Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8CMSsite 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'post' parameter.Check if you run itEPSS 0.40%Apr 5, 2026
- High8.8PilusCart 1.4.1 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'send' parameter.Check if you run itEPSS 0.38%Apr 5, 2026
- High8.7VA MAX 8.3.4 contains a remote code execution vulnerability that allows authenticated attackers to execute arbitrary commands by injecting shell metacharacters into th…Check if you run itEPSS 0.66%Apr 5, 2026
- High8.8qdPM 9.1 contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting SQL code through the search_by_extrafields[] parameter.Check if you run itEPSS 0.31%Apr 5, 2026
- High8.8News Website Script 2.0.5 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through th…Check if you run itEPSS 0.40%Apr 5, 2026
- High7.1SuiteCRM 7.10.7 contains a time-based SQL injection vulnerability in the record parameter of the Users module DetailView action that allows authenticated attackers to…Check if you run itEPSS 0.34%Apr 5, 2026
- High7.1SuiteCRM 7.10.7 contains a SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code through the parentTab parameter.Check if you run itEPSS 0.34%Apr 5, 2026
- High8.8ResourceSpace 8.6 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through th…Check if you run itEPSS 0.42%Apr 5, 2026
- Low2.1A security flaw has been discovered in Technostrobe HI-LED-WR120-G2 5.5.0.1R6.03.30.Check if you run itEPSS 0.27%Apr 5, 2026
- Medium5.3A vulnerability was detected in QingdaoU OnlineJudge up to 1.6.1.Check if you run itEPSS 0.35%Apr 5, 2026
- Medium5.5A vulnerability has been found in SourceCodester Student Result Management System 1.0.Check if you run itEPSS 0.32%Apr 5, 2026
- Medium5.3A flaw has been found in Ollama up to 0.18.1.Check if you run itEPSS 0.35%Apr 5, 2026
- Medium5.3Nodcms contains a cross-site request forgery vulnerability that allows attackers to perform unauthorized administrative actions by crafting malicious forms.Check if you run itEPSS 0.11%Apr 4, 2026
- Medium6.9Redaxo CMS 5.2 contains a cross-site request forgery vulnerability that allows unauthenticated attackers to create administrative user accounts by tricking authenticat…Check if you run itEPSS 0.15%Apr 4, 2026
- Medium6.9Snews CMS 1.7 contains a cross-site request forgery vulnerability that allows attackers to change administrator credentials without authentication by crafting malicious HTML forms.Check if you run itEPSS 0.16%Apr 4, 2026
- High7.2Web3.py 7.15.0 through 7.16.0 and 8.0.0b2 through 8.0.0 CCIP-Read SSRF BypassCheck if you run itEPSS 0.34%Apr 4, 2026
- Medium5.4Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS.Check if you run itEPSS 0.13%Apr 4, 2026
- Medium5.3Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS.Check if you run itEPSS 0.23%Apr 4, 2026
- High8.8Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS.Check if you run itEPSS 0.38%Apr 4, 2026
- Medium6.5Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS.Check if you run itEPSS 0.26%Apr 4, 2026
- Medium5.4Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS.Check if you run itEPSS 0.18%Apr 4, 2026
- High7.5nimiq/core-rs-albatross is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm.Check if you run itEPSS 0.63%Apr 3, 2026
- Critical9.1PraisonAI is a multi-agent teams system.Check if you run itEPSS 0.42%Apr 3, 2026
- High7.7PraisonAI is a multi-agent teams system.Check if you run itEPSS 0.35%Apr 3, 2026
- Medium6.5Emlog is an open source website building system.Check if you run itEPSS 0.56%Apr 3, 2026