widget Factory Joomla Content Editor Improper Access Control VulnerabilityPatch nowKEVEPSS 16.19%Jun 5, 2026
- Medium5.5A vulnerability was identified in ealpha072 Student-Management-System up to 01451bd7a2f58cdda07bd0b86e3967582e3ecd08.Check if you run itEPSS 0.40%Jun 3, 2026
- High8.4Concrete CMS below 9.5.3 is vulnerable to PHP Object Injection via unserialize() calls in the Workflow, Form block, and File/Set components that lack the allowed_class…Check if you run itEPSS 0.39%Jun 3, 2026
- Medium5.5A vulnerability was detected in SourceCodester Pizzafy E-Commerce System 1.0.Check if you run itEPSS 0.28%Jun 3, 2026
- Medium5.5A vulnerability was detected in SourceCodester Online Food Ordering System 2.0.Check if you run itEPSS 0.30%Jun 3, 2026
- High8.2QloApps through 1.7.0, fixed in commit 64e9722, contains a weak cryptographic algorithm vulnerability that allows attackers to compromise user credentials by exploitin…Check if you run itEPSS 0.27%Jun 2, 2026
- Low2.1A vulnerability has been found in SourceCodester Human Resource Management 1.0.Check if you run itEPSS 0.24%Jun 2, 2026
- Medium5.5A flaw has been found in code-projects Student Admission System 1.0.Check if you run itEPSS 0.27%Jun 2, 2026
- Medium5.5A security flaw has been discovered in DedeCMS 5.7.88.Check if you run itEPSS 0.31%Jun 2, 2026