Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3A vulnerability classified as critical has been found in code-projects Library System 1.0.Check this weekEPSS 39.00%Jul 10, 2025
- Medium5.3A vulnerability was found in code-projects Library System 1.0.Check this weekEPSS 39.00%Jul 10, 2025
- High8.6An unrestricted file upload vulnerability exists in ProcessMaker versions prior to 3.5.4 due to improper handling of uploaded plugin archives.Check if you run itEPSS 1.72%Jul 10, 2025
- Critical9.3An unauthenticated command injection vulnerability exists in VICIdial versions 2.9 RC1 through 2.13 RC1, within the vicidial_sales_viewer.php component when password encryption isCheck if you run itEPSS 1.64%Jul 10, 2025
- Medium6.9A vulnerability was found in code-projects LifeStyle Store 1.0.Check this weekEPSS 49.00%Jul 10, 2025
- Medium5.1A vulnerability has been found in SourceCodester Zoo Management System 1.0 and classified as problematic.Check this weekEPSS 29.00%Jul 10, 2025
- Medium6.1A cross-site scripting (XSS) vulnerability in the component /master/login.php of mpgram-web commit 94baadb allows attackers to execute arbitrary Javascript in the context of a userCheck this weekEPSS 27.00%Jul 10, 2025
- Medium6.9A vulnerability was found in Campcodes Payroll Management System 1.0.Check this weekEPSS 47.00%Jul 9, 2025
- Medium6.9A vulnerability was found in Campcodes Payroll Management System 1.0.Check this weekEPSS 47.00%Jul 9, 2025
- Medium6.9A vulnerability was found in Campcodes Payroll Management System 1.0 and classified as critical.Check this weekEPSS 47.00%Jul 9, 2025
- High7.5The SureForms – Drag and Drop Form Builder for WordPress plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.7.3 via the use of file_Check this weekEPSS 59.00%Jul 9, 2025
- High8.1The SureForms – Drag and Drop Form Builder for WordPress plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the delete_entry_Check if you run itEPSS 1.05%Jul 9, 2025
- Medium6.9A vulnerability has been found in Campcodes Payroll Management System 1.0 and classified as critical.Check this weekEPSS 47.00%Jul 9, 2025
- Medium6.9A vulnerability, which was classified as critical, was found in lty628 Aidigu up to 1.8.2.Check this weekEPSS 46.00%Jul 9, 2025
- Medium5.3A vulnerability was found in itsourcecode Insurance Management System up to 1.0.Check this weekEPSS 40.00%Jul 9, 2025
- Critical10.0An authentication bypass vulnerability exists in the WordPress Pie Register plugin ≤ 3.7.1.4 that allows unauthenticated attackers to impersonate arbitrary users by submitting a crCheck this weekEPSS 16.38%Jul 9, 2025
- Medium6.9A vulnerability was found in code-projects Jonnys Liquor 1.0.Check this weekEPSS 49.00%Jul 8, 2025
- High8.8The WoodMart plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 8.2.3 via the 'layout' attribute.Check this weekEPSS 54.00%Jul 8, 2025
- Medium4.8A vulnerability classified as problematic was found in SourceCodester Best Salon Management System 1.0.Check this weekEPSS 33.00%Jul 7, 2025
- Medium4.8A vulnerability was found in SourceCodester Best Salon Management System 1.0.Check this weekEPSS 33.00%Jul 7, 2025
- Medium5.3A vulnerability was found in SourceCodester Best Salon Management System 1.0.Check this weekEPSS 45.00%Jul 7, 2025
- Medium5.3A vulnerability was found in SourceCodester Best Salon Management System 1.0.Check this weekEPSS 45.00%Jul 7, 2025
- Critical9.8WeGIA is a web manager for charitable institutions.Check this weekEPSS 56.00%Jul 7, 2025
- Low2.0WeGIA is a web manager for charitable institutions.Check this weekEPSS 27.00%Jul 7, 2025
- Medium6.9A vulnerability, which was classified as critical, was found in Campcodes Online Recruitment Management System 1.0.Check this weekEPSS 49.00%Jul 7, 2025