Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.7Easyndexer 1.0 contains an arbitrary file download vulnerability that allows unauthenticated attackers to download sensitive files by manipulating the file parameter.Check if you run itEPSS 0.61%Mar 6, 2026
- Medium6.9Data Center Audit 2.6.2 contains a cross-site request forgery vulnerability that allows attackers to reset administrator passwords without authentication by submitting…Check if you run itEPSS 0.13%Mar 6, 2026
- High8.8Alienor Web Libre 2.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code throug…Check if you run itEPSS 0.26%Mar 6, 2026
- Medium6.9ABC ERP 0.6.4 contains a cross-site request forgery vulnerability that allows attackers to modify administrator credentials by submitting forged requests to _configurar_perfil.php.Check if you run itEPSS 0.13%Mar 6, 2026
- High8.8Rmedia SMS 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to extract database information by injecting SQL code through the gid parameter.Check if you run itEPSS 0.25%Mar 6, 2026
- High8.8Pedidos 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the 'q' parameter.Check if you run itEPSS 0.30%Mar 6, 2026
- High8.8EdTv 2 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the 'id' parameter.Check if you run itEPSS 0.29%Mar 6, 2026
- High8.8DoceboLMS 1.2 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the id, idC, a…Check if you run itEPSS 0.14%Mar 6, 2026
- Medium5.3Precurio Intranet Portal 2.0 contains a cross-site request forgery vulnerability that allows unauthenticated attackers to create administrative user accounts by submit…Check if you run itEPSS 0.23%Mar 6, 2026
- High8.8Meneame English Pligg 5.8 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code th…Check if you run itEPSS 0.25%Mar 6, 2026
- High7.1Galaxy Forces MMORPG 0.5.8 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code thr…Check if you run itEPSS 0.25%Mar 6, 2026
- High8.7EverSync 0.5 contains an arbitrary file download vulnerability that allows unauthenticated attackers to access sensitive files by requesting them directly from the files directory.Check if you run itEPSS 0.28%Mar 6, 2026
- High8.8BitZoom 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the roll…Check if you run itEPSS 0.26%Mar 6, 2026
- Medium5.1QuickCMS is vulnerable to Cross-Site Request Forgery across multiple endpoints.Check if you run itEPSS 0.22%Mar 6, 2026
- High7.5The WooCommerce WordPress plugin from versions 5.4.0 to 10.5.2 does not properly handle batch requests, which could allow unauthenticated users to make a logged in adm…Check if you run itEPSS 0.19%Mar 6, 2026
- Medium4.6Gokapi is a self-hosted file sharing server with automatic expiration and encryption support.Check if you run itEPSS 0.09%Mar 6, 2026
- Medium5.4Gokapi is a self-hosted file sharing server with automatic expiration and encryption support.Check if you run itEPSS 0.15%Mar 6, 2026
- Medium5.0Gokapi is a self-hosted file sharing server with automatic expiration and encryption support.Check if you run itEPSS 0.18%Mar 6, 2026
- Critical9.0OneUptime is a solution for monitoring and managing online services.Check if you run itEPSS 0.40%Mar 6, 2026
- Medium6.5Kimai is a web-based multi-user time-tracking application.Check if you run itEPSS 0.48%Mar 6, 2026
- Medium6.4Gokapi is a self-hosted file sharing server with automatic expiration and encryption support.Check if you run itEPSS 0.16%Mar 6, 2026
- High8.1Internet Routing Registry daemon version 4 is an IRR database server, processing IRR objects in the RPSL format.Check if you run itEPSS 0.59%Mar 6, 2026
- High7.5Home-Gallery.org is a self-hosted open-source web gallery to browse personal photos and videos.Check if you run itEPSS 0.57%Mar 6, 2026
- Critical9.2Idno is a social publishing platform.Check if you run itEPSS 0.77%Mar 6, 2026
- Critical9.2TinyWeb is a web server (HTTP, HTTPS) written in Delphi for Win32.Check if you run itEPSS 0.60%Mar 6, 2026