Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Unknownweiphp weiphp Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 4.20%Jun 26, 2025
- UnknownImproper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 3.85%Jun 26, 2025
- Medium6.9A vulnerability was found in code-projects Inventory Management System 1.0.Check if you run itEPSS 0.48%Jun 25, 2025
- Medium5.3A vulnerability was found in code-projects Car Rental System 1.0 and classified as critical.Check if you run itEPSS 0.39%Jun 25, 2025
- Medium6.9A vulnerability has been found in code-projects Inventory Management System 1.0 and classified as critical.Check if you run itEPSS 0.48%Jun 25, 2025
- Medium6.9A vulnerability was found in code-projects Inventory Management System 1.0.Check if you run itEPSS 0.48%Jun 25, 2025
- Medium6.9A vulnerability was found in code-projects Inventory Management System 1.0.Check if you run itEPSS 0.48%Jun 25, 2025
- Medium5.1A vulnerability was found in itsourcecode Employee Management System up to 1.0.Check if you run itEPSS 0.40%Jun 25, 2025
- Critical9.1The ZoomSounds plugin before 6.05 contains a PHP file allowing unauthenticated users to upload an arbitrary file anywhere on the web server.Check if you run itEPSS 0.44%Jun 25, 2025
- Medium5.3A vulnerability was found in SourceCodester Best Salon Management System 1.0 and classified as critical.Check if you run itEPSS 0.45%Jun 25, 2025
- Medium5.3A vulnerability has been found in SourceCodester Best Salon Management System 1.0 and classified as critical.Check if you run itEPSS 0.45%Jun 25, 2025
- Medium5.3A vulnerability, which was classified as critical, was found in SourceCodester Best Salon Management System 1.0.Check if you run itEPSS 0.45%Jun 25, 2025
- Medium5.3A vulnerability, which was classified as critical, has been found in SourceCodester Best Salon Management System 1.0.Check if you run itEPSS 0.45%Jun 25, 2025
- Medium5.3A vulnerability classified as critical was found in SourceCodester Best Salon Management System 1.0.Check if you run itEPSS 0.45%Jun 25, 2025
- Medium5.3A vulnerability classified as critical has been found in SourceCodester Best Salon Management System 1.0.Check if you run itEPSS 0.45%Jun 25, 2025
- Medium5.1A vulnerability classified as problematic was found in PHPGurukul Hospital Management System 4.0.Check if you run itEPSS 0.33%Jun 25, 2025
- High7.5The Everest Forms (Pro) plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the delete_entry_files() function in all versionsCheck if you run itEPSS 0.68%Jun 25, 2025
- Medium5.3A vulnerability, which was classified as critical, was found in SourceCodester Best Salon Management System 1.0.Check if you run itEPSS 0.45%Jun 25, 2025
- High7.1SQL Injection vulnerability in Student Record system Using PHP and MySQL v.3.20 allows a remote attacker to obtain sensitive information via a crafted payload to the $cshortname, $Check if you run itEPSS 0.32%Jun 25, 2025
- High7.1A cross-site scripting (XSS) vulnerability in the component /Login.php of c3crm up to v3.0.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injecteCheck if you run itEPSS 0.32%Jun 25, 2025
- Medium5.3A vulnerability, which was classified as critical, has been found in SourceCodester Best Salon Management System 1.0.Check if you run itEPSS 0.45%Jun 24, 2025
- Medium5.3A vulnerability classified as critical was found in SourceCodester Best Salon Management System 1.0.Check if you run itEPSS 0.45%Jun 24, 2025
- Medium5.3A vulnerability, which was classified as critical, has been found in PHPGurukul Hospital Management System 4.0.Check if you run itEPSS 0.45%Jun 24, 2025
- Critical9.8os4ed opensis Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 1.95%Jun 24, 2025
- Medium5.1geoffrowland jmol Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.78%Jun 23, 2025