Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8HCL Aftermarket DPC is affected by HTTP Response Splitting vulnerability where in depending on how the web application handles the split response, an attacker may be able to executCheck if you run itEPSS 0.34%Mar 26, 2026
- Medium5.3HCL Aftermarket DPC is affected by Banner Disclosure vulnerability where attackers gain insights into the system’s software and version details which would allow them to craft softCheck if you run itEPSS 0.24%Mar 26, 2026
- High8.8A flaw was found in Foreman.Check if you run itEPSS 1.96%Mar 26, 2026
- Medium4.3HCL Aftermarket DPC is affected by Cross Domain Script Include vulnerability where an attacker using external scripts can tamper with the DOM, altering the content or behavior of tCheck if you run itEPSS 0.24%Mar 26, 2026
- Medium4.3HCL Aftermarket DPC is affected by Cross-Origin Resource Sharing vulnerability.Check if you run itEPSS 0.19%Mar 26, 2026
- High8.1HCL Aftermarket DPC is affected by Admin Session Concurrency vulnerability using which an attacker can exploit concurrent sessions to hijack or impersonate an admin user.Check if you run itEPSS 0.23%Mar 26, 2026
- Medium5.3HCL Aftermarket DPC is affected by Internal IP Disclosure vulnerability will give attackers a clearer map of the organization’s network layout.Check if you run itEPSS 0.21%Mar 26, 2026
- Medium6.5HCL Aftermarket DPC is affected by Use of Vulnerable/Outdated Versions vulnerability using which an attacker may make use of the exploits available across the internet and craft atCheck if you run itEPSS 0.19%Mar 26, 2026
- Medium5.1Reflected Cross Site Scripting (XSS) vulnerabilities in GDTaller.Check if you run itEPSS 0.21%Mar 26, 2026
- Medium5.1Reflected Cross Site Scripting (XSS) vulnerabilities in GDTaller.Check if you run itEPSS 0.21%Mar 26, 2026
- Medium5.1A vulnerability was determined in itsourcecode Free Hotel Reservation System 1.0.Check if you run itEPSS 0.23%Mar 26, 2026
- High8.5Vulnerability related to an unquoted service path in Small HTTP Server 3.06.36, specifically affecting the executable located at 'C:\Program Files (x86)\shttps_mg\http.exe service'Check if you run itEPSS 0.16%Mar 26, 2026
- High7.1A flaw was found in GIMP.Check if you run itEPSS 0.66%Mar 26, 2026
- High8.8WebOfisi E-Ticaret 4.0 contains an SQL injection vulnerability in the 'urun' GET parameter of the endpoint that allows unauthenticated attackers to manipulate database queries.Check if you run itEPSS 0.28%Mar 26, 2026
- High8.8OpenBiz Cubi Lite 3.0.8 contains a SQL injection vulnerability in the login form that allows unauthenticated attackers to manipulate database queries through the username parameterCheck if you run itEPSS 0.34%Mar 26, 2026
- High8.8qdPM 9.1 contains an SQL injection vulnerability that allows unauthenticated attackers to extract database information by injecting SQL code through filter_by parameters.Check if you run itEPSS 0.35%Mar 26, 2026
- High7.1Online Quiz Maker 1.0 contains SQL injection vulnerabilities in the catid and usern parameters that allow authenticated attackers to execute arbitrary SQL commands.Check if you run itEPSS 0.28%Mar 26, 2026
- High8.8KomSeo Cart 1.3 contains an SQL injection vulnerability that allows attackers to inject SQL commands through the 'my_item_search' parameter in edit.php.Check if you run itEPSS 0.26%Mar 26, 2026
- High8.8ASP.NET jVideo Kit 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to inject SQL commands through the 'query' parameter in the search functionalitCheck if you run itEPSS 0.28%Mar 26, 2026
- High8.8Library CMS 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to bypass authentication by injecting SQL code through the username parameter.Check if you run itEPSS 0.56%Mar 26, 2026
- High8.8Online Store System CMS 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the email parCheck if you run itEPSS 0.35%Mar 26, 2026
- High8.8SAT CFDI 3.3 contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting SQL code through the 'id' parameter in the signIn endpoint.Check if you run itEPSS 0.26%Mar 26, 2026
- High7.1School Management System CMS 1.0 contains an SQL injection vulnerability in the admin login functionality that allows attackers to bypass authentication by injecting SQL code throuCheck if you run itEPSS 0.52%Mar 26, 2026
- High8.8Wecodex Hotel CMS 1.0 contains an SQL injection vulnerability in the admin login functionality that allows unauthenticated attackers to bypass authentication by injecting SQL code.Check if you run itEPSS 0.54%Mar 26, 2026
- High8.8Wecodex Restaurant CMS 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the username pCheck if you run itEPSS 0.49%Mar 26, 2026
Sort