Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8OOP CMS BLOG 1.0 contains SQL injection vulnerabilities that allow unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through multiple parameterCheck if you run itEPSS 0.41%Mar 6, 2026
- Medium6.9eToolz 3.4.8.0 contains a denial of service vulnerability that allows local attackers to crash the application by supplying oversized input buffers.Check if you run itEPSS 0.14%Mar 6, 2026
- High8.8PlayJoom 0.10.1 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the catid parametCheck if you run itEPSS 0.27%Mar 6, 2026
- High8.8ServerZilla 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the email parameter.Check if you run itEPSS 0.32%Mar 6, 2026
- High8.8Nominas 0.27 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the username parametCheck if you run itEPSS 0.35%Mar 6, 2026
- High8.7Mongoose Web Server 6.9 contains a denial of service vulnerability that allows remote attackers to crash the service by establishing multiple socket connections.Check if you run itEPSS 0.39%Mar 6, 2026
- High7.1Facturation System 1.0 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code through the 'mod_id'Check if you run itEPSS 0.22%Mar 6, 2026
- Medium6.9Easyndexer 1.0 contains a cross-site request forgery vulnerability that allows unauthenticated attackers to create administrative accounts by submitting forged POST requests.Check if you run itEPSS 0.15%Mar 6, 2026
- High8.8Data Center Audit 2.6.2 contains an SQL injection vulnerability in the username parameter of dca_login.php that allows unauthenticated attackers to execute arbitrary SQL queries.Check if you run itEPSS 0.27%Mar 6, 2026
- High8.8Webiness Inventory 2.3 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the orderCheck if you run itEPSS 0.27%Mar 6, 2026
- High8.8Tina4 Stack 1.0.3 contains multiple vulnerabilities allowing unauthenticated attackers to access sensitive database files and execute SQL injection attacks.Check if you run itEPSS 0.39%Mar 6, 2026
- Medium6.9Tina4 Stack 1.0.3 contains a cross-site request forgery vulnerability that allows attackers to modify admin user credentials by submitting forged POST requests to the profile endpoCheck if you run itEPSS 0.16%Mar 6, 2026
- Medium6.9Surreal ToDo 0.6.1.2 contains a local file inclusion vulnerability that allows unauthenticated attackers to read arbitrary files by manipulating the content parameter.Check if you run itEPSS 0.92%Mar 6, 2026
- High8.8Silurus Classifieds Script 2.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through thCheck if you run itEPSS 0.27%Mar 6, 2026
- High8.7Musicco 2.0.0 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary directories by manipulating the parent parameter.Check if you run itEPSS 0.72%Mar 6, 2026
- High7.1Maitra 1.7.2 contains an sql injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code through the mailid parameter iCheck if you run itEPSS 0.22%Mar 6, 2026
- High8.8Gumbo CMS 0.99 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the language paramCheck if you run itEPSS 0.27%Mar 6, 2026
- High8.7Easyndexer 1.0 contains an arbitrary file download vulnerability that allows unauthenticated attackers to download sensitive files by manipulating the file parameter.Check if you run itEPSS 0.66%Mar 6, 2026
- Medium6.9Data Center Audit 2.6.2 contains a cross-site request forgery vulnerability that allows attackers to reset administrator passwords without authentication by submitting crafted POSTCheck if you run itEPSS 0.14%Mar 6, 2026
- High8.8Alive Parish 2.0.4 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the key parameCheck if you run itEPSS 0.23%Mar 6, 2026
- High8.8Alienor Web Libre 2.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the identifCheck if you run itEPSS 0.29%Mar 6, 2026
- Medium6.9ABC ERP 0.6.4 contains a cross-site request forgery vulnerability that allows attackers to modify administrator credentials by submitting forged requests to _configurar_perfil.php.Check if you run itEPSS 0.14%Mar 6, 2026
- High8.8Rmedia SMS 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to extract database information by injecting SQL code through the gid parameter.Check if you run itEPSS 0.27%Mar 6, 2026
- High8.8Pedidos 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the 'q' parameter.Check if you run itEPSS 0.33%Mar 6, 2026
- High8.8EdTv 2 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the 'id' parameter.Check if you run itEPSS 0.32%Mar 6, 2026
Sort