Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3A vulnerability, which was classified as problematic, has been found in Vinades NukeViet up to 4.5.06.Check if you run itEPSS 0.48%Aug 9, 2025
- Critical9.3XODA version 0.4.5 contains an unauthenticated file upload vulnerability that allows remote attackers to execute arbitrary PHP code on the server.Check if you run itEPSS 1.65%Aug 8, 2025
- Critical9.3WebPageTest version 2.6 and earlier contains an arbitrary file upload vulnerability in the resultimage.php script.Check if you run itEPSS 1.65%Aug 8, 2025
- Critical9.3WAN Emulator v2.3 contains two unauthenticated command execution vulnerabilities.Check if you run itEPSS 4.07%Aug 8, 2025
- High8.7Sflog! CMS 1.0 contains an authenticated arbitrary file upload vulnerability in the blog management interface.Check if you run itEPSS 1.43%Aug 8, 2025
- Critical9.3Project Pier 0.8.8 and earlier contains an unauthenticated arbitrary file upload vulnerability in tools/upload_file.php.Check if you run itEPSS 1.80%Aug 8, 2025
- Critical10.0MobileCartly version 1.0 contains an arbitrary file creation vulnerability in the savepage.php script.Check if you run itEPSS 1.89%Aug 8, 2025
- Critical9.3EGallery version 1.2 contains an unauthenticated arbitrary file upload vulnerability in the uploadify.php script.Check if you run itEPSS 1.65%Aug 8, 2025
- Critical10.0Cyclope Employee Surveillance Solution versions 6.x are vulnerable to a SQL injection flaw in its login mechanism.Check if you run itEPSS 1.33%Aug 8, 2025
- Critical9.3CuteFlow version 2.11.2 and earlier contains an arbitrary file upload vulnerability in the restart_circulation_values_write.php script.Check if you run itEPSS 1.88%Aug 8, 2025
- Critical9.3An unauthenticated remote command execution vulnerability exists in AjaXplorer (now known as Pydio Cells) versions prior to 2.6.Check if you run itEPSS 1.67%Aug 8, 2025
- UnknownMicro Focus acutoweb Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.77%Aug 7, 2025
- High8.8Hospital Management System v4 was discovered to contain a SQL injection vulnerability via the doctor_contact parameter in doctorsearch.php.Check if you run itEPSS 0.30%Aug 7, 2025
- High8.8Hospital Management System v4 was discovered to contain multiple SQL injection vulnerabilities in func3.php via the username1 and password2 parameters.Check if you run itEPSS 0.30%Aug 7, 2025
- Critical9.8Hospital Management System v4 was discovered to contain a SQL injection vulnerability via the app_contact parameter in appsearch.php.Check if you run itEPSS 0.35%Aug 7, 2025
- Medium6.1Hospital Management System v4 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities in func2.php via the fname and lname parameters.Check if you run itEPSS 0.20%Aug 7, 2025
- Critical9.8Hospital Management System v4 was discovered to contain multiple SQL injection vulnerabilities in contact.php via the txtname, txtphone, and txtmail parameters.Check if you run itEPSS 0.35%Aug 7, 2025
- Critical9.8Hospital Management System v4 was discovered to contain a SQL injection vulnerability via the password2 parameter in func.php.Check if you run itEPSS 0.35%Aug 7, 2025
- Critical9.8Hospital Management System v4 was discovered to contain multiple SQL injection vulnerabilities in func1.php via the username3 and password3 parameters.Check if you run itEPSS 0.35%Aug 7, 2025
- Critical9.8Hospital Management System v4 was discovered to contain a SQL injection vulnerability via the patient_contact parameter in patientsearch.php.Check if you run itEPSS 0.35%Aug 7, 2025
- High8.8Student Attendance Management System v1 was discovered to contain a SQL injection vulnerability via the username parameter at index.php.Check if you run itEPSS 0.30%Aug 7, 2025
- High8.8Student Attendance Management System v1 was discovered to contain a SQL injection vulnerability via the emailAddress parameter at createClassTeacher.php.Check if you run itEPSS 0.30%Aug 7, 2025
- High8.8Student Attendance Management System v1 was discovered to contain multiple SQL injection vulnerabilities in createStudents.php via the Id, firstname, and admissionNumber parametersCheck if you run itEPSS 0.30%Aug 7, 2025
- High8.8Student Attendance Management System v1 was discovered to contain multiple SQL injection vulnerabilities in createSessionTerm.php via the id, termId, and sessionName parameters.Check if you run itEPSS 0.30%Aug 7, 2025
- High8.8Student Attendance Management System v1 was discovered to contain multiple SQL injection vulnerabilities in createClassArms.php via the classId and classArmName parameters.Check if you run itEPSS 0.30%Aug 7, 2025