Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.1Use of Hard-coded Cryptographic KeyPatch nowKEVEPSS 1.02%Apr 16, 2026
- Medium6.5An issue in the Bluetooth Low Energy (BLE) control interface of the Yamaha SR-B30A sound bar firmware 2.40 (Mobile App: Sound Bar Remote / version: 2.40) allows remote…Check if you run itEPSS 0.28%Apr 16, 2026
- High7.1A Denial of Service (DoS) vulnerability exists in the Protobuf PHP library during the parsing of untrusted input.Check if you run itEPSS 0.34%Apr 16, 2026
- High8.2Zohocorp ManageEngine Log360 versions 13000 through 13013 are vulnerable to authentication bypass on certain actions due to improper filter configuration.Check if you run itEPSS 1.28%Apr 16, 2026
- Critical9.1SourceCodester Payroll Management and Information System v1.0 is vulnerable to SQL Injection in the file /payroll/view_employee.php.Check if you run itEPSS 0.33%Apr 16, 2026
- Medium4.7SourceCodester Payroll Management and Information System v1.0 is vulnerable to SQL Injection in the file /payroll/view_account.php?emp_id=.Check if you run itEPSS 0.22%Apr 16, 2026
- Critical9.8SourceCodester Vehicle Parking Area Management System v1.0 is vulnerable to SQL Injection in the file /parking/manage_park.php.Check if you run itEPSS 0.35%Apr 16, 2026
- High7.2SourceCodester Vehicle Parking Area Management System v1.0 is vulnerable to SQL Injection in the file /parking/manage_location.php.Check if you run itEPSS 0.26%Apr 16, 2026
- High7.2SourceCodester Vehicle Parking Area Management System v1.0 is vulnerable to SQL Injection in the file /parking/manage_user.php.Check if you run itEPSS 0.26%Apr 16, 2026
- High7.2SourceCodester Vehicle Parking Area Management System v1.0 is vulnerable to SQL Injection in the file /parking/view_parked_details.php.Check if you run itEPSS 0.26%Apr 16, 2026
- High7.2SourceCodester Vehicle Parking Area Management System v1.0 is vulnerable to SQL Injection in the file /parking/manage_category.php.Check if you run itEPSS 0.26%Apr 16, 2026
- Critical9.8SourceCodester Simple Music Cloud Community System v1.0 is vulnerable to SQL Injection in the file /music/edit_music.php.Check if you run itEPSS 0.27%Apr 16, 2026
- Critical9.8SourceCodester Simple Music Cloud Community System v1.0 is vulnerable to SQL Injection in the file /music/view_genre.php.Check if you run itEPSS 0.27%Apr 16, 2026
- Critical9.4SourceCodester Simple Music Cloud Community System v1.0 is vulnerable to SQL Injection in the file /music/view_user.php.Check if you run itEPSS 0.32%Apr 16, 2026
- High7.3SourceCodester Simple Music Cloud Community System v1.0 is vulnerable to SQL Injection in the file /music/view_playlist.php.Check if you run itEPSS 0.18%Apr 16, 2026
- High7.3SourceCodester Simple Music Cloud Community System v1.0 is vulnerable to SQL Injection in the file /music/view_music.php.Check if you run itEPSS 0.18%Apr 16, 2026
- Critical9.1@fastify/middie versions 9.3.1 and earlier are vulnerable to middleware bypass when the deprecated Fastify ignoreDuplicateSlashes option is enabled.Check if you run itEPSS 0.29%Apr 16, 2026
- High7.5A NULL pointer dereference vulnerability exists in fio (Flexible I/O Tester) v3.41 when parsing job files containing the fdp_pli option.Check if you run itEPSS 0.29%Apr 16, 2026
- High7.1An issue in the Forgot Password feature of Daylight Studio FuelCMS v1.5.2 allows unauthenticated attackers to obtain the password reset token of a victim user via a cr…Check if you run itEPSS 0.27%Apr 16, 2026
- Medium6.4The Email Encoder – Protect Email Addresses and Phone Numbers plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'eeb_mailto' shortcode in all v…Check if you run itEPSS 0.27%Apr 16, 2026
- Medium5.3@fastify/static versions 8.0.0 through 9.1.0 allow path traversal when directory listing is enabled via the list option.Check if you run itEPSS 0.53%Apr 16, 2026
- Critical9.1@fastify/middie versions 9.3.1 and earlier do not register inherited middleware directly on child plugin engine instances.Check if you run itEPSS 0.51%Apr 16, 2026
- High8.1Zohocorp ManageEngine PAM360 versions before 8531 and ManageEngine Password Manager Pro versions from 8600 to 13230 are vulnerable to Authenticated SQL injection in th…Check if you run itEPSS 1.42%Apr 16, 2026
- Medium5.3The Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder plugin for WordPress is vulnerable to Insecure Direct Object Reference via t…Check if you run itEPSS 0.32%Apr 16, 2026
- High7.5JWT Tokens used by tasks were exposed in logs.Check if you run itEPSS 0.75%Apr 16, 2026
Sort