Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.1A vulnerability in the web-based management interface of Cisco Secure FMC Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an…Check if you run itEPSS 0.36%Mar 4, 2026
- Medium6.5A vulnerability in the REST API of Cisco Secure FMC Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system.Check if you run itEPSS 0.34%Mar 4, 2026
- High8.8Ashop Shopping Cart Software contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through…Check if you run itEPSS 0.25%Mar 4, 2026
- High8.8FreeSMS 2.1.2 contains a boolean-based blind SQL injection vulnerability in the password parameter that allows unauthenticated attackers to bypass authentication by in…Check if you run itEPSS 0.47%Mar 4, 2026
- High7.1Tradebox 5.4 contains an SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code through the symbol parameter.Check if you run itEPSS 0.30%Mar 4, 2026
- High8.8NCrypted Jobgator contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the experi…Check if you run itEPSS 0.25%Mar 4, 2026
- Medium5.1Simple Job Script contains a cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating the job_type_value pa…Check if you run itEPSS 0.27%Mar 4, 2026
- High8.8Simple Job Script contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting malicious SQL code through the app_id parameter.Check if you run itEPSS 0.36%Mar 4, 2026
- High8.8Simple Job Script contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the employ…Check if you run itEPSS 0.31%Mar 4, 2026
- High8.8Simple Job Script contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the job_id parameter.Check if you run itEPSS 0.47%Mar 4, 2026
- High8.8Simple Job Script contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the landin…Check if you run itEPSS 0.38%Mar 4, 2026
- High8.7Multer is a node.js middleware for handling .Check if you run itEPSS 1.00%Mar 4, 2026
- Medium5.3Craft is a content management system (CMS).Check if you run itEPSS 0.30%Mar 4, 2026
- High7.1Craft is a content management system (CMS).Check if you run itEPSS 0.48%Mar 4, 2026
- Critical9.8An issue in the HwRwDrv.sys component of Nil Hardware Editor Hardware Read & Write Utility v1.25.11.26 and earlier allows attackers to execute arbitrary read and write…Check if you run itEPSS 0.68%Mar 4, 2026
- Medium5.32N Access Commander application version 3.4.2 and prior returns HTTP 500 Internal Server Error responses when receiving malformed or manipulated requests, indicating i…Check if you run itEPSS 0.20%Mar 4, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: romfs: check sb_set_blocksize() return value romfs_fill_super() ignores the return value of sb_set_…Check if you run itEPSS 0.20%Mar 4, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to avoid UAF in f2fs_write_end_io() As syzbot reported an use-after-free issue in f2fs_wr…Check if you run itEPSS 0.12%Mar 4, 2026
- Critical10.0Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel VulnerabilityPatch nowKEVEPSS 88.47%Mar 4, 2026
- Medium4.8In Concrete CMS below version 9.4.8, a stored cross-site scripting (XSS) vulnerability exists in the "Legacy Form" block.Check if you run itEPSS 0.28%Mar 4, 2026
- Medium4.8In Concrete CMS below version 9.4.8, a user with permission to edit a page with element Legacy form can perform a stored XSS attack towards high-privilege accounts via…Check if you run itEPSS 0.28%Mar 4, 2026
- High7.2The Post Grid Gutenberg Blocks for News, Magazines, Blog Websites – PostX plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and…Check if you run itEPSS 0.33%Mar 4, 2026
- High7.4HomeBox is a home inventory and organization system.Check if you run itEPSS 0.41%Mar 3, 2026
- Critical9.2Qwik is a performance focused javascript framework.Patch nowKEVEPSS 2.95%Mar 3, 2026
- High8.2Underscore.js is a utility-belt library for JavaScript.Check if you run itEPSS 1.05%Mar 3, 2026