Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.7Spatie Laravel Media Library before version 11.23.0 contains a file upload restriction bypass in FileAdder::defaultSanitizer().Check if you run itEPSS 0.75%May 29, 2026
- Medium5.3Spatie Laravel Media Library before version 11.23.0 contains a server-side request forgery vulnerability that allows remote attackers to cause the server to issue arbi…Check if you run itEPSS 0.42%May 29, 2026
- High7.5FreeScout is a free help desk and shared inbox built with PHP's Laravel framework.Check if you run itEPSS 0.19%May 29, 2026
- Medium5.3FreeScout is a free help desk and shared inbox built with PHP's Laravel framework.Check if you run itEPSS 0.34%May 29, 2026
- Medium5.4Statamic is a Laravel and Git powered content management system (CMS).Check if you run itEPSS 0.24%May 29, 2026
- High7.2The template upload feature in Emlog Pro v2.6.9 has a path traversal vulnerability, allowing authenticated administrators to execute arbitrary PHP code.Check if you run itEPSS 1.10%May 29, 2026
- Medium6.1SourceCodester Doctor Appointment System 1.0 is vulnerable to Cross Site Scripting (XSS) due to improper handling of user supplied input in the user registration funct…Check if you run itEPSS 0.26%May 29, 2026
- High8.8The Open ISES Project 3.30A contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code…Check if you run itEPSS 0.27%May 29, 2026
- High8.8The Open ISES Project 3.30A contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code…Check if you run itEPSS 0.33%May 29, 2026
- High8.8The Open ISES Project 3.30A contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code…Check if you run itEPSS 0.33%May 29, 2026
- High8.8The Open ISES Project 3.30A contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code…Check if you run itEPSS 0.33%May 29, 2026
- High8.8The Open ISES Project 3.30A contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code…Check if you run itEPSS 0.33%May 29, 2026
- High8.8The Open ISES Project 3.30A contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code…Check if you run itEPSS 0.33%May 29, 2026
- High8.8The Open ISES Project 3.30A contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code…Check if you run itEPSS 0.33%May 29, 2026
- Medium6.9PHP-SHOP 1.0 contains a cross-site request forgery vulnerability that allows unauthenticated attackers to add administrative users by crafting malicious HTML forms.Check if you run itEPSS 0.16%May 29, 2026
- High8.8Kados R10 GreenBee contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through t…Check if you run itEPSS 0.33%May 29, 2026
- High8.8Kados R10 GreenBee contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through t…Check if you run itEPSS 0.33%May 29, 2026
- High7.1Navigate CMS 2.8.5 contains a path traversal vulnerability that allows authenticated users to download arbitrary files by injecting directory traversal sequences in th…Check if you run itEPSS 0.56%May 29, 2026
- High7.1MaxOn ERP Software 8.x-9.x contains an SQL injection vulnerability that allows authenticated users to execute arbitrary SQL queries through the nomor, user, and jenis…Check if you run itEPSS 0.27%May 29, 2026
- High8.7HaPe PKH 1.1 fails to enforce authorization on its record deletion endpoints, allowing unauthenticated attackers to delete arbitrary records by sending a crafted reque…Check if you run itEPSS 0.33%May 29, 2026
- High8.8HaPe PKH 1.1 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'desa' POST…Check if you run itEPSS 0.33%May 29, 2026
- High8.8HaPe PKH 1.1 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'nama_kelom…Check if you run itEPSS 0.33%May 29, 2026
- High8.7HaPe PKH 1.1 contains an arbitrary file upload vulnerability that allows authenticated attackers to upload malicious files by bypassing file type validation.Check if you run itEPSS 0.52%May 29, 2026
- Medium6.9HaPe PKH 1.1 contains a cross-site request forgery vulnerability that allows attackers to change administrator passwords by submitting forged requests to the user update endpoint.Check if you run itEPSS 0.18%May 29, 2026
- High8.8HaPe PKH 1.1 contains multiple SQL injection vulnerabilities in admin/media.php that allow attackers to manipulate database queries by injecting SQL code through the '…Check if you run itEPSS 0.33%May 29, 2026