Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.3HAX CMS allows you to manage your microsite universe with PHP or NodeJs backends.Check this weekEPSS 53.00%Jul 26, 2025
- Medium5.3A vulnerability was found in code-projects Voting System 1.0 and classified as critical.Check this weekEPSS 41.00%Jul 26, 2025
- Medium6.9A vulnerability has been found in 1000 Projects ABC Courier Management System 1.0 and classified as critical.Check this weekEPSS 58.00%Jul 25, 2025
- Medium5.3A vulnerability, which was classified as critical, was found in itsourcecode Employee Management System 1.0.Check this weekEPSS 43.00%Jul 25, 2025
- Medium5.3A vulnerability, which was classified as critical, has been found in code-projects Document Management System 1.0.Check this weekEPSS 38.00%Jul 25, 2025
- Medium5.1A vulnerability was found in code-projects Church Donation System 1.0.Check this weekEPSS 36.00%Jul 25, 2025
- Medium6.9A vulnerability was found in code-projects Church Donation System 1.0.Check this weekEPSS 60.00%Jul 25, 2025
- Medium5.3A vulnerability was found in code-projects Food Review System 1.0 and classified as critical.Check this weekEPSS 55.00%Jul 25, 2025
- Medium5.3A vulnerability has been found in code-projects Public Chat Room 1.0 and classified as critical.Check this weekEPSS 44.00%Jul 25, 2025
- Critical10.0An unauthenticated SQL injection vulnerability exists in Pandora FMS version 5.0 SP2 and earlier.Check if you run itEPSS 2.47%Jul 25, 2025
- Critical9.3A remote code execution vulnerability exists in HybridAuth versions 2.0.9 through 2.2.2 due to insecure use of the install.php installation script.Check if you run itEPSS 2.49%Jul 25, 2025
- High8.7An authenticated remote code execution vulnerability exists in GetSimpleCMS version 3.2.1.Check if you run itEPSS 4.00%Jul 25, 2025
- Critical9.4A command injection vulnerability exists in the eScan Web Management Console version 5.5-2.Check if you run itEPSS 4.67%Jul 25, 2025
- Medium5.3A vulnerability was found in PHPGurukul Login and User Management System 3.3.Check this weekEPSS 48.00%Jul 25, 2025
- Medium5.3A vulnerability was found in PHPGurukul User Registration & Login and User Management 3.3.Check this weekEPSS 49.00%Jul 25, 2025
- Critical9.3A remote code execution vulnerability exists in Kaltura versions prior to 11.1.0-2 due to unsafe deserialization of user-controlled data within the keditorservices module.Check if you run itEPSS 2.21%Jul 23, 2025
- Critical9.3An unauthenticated OS command injection vulnerability exists within Xdebug versions 2.5.5 and earlier, a PHP debugging extension developed by Derick Rethans.Check if you run itEPSS 7.30%Jul 23, 2025
- Critical9.3oscommerce online_merchant Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 4.47%Jul 23, 2025
- Medium6.1The YANewsflash plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.3.Check this weekEPSS 13.00%Jul 23, 2025
- Medium4.3HAX CMS allows users to manage their microsite universe with a NodeJS or PHP backend.Check this weekEPSS 33.00%Jul 22, 2025
- Medium5.3A vulnerability was found in code-projects Food Ordering Review System 1.0.Check this weekEPSS 41.00%Jul 22, 2025
- Medium5.1A vulnerability classified as problematic has been found in code-projects Public Chat Room 1.0.Check this weekEPSS 37.00%Jul 22, 2025
- Medium6.9A vulnerability was found in code-projects Public Chat Room 1.0.Check this weekEPSS 60.00%Jul 22, 2025
- Medium5.3A vulnerability has been found in PHPGurukul Online Banquet Booking System 1.0 and classified as critical.Check this weekEPSS 50.00%Jul 21, 2025
- Medium5.1A vulnerability, which was classified as problematic, was found in PHPGurukul Online Banquet Booking System 1.0.Check this weekEPSS 36.00%Jul 21, 2025