Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8Dolibarr ERP/CRM 10.0.1 contains an SQL injection vulnerability in the elemid POST parameter of the viewcat.php endpoint that allows unauthenticated attackers to execu…Check if you run itEPSS 0.43%Feb 22, 2026
- High8.8DIGIT CENTRIS ERP contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the datum1…Check if you run itEPSS 0.27%Feb 22, 2026
- High8.8Web Wiz Forums 12.01 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the PF parameter.Check if you run itEPSS 0.43%Feb 22, 2026
- High8.8WebIncorp ERP contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the prod_id parameter.Check if you run itEPSS 0.27%Feb 22, 2026
- High8.8NoviSmart CMS contains an SQL injection vulnerability that allows remote attackers to execute arbitrary SQL queries by injecting malicious code through the Referer HTT…Check if you run itEPSS 0.30%Feb 22, 2026
- High8.8XOOPS CMS 2.5.9 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the cid parameter.Check if you run itEPSS 0.30%Feb 22, 2026
- High8.8Ashop Shopping Cart Software contains a time-based blind SQL injection vulnerability that allows attackers to manipulate database queries through the blacklistitemid parameter.Check if you run itEPSS 0.31%Feb 22, 2026
- High8.8microASP Portal+ CMS contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code into th…Check if you run itEPSS 0.39%Feb 22, 2026
- Low2.1A weakness has been identified in JeecgBoot 3.9.0.Check if you run itEPSS 0.45%Feb 22, 2026
- Medium5.5A security flaw has been discovered in Tosei Online Store Management System ネット店舗管理システム 1.01.Check if you run itEPSS 8.09%Feb 22, 2026
- High7.4CollabPlatform is a full-stack, real-time doc collaboration platform.Check if you run itEPSS 0.22%Feb 21, 2026
- Low2.3OpenClaw is a personal AI assistant.Check if you run itEPSS 0.38%Feb 21, 2026
- Medium6.5Ray is an AI compute engine.Check if you run itEPSS 0.46%Feb 21, 2026
- Medium6.5The weMail - Email Marketing, Lead Generation, Optin Forms, Email Newsletters, A/B Testing, and Automation plugin for WordPress is vulnerable to unauthorized form dele…Check if you run itEPSS 0.30%Feb 21, 2026
- High7.7Wallos is an open-source, self-hostable personal subscription tracker.Check if you run itEPSS 0.49%Feb 21, 2026
- Medium5.5A vulnerability was found in itsourcecode Agri-Trading Online Shopping System 1.0.Check if you run itEPSS 0.66%Feb 21, 2026
- Medium6.3Werkzeug is a comprehensive WSGI web application library.Check if you run itEPSS 0.61%Feb 21, 2026
- High8.2Feathersjs is a framework for creating web APIs and real-time applications with TypeScript or JavaScript.Check if you run itEPSS 0.46%Feb 21, 2026
- High7.1OpenSift is an AI study tool that sifts through large datasets using semantic search and generative AI.Check if you run itEPSS 0.35%Feb 21, 2026
- High7.1GetSimple CMS is a content management system.Check if you run itEPSS 0.20%Feb 21, 2026
- Medium5.3phpMoAdmin 1.1.5 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating the collection parameter.Check if you run itEPSS 0.29%Feb 20, 2026
- Medium5.3phpMoAdmin 1.1.5 contains a cross-site request forgery vulnerability that allows attackers to perform unauthorized database operations by crafting malicious requests.Check if you run itEPSS 0.38%Feb 20, 2026
- Medium5.1OrientDB 3.0.17 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting crafted JSON payloads to the do…Check if you run itEPSS 0.27%Feb 20, 2026
- Medium5.1OrientDB 3.0.17 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by creating users with script payl…Check if you run itEPSS 0.29%Feb 20, 2026
- Medium5.3OrientDB 3.0.17 GA Community Edition contains cross-site request forgery vulnerabilities that allow attackers to perform unauthorized actions by crafting malicious req…Check if you run itEPSS 0.15%Feb 20, 2026