Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.3Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Favethemes Houzez allows PHP Local File Inclusion.This issuCheck if you run itEPSS 0.27%Aug 28, 2025
- High8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in CocoBasic Neresa neresa-wp allows PHP Local File Inclusion.Check if you run itEPSS 0.53%Aug 28, 2025
- Medium6.1The WP ULike Pro plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the WP_Ulike_Pro_File_Uploader class in all versions up toCheck if you run itEPSS 0.21%Aug 28, 2025
- Medium6.5A SQL Injection vulnerability exists in the login.php of PuneethReddyHC Online Shopping System Advanced 1.0 due to improper sanitization of user-supplied input in the keyword POSTCheck if you run itEPSS 0.24%Aug 28, 2025
- Medium5.4A reflected Cross-Site Scripting (XSS) vulnerability exists in register.php of PuneethReddyHC Online Shopping System Advanced 1.0.Check if you run itEPSS 0.27%Aug 28, 2025
- Medium6.5A SQL Injection vulnerability exists in the product.php page of PuneethReddyHC Online Shopping System Advanced 1.0.Check if you run itEPSS 0.24%Aug 28, 2025
- Medium6.5A SQL Injection vulnerability exists in the action.php file of PuneethReddyHC Online Shopping System Advanced 1.0.Check if you run itEPSS 0.24%Aug 28, 2025
- Medium6.1A Reflected Cross-site Scripting (XSS) vulnerability exists in the themeSet.php file of ProjectsAndPrograms School Management System 1.0.Check if you run itEPSS 0.23%Aug 28, 2025
- Medium5.3A vulnerability was detected in Portabilis i-Educar up to 2.10.Check if you run itEPSS 0.40%Aug 27, 2025
- Medium6.9A weakness has been identified in Campcodes Payroll Management System 1.0.Check if you run itEPSS 0.53%Aug 27, 2025
- Medium6.9A vulnerability was identified in itsourcecode Apartment Management System 1.0.Check if you run itEPSS 0.42%Aug 27, 2025
- Medium6.9A security vulnerability has been detected in itsourcecode Apartment Management System 1.0.Check if you run itEPSS 0.42%Aug 27, 2025
- Medium6.9A security flaw has been discovered in itsourcecode Apartment Management System 1.0.Check if you run itEPSS 0.42%Aug 27, 2025
- Medium6.9A vulnerability was detected in itsourcecode Apartment Management System 1.0.Check if you run itEPSS 0.42%Aug 27, 2025
- Medium6.9A weakness has been identified in itsourcecode Apartment Management System 1.0.Check if you run itEPSS 0.42%Aug 27, 2025
- Medium6.9A vulnerability has been found in Campcodes Online Loan Management System 1.0.Check if you run itEPSS 0.42%Aug 27, 2025
- Medium6.9A flaw has been found in Campcodes Online Loan Management System 1.0.Check if you run itEPSS 0.48%Aug 27, 2025
- Medium6.9A vulnerability was detected in Campcodes Online Loan Management System 1.0.Check if you run itEPSS 0.42%Aug 27, 2025
- Medium6.9A security vulnerability has been detected in Campcodes Online Loan Management System 1.0.Check if you run itEPSS 0.44%Aug 27, 2025
- Medium6.9A weakness has been identified in Campcodes Online Loan Management System 1.0.Check if you run itEPSS 0.42%Aug 27, 2025
- High8.8In FoxCMS 1.2.6, there is a reflected Cross Site Scripting (XSS) vulnerability in /index.php/plus.Check if you run itEPSS 0.41%Aug 27, 2025
- Critical9.1OPNsense before 25.1.8 contains an authenticated command injection vulnerability in its Bridge Interface Edit endpoint (interfaces_bridge_edit.php).Check this weekEPSS 10.11%Aug 27, 2025
- Critical9.8SQL Injection vulnerability in AbanteCart 1.4.2, allows unauthenticated attackers to execute arbitrary SQL commands via the tmpl_id parameter to index.php.Check if you run itEPSS 0.45%Aug 27, 2025
- Critical9.8In RaspAP raspap-webgui 3.3.2 and earlier, a command injection vulnerability exists in the includes/hostapd.php script.Check if you run itEPSS 1.63%Aug 27, 2025
- Medium6.9A vulnerability was determined in Campcodes Online Water Billing System 1.0.Check if you run itEPSS 0.55%Aug 26, 2025