Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.9A vulnerability classified as critical has been found in SourceCodester Online Hotel Reservation System 1.0.Check if you run itEPSS 0.54%Aug 2, 2025
- Medium6.9A vulnerability was found in code-projects Wazifa System 1.0.Check if you run itEPSS 0.50%Aug 2, 2025
- Medium6.9A vulnerability was found in code-projects Wazifa System 1.0.Check if you run itEPSS 0.50%Aug 2, 2025
- Medium6.9A vulnerability was found in code-projects Online Farm System 1.0.Check if you run itEPSS 0.48%Aug 2, 2025
- Critical9.3A remote PHP code execution vulnerability exists in InstantCMS version 1.6 and earlier due to unsafe use of eval() within the search view handler.Check if you run itEPSS 3.14%Aug 1, 2025
- Critical9.3An unauthenticated arbitrary file upload vulnerability exists in Havalite CMS version 1.1.7 (and possibly earlier) in the upload.php script.Check if you run itEPSS 1.68%Aug 1, 2025
- Critical9.3An OS command injection vulnerability exists in various legacy D-Link routers—including DIR-300 rev B and DIR-600 (firmware ≤ 2.13 and ≤ 2.14b01, respectively)—due to improper inpuCheck this weekEPSS 16.87%Aug 1, 2025
- Critical9.3A SQL injection vulnerability has been found in Gandia Integra Total of TESI from version 2.1.2217.3 to v4.4.2236.1.Check if you run itEPSS 0.65%Aug 1, 2025
- Critical9.3A SQL injection vulnerability has been found in Gandia Integra Total of TESI from version 2.1.2217.3 to v4.4.2236.1.Check if you run itEPSS 0.65%Aug 1, 2025
- Medium6.9A vulnerability was found in projectworlds Online Admission System 1.0.Check if you run itEPSS 0.44%Aug 1, 2025
- Medium6.9A vulnerability was found in code-projects Online Movie Streaming 1.0.Check if you run itEPSS 0.41%Aug 1, 2025
- Medium6.9A vulnerability was found in code-projects Online Movie Streaming 1.0.Check if you run itEPSS 0.45%Aug 1, 2025
- Medium5.3A vulnerability was found in code-projects Document Management System 1.0 and classified as critical.Check if you run itEPSS 0.55%Aug 1, 2025
- Medium6.9A vulnerability has been found in PHPGurukul Boat Booking System 1.0 and classified as critical.Check if you run itEPSS 0.60%Aug 1, 2025
- Critical9.8Institute-of-Current-Students 1.0 is vulnerable to Incorrect Access Control in the mydetailsstudent.php endpoint.Check if you run itEPSS 0.38%Aug 1, 2025
- Medium6.1A stored Cross-Site Scripting (XSS) vulnerability exists in the qureydetails.php page of Institute-of-Current-Students 1.0, where the input fields for Query and Answer do not propeCheck if you run itEPSS 0.20%Aug 1, 2025
- Medium6.5A SQL Injection vulnerability exists in the takeassessment2.php file of CloudClassroom-PHP-Project 1.0.Check if you run itEPSS 0.26%Aug 1, 2025
- Critical9.3An OS command injection vulnerability exists in WebTester version 5.x via the install2.php installation script.Check this weekEPSS 13.40%Jul 31, 2025
- Critical9.2An unrestricted file upload vulnerability exists in Simple E-Document versions 3.0 to 3.1 that allows an unauthenticated attacker to bypass authentication by sending a specific cooCheck if you run itEPSS 1.90%Jul 31, 2025
- High8.7A code injection vulnerability exists in ProcessMaker Open Source versions 2.x when using the default 'neoclassic' skin.Check if you run itEPSS 2.32%Jul 31, 2025
- Critical9.3An unauthenticated SQL injection vulnerability exists in Kimai version 0.9.2.x via the db_restore.php endpoint.Check if you run itEPSS 1.96%Jul 31, 2025
- Critical9.3An unauthenticated arbitrary file upload vulnerability exists in FlashChat versions 6.0.2 and 6.0.4 through 6.0.8.Check if you run itEPSS 2.06%Jul 31, 2025
- Critical10.0ClipBucket version 2.6 and earlier contains a critical vulnerability in the ofc_upload_image.php script located at /admin_area/charts/ofc-library/.Check if you run itEPSS 4.07%Jul 31, 2025
- Critical9.5A vulnerability exists in OAstium VoIP PBX astium-confweb-2.1-25399 and earlier, where improper input validation in the logon.php script allows an attacker to bypass authenticationCheck if you run itEPSS 2.47%Jul 31, 2025
- Medium5.3A vulnerability, which was classified as critical, was found in Campcodes Online Hotel Reservation System 1.0.Check if you run itEPSS 0.52%Jul 31, 2025