Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.9A vulnerability has been found in PHPGurukul Teachers Record Management System 2.1.Check this weekEPSS 43.00%Aug 14, 2025
- Medium6.9A vulnerability was identified in Campcodes Online Recruitment Management System 1.0.Check this weekEPSS 43.00%Aug 14, 2025
- Medium6.9A vulnerability was determined in projectworlds Visitor Management System 1.0.Check this weekEPSS 43.00%Aug 14, 2025
- Medium6.9A vulnerability was found in projectworlds Visitor Management System 1.0.Check this weekEPSS 41.00%Aug 14, 2025
- Medium6.9A vulnerability has been found in projectworlds Online Notes Sharing Platform 1.0.Check this weekEPSS 44.00%Aug 14, 2025
- Medium6.9A vulnerability was determined in 1000 Projects Sales Management System 1.0.Check this weekEPSS 52.00%Aug 14, 2025
- Unknownthememove unicamp Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')Patch nowKEVEPSS 0.49%Aug 14, 2025
- Critical10.0WeBid 1.0.2 contains a remote code injection vulnerability in the converter.php script, where unsanitized input in the to parameter of a POST request is written directly into incluCheck if you run itEPSS 2.46%Aug 13, 2025
- Critical10.0Traq versions 2.0 through 2.3 contain a remote code execution vulnerability in the admincp/common.php script.Check if you run itEPSS 2.30%Aug 13, 2025
- Critical10.0Snort Report versions < 1.3.2 contains a remote command execution vulnerability in the nmap.php and nbtscan.php scripts.Check if you run itEPSS 2.76%Aug 13, 2025
- High8.7S40 CMS v0.4.2 contains a path traversal vulnerability in its index.php page handler.Check if you run itEPSS 1.92%Aug 13, 2025
- High8.7PHP Volunteer Management System v1.0.2 contains an arbitrary file upload vulnerability in its document upload functionality.Check if you run itEPSS 1.52%Aug 13, 2025
- Critical10.0myBB version 1.6.4 was distributed with an unauthorized backdoor embedded in the source code.Check if you run itEPSS 2.85%Aug 13, 2025
- Medium6.9A vulnerability was found in SourceCodester COVID 19 Testing Management System 1.0.Check this weekEPSS 44.00%Aug 13, 2025
- Medium6.9A vulnerability has been found in itsourcecode Sports Management System 1.0.Check this weekEPSS 43.00%Aug 13, 2025
- Medium6.9A vulnerability was identified in Campcodes Online Water Billing System 1.0.Check this weekEPSS 43.00%Aug 13, 2025
- Medium6.9A vulnerability was determined in code-projects Job Diary 1.0.Check this weekEPSS 46.00%Aug 13, 2025
- Medium6.9A vulnerability was found in code-projects Job Diary 1.0.Check this weekEPSS 46.00%Aug 13, 2025
- Medium6.9A vulnerability has been found in code-projects Job Diary 1.0.Check this weekEPSS 46.00%Aug 13, 2025
- Medium4.8A vulnerability was found in Portabilis i-Educar up to 2.10.Check this weekEPSS 33.00%Aug 13, 2025
- Medium5.3A vulnerability was determined in Shanghai Lingdang Information Technology Lingdang CRM up to 8.6.5.4.Check this weekEPSS 35.00%Aug 13, 2025
- Critical9.8The Database for Contact Form 7, WPforms, Elementor forms plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.4.3 via deserializationCheck if you run itEPSS 1.30%Aug 13, 2025
- Critical9.8LatePoint WordPress Plugin Layout Parameter VulnerabilityPatch nowKEVEPSS 0.57%Aug 13, 2025
- Medium6.5A zip slip vulnerability in the /modules/ImportModule.php component of hortusfox-web v4.4 allows attackers to execute arbitrary code via a crafted archive.Check this weekEPSS 31.00%Aug 13, 2025
- Medium6.1A cross-site scripting (XSS) vulnerability in the TextBlockModule.php component of hortusfox-web v4.4 allows attackers to execute arbitrary web scripts or HTML via injecting a crafCheck this weekEPSS 31.00%Aug 13, 2025