Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.7Jettweb PHP Hazir Haber Sitesi Scripti V3 contains an authentication bypass vulnerability in the login.php administration panel that allows unauthenticated attackers to gain adminiCheck if you run itEPSS 1.26%Mar 12, 2026
- High8.8Jettweb PHP Hazir Haber Sitesi Scripti V3 contains an SQL injection vulnerability that allows attackers to inject malicious SQL commands through the kelime parameter in POST requesCheck if you run itEPSS 0.60%Mar 12, 2026
- High8.8Jettweb PHP Hazir Haber Sitesi Scripti V3 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code throughCheck if you run itEPSS 0.66%Mar 12, 2026
- High8.8Jettweb PHP Hazir Haber Sitesi Scripti V3 contains an SQL injection vulnerability that allows attackers to inject malicious SQL commands through the kelime parameter in POST requesCheck if you run itEPSS 0.39%Mar 12, 2026
- High8.8Jettweb PHP Hazir Haber Sitesi Scripti V3 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code throughCheck if you run itEPSS 0.43%Mar 12, 2026
- High8.8Jettweb PHP Hazir Haber Sitesi Scripti V2 contains an authentication bypass vulnerability in the administration panel that allows unauthenticated attackers to gain administrative aCheck if you run itEPSS 0.63%Mar 12, 2026
- High8.8XooDigital Latest contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'p' parameter.Check if you run itEPSS 0.36%Mar 12, 2026
- High8.8Jettweb Php Hazir Ilan Sitesi Scripti V2 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code throughCheck if you run itEPSS 0.42%Mar 12, 2026
- High8.8Jettweb Hazir Rent A Car Scripti V4 contains multiple SQL injection vulnerabilities in the admin panel that allow unauthenticated attackers to manipulate database queries through GCheck if you run itEPSS 0.48%Mar 12, 2026
- High8.8Jettweb PHP Hazir Rent A Car Sitesi Scripti V2 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code thCheck if you run itEPSS 0.42%Mar 12, 2026
- High8.8iScripts ReserveLogic contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the jqSearchDestinaCheck if you run itEPSS 0.37%Mar 12, 2026
- High7.1Clinic Pro contains a SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code through the month parameter.Check if you run itEPSS 0.38%Mar 12, 2026
- Medium5.1A vulnerability was detected in projectsend up to r1945.Check if you run itEPSS 0.50%Mar 12, 2026
- High8.7A security vulnerability has been detected in Tenda i12 1.0.0.6(2204).Check if you run itEPSS 0.65%Mar 12, 2026
- Critical9.1A vulnerability allowing an authenticated user with the Backup Administrator role to perform remote code execution (RCE) in high availability (HA) deployments of Veeam Backup & RepCheck if you run itEPSS 1.46%Mar 12, 2026
- High7.7A vulnerability allowing a low-privileged user to extract saved SSH credentials.Check if you run itEPSS 0.51%Mar 12, 2026
- Critical10.0A vulnerability allowing an authenticated domain user to perform remote code execution (RCE) on the Backup Server.Check if you run itEPSS 1.33%Mar 12, 2026
- High8.8A vulnerability allowing an authenticated domain user to bypass restrictions and manipulate arbitrary files on a Backup Repository.Check if you run itEPSS 0.59%Mar 12, 2026
- Critical10.0A vulnerability allowing an authenticated domain user to perform remote code execution (RCE) on the Backup Server.Check if you run itEPSS 1.29%Mar 12, 2026
- Critical10.0A vulnerability allowing an authenticated domain user to perform remote code execution (RCE) on the Backup Server.Check if you run itEPSS 1.29%Mar 12, 2026
- High8.7A weakness has been identified in Tenda i12 1.0.0.6(2204).Check if you run itEPSS 0.92%Mar 12, 2026
- High8.7A security flaw has been discovered in Tenda i12 1.0.0.6(2204).Check if you run itEPSS 0.88%Mar 12, 2026
- Critical9.4An improper sanitization of the compression_algorithm parameter in Canonical LXD allows an authenticated, unprivileged user to execute commands as the LXD daemon on the LXD serverCheck if you run itEPSS 0.77%Mar 12, 2026
- High7.3A flaw was found in Libsoup.Check if you run itEPSS 0.42%Mar 12, 2026
- Medium6.3Use of a custom token encoding algorithm in Streamsoft Prestiż software allows the value of the KSeF (Krajowy System e-Faktur) token to be guessed after analyzing how tokens with kCheck if you run itEPSS 0.29%Mar 12, 2026
Sort