Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low2.7SourceCodester Online Employees Work From Home Attendance System v1.0 is vulnerable to SQL Injection in the file /wfh_attendance/admin/view_employee.php.Check if you run itEPSS 0.19%Apr 14, 2026
- Low2.7SourceCodester Online Employees Work From Home Attendance System v1.0 is vulnerable to SQL Injection in the file /wfh_attendance/admin/view_att.php.Check if you run itEPSS 0.19%Apr 14, 2026
- Low2.7Sourcecodester Storage Unit Rental Management System v1.0 is vulnerable to SQL in the file /storage/admin/maintenance/manage_pricing.php.Check if you run itEPSS 0.20%Apr 14, 2026
- Low2.7Sourcecodester Storage Unit Rental Management System v1.0 is vulnerable to SQL injection in the file /storage/admin/tenants/view_details.php.Check if you run itEPSS 0.19%Apr 14, 2026
- Low2.7SourceCodester Storage Unit Rental Management System v1.0 is vulnerable to SQL Injection in the file /storage/admin/rents/manage_rent.php.Check if you run itEPSS 0.19%Apr 14, 2026
- Low2.7SourceCodester Storage Unit Rental Management System v1.0 is vulnerable to SQL Injection in the file /storage/admin/maintenance/manage_storage_unit.php.Check if you run itEPSS 0.19%Apr 14, 2026
- Medium4.3Microsoft Windows Protection Mechanism Failure VulnerabilityPatch nowKEVEPSS 71.32%Apr 14, 2026
- Critical9.8An issue in Hostbill v.2025-11-24 and 2025-12-01 allows a remote attacker to execute arbitrary code and escalate privileges via the CSV registration fieldCheck if you run itEPSS 0.69%Apr 14, 2026
- Medium6.5A Local File Inclusion (LFI) vulnerability in the NFSen module (nfsen.inc.php) of LibreNMS 22.11.0-23-gd091788f2 allows authenticated attackers to include arbitrary PHP files fromCheck if you run itEPSS 0.28%Apr 14, 2026
- Critical9.8An issue pertaining to CWE-843: Access of Resource Using Incompatible Type was discovered in transloadit uppy v0.25.6.Check if you run itEPSS 0.46%Apr 14, 2026
- Medium4.6A side-channel vulnerability exists in the implementation of BIP-39 mnemonic processing, as observed in Trezor One v1.13.0 to v1.14.0, Trezor T v1.13.0 to v1.14.0, and Trezor SafeCheck if you run itEPSS 0.25%Apr 14, 2026
- Medium6.1In manikandan580 School-management-system 1.0, a reflected cross-site scripting (XSS) vulnerability exists in /studentms/admin/contact-us.php via the email POST parameter.Check if you run itEPSS 0.19%Apr 14, 2026
- Critical9.8A SQL injection vulnerability exists in the School Management System (version 1.0) by manikandan580.Check if you run itEPSS 0.55%Apr 14, 2026
- Critical9.8A vulnerability was identified in OpenAI Codex CLI v0.23.0 and before that enables code execution through malicious MCP (Model Context Protocol) configuration files.Check if you run itEPSS 6.92%Apr 14, 2026
- High7.5jq is a command-line JSON processor.Check if you run itEPSS 0.38%Apr 13, 2026
- Medium6.1The User Registration & Membership plugin for WordPress is vulnerable to Open Redirect in versions up to and including 5.1.4.Check if you run itEPSS 0.66%Apr 13, 2026
- High7.5Crypt::SecretBuffer versions before 0.019 for Perl is suseceptible to timing attacks.Check if you run itEPSS 0.41%Apr 13, 2026
- Medium6.9jq is a command-line JSON processor.Check if you run itEPSS 0.58%Apr 13, 2026
- Medium5.5A security flaw has been discovered in nocobase plugin-workflow-javascript up to 2.0.23.Check if you run itEPSS 0.30%Apr 13, 2026
- Medium5.5ImageMagick is free and open-source software used for editing and manipulating digital images.Check if you run itEPSS 0.18%Apr 13, 2026
- Medium5.5ImageMagick is free and open-source software used for editing and manipulating digital images.Check if you run itEPSS 0.19%Apr 13, 2026
- Medium5.5ImageMagick is free and open-source software used for editing and manipulating digital images.Check if you run itEPSS 0.19%Apr 13, 2026
- High7.5An Improper Input Validation vulnerability could allow a malicious actor with access to the UniFi Play network to cause the device to stop responding.Check if you run itEPSS 0.45%Apr 13, 2026
- Medium6.1jq is a command-line JSON processor.Check if you run itEPSS 0.18%Apr 13, 2026
- High7.0Mitgation of CVE-2026-4519 was incomplete.Check if you run itEPSS 0.29%Apr 13, 2026
Sort