Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.4WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions.Check this weekEPSS 54.00%Aug 12, 2025
- Medium5.1savg-sanitizer is a PHP SVG/XML sanitizer.Check this weekEPSS 45.00%Aug 12, 2025
- Critical9.1Kanboard is project management software that focuses on the Kanban methodology.Check this weekEPSS 94.00%Aug 12, 2025
- High8.1The WooCommerce Purchase Orders plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the delete_file() function in all versionsCheck this weekEPSS 86.00%Aug 12, 2025
- Critical9.3Auxilium RateMyPet contains an unauthenticated arbitrary file upload vulnerability in upload_banners.php.Check if you run itEPSS 1.65%Aug 11, 2025
- Critical9.3PhpTax version 0.8 contains a remote code execution vulnerability in drawimage.php.Check if you run itEPSS 1.71%Aug 11, 2025
- Medium5.3A vulnerability was identified in code-projects eBlog Site 1.0.Check this weekEPSS 35.00%Aug 11, 2025
- Medium6.9A vulnerability classified as critical has been found in code-projects Online Medicine Guide 1.0.Check this weekEPSS 44.00%Aug 10, 2025
- Medium5.1A vulnerability, which was classified as problematic, has been found in Portabilis i-Educar up to 2.9.Check this weekEPSS 32.00%Aug 9, 2025
- Medium5.1A vulnerability classified as problematic was found in Portabilis i-Educar up to 2.9.Check this weekEPSS 32.00%Aug 9, 2025
- Medium5.3A vulnerability, which was classified as problematic, has been found in Vinades NukeViet up to 4.5.06.Check this weekEPSS 48.00%Aug 9, 2025
- Critical9.3XODA version 0.4.5 contains an unauthenticated file upload vulnerability that allows remote attackers to execute arbitrary PHP code on the server.Check if you run itEPSS 1.65%Aug 8, 2025
- Critical9.3WebPageTest version 2.6 and earlier contains an arbitrary file upload vulnerability in the resultimage.php script.Check if you run itEPSS 1.65%Aug 8, 2025
- Critical9.3WAN Emulator v2.3 contains two unauthenticated command execution vulnerabilities.Check if you run itEPSS 4.07%Aug 8, 2025
- High8.7Sflog! CMS 1.0 contains an authenticated arbitrary file upload vulnerability in the blog management interface.Check if you run itEPSS 1.43%Aug 8, 2025
- Critical9.3Project Pier 0.8.8 and earlier contains an unauthenticated arbitrary file upload vulnerability in tools/upload_file.php.Check if you run itEPSS 1.80%Aug 8, 2025
- Critical10.0MobileCartly version 1.0 contains an arbitrary file creation vulnerability in the savepage.php script.Check if you run itEPSS 1.89%Aug 8, 2025
- Critical9.3EGallery version 1.2 contains an unauthenticated arbitrary file upload vulnerability in the uploadify.php script.Check if you run itEPSS 1.65%Aug 8, 2025
- Critical10.0Cyclope Employee Surveillance Solution versions 6.x are vulnerable to a SQL injection flaw in its login mechanism.Check if you run itEPSS 1.33%Aug 8, 2025
- Critical9.3CuteFlow version 2.11.2 and earlier contains an arbitrary file upload vulnerability in the restart_circulation_values_write.php script.Check if you run itEPSS 1.88%Aug 8, 2025
- Critical9.3An unauthenticated remote command execution vulnerability exists in AjaXplorer (now known as Pydio Cells) versions prior to 2.6.Check if you run itEPSS 1.67%Aug 8, 2025
- UnknownMicro Focus acutoweb Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.77%Aug 7, 2025
- High8.8Hospital Management System v4 was discovered to contain a SQL injection vulnerability via the doctor_contact parameter in doctorsearch.php.Check if you run itEPSS 0.30%Aug 7, 2025
- High8.8Hospital Management System v4 was discovered to contain multiple SQL injection vulnerabilities in func3.php via the username1 and password2 parameters.Check if you run itEPSS 0.30%Aug 7, 2025
- Critical9.8Hospital Management System v4 was discovered to contain a SQL injection vulnerability via the app_contact parameter in appsearch.php.Check if you run itEPSS 0.35%Aug 7, 2025