Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Unknowntinyproxy_project tinyproxy Use After FreePatch nowKEVEPSS 63.08%Apr 6, 2026
- Unknownfit2cloud 1panel Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 0.97%Apr 6, 2026
- High8.8Kados R10 GreenBee contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting SQL code through the filter_user_mail parameter.Check if you run itEPSS 0.31%Apr 5, 2026
- High8.8Kados R10 GreenBee contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting SQL code through the id_project parameter.Check if you run itEPSS 0.31%Apr 5, 2026
- High8.8Kados R10 GreenBee contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting SQL code through the id_to_delete parameter.Check if you run itEPSS 0.31%Apr 5, 2026
- High8.8Kados R10 GreenBee contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the user2…Check if you run itEPSS 0.40%Apr 5, 2026
- High8.8Kados R10 GreenBee contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting SQL code through the 'id_to_modify' parameter.Check if you run itEPSS 0.31%Apr 5, 2026
- High8.8Kados R10 GreenBee contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting SQL code through the mng_profile_id parameter.Check if you run itEPSS 0.31%Apr 5, 2026
- High8.8Kados R10 GreenBee contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the menu_…Check if you run itEPSS 0.34%Apr 5, 2026
- Critical9.3Pegasus CMS 1.0 contains a remote code execution vulnerability in the extra_fields.php plugin that allows unauthenticated attackers to execute arbitrary commands by ex…Check if you run itEPSS 1.42%Apr 5, 2026
- High8.8OpenDocMan 1.3.4 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'where' parameter.Check if you run itEPSS 0.33%Apr 5, 2026
- Medium5.3CMSsite 1.0 contains a cross-site request forgery vulnerability that allows attackers to perform unauthorized administrative actions by crafting malicious HTML forms.Check if you run itEPSS 0.13%Apr 5, 2026
- High8.8Advance Gift Shop Pro Script 2.0.3 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting maliciou…Check if you run itEPSS 0.40%Apr 5, 2026
- High8.8C4G Basic Laboratory Information System 3.4 contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to execute arbitrary SQL commands by i…Check if you run itEPSS 0.27%Apr 5, 2026
- High8.8CMSsite 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'post' parameter.Check if you run itEPSS 0.40%Apr 5, 2026
- High8.8PilusCart 1.4.1 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'send' parameter.Check if you run itEPSS 0.38%Apr 5, 2026
- High8.7VA MAX 8.3.4 contains a remote code execution vulnerability that allows authenticated attackers to execute arbitrary commands by injecting shell metacharacters into th…Check if you run itEPSS 0.66%Apr 5, 2026
- High8.8qdPM 9.1 contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting SQL code through the search_by_extrafields[] parameter.Check if you run itEPSS 0.31%Apr 5, 2026
- High8.8News Website Script 2.0.5 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through th…Check if you run itEPSS 0.40%Apr 5, 2026
- High7.1SuiteCRM 7.10.7 contains a time-based SQL injection vulnerability in the record parameter of the Users module DetailView action that allows authenticated attackers to…Check if you run itEPSS 0.34%Apr 5, 2026
- High7.1SuiteCRM 7.10.7 contains a SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code through the parentTab parameter.Check if you run itEPSS 0.34%Apr 5, 2026
- High8.8ResourceSpace 8.6 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through th…Check if you run itEPSS 0.42%Apr 5, 2026
- Low2.1A security flaw has been discovered in Technostrobe HI-LED-WR120-G2 5.5.0.1R6.03.30.Check if you run itEPSS 0.27%Apr 5, 2026
- Medium5.3A vulnerability was detected in QingdaoU OnlineJudge up to 1.6.1.Check if you run itEPSS 0.35%Apr 5, 2026
- Medium5.5A vulnerability has been found in SourceCodester Student Result Management System 1.0.Check if you run itEPSS 0.32%Apr 5, 2026