Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.9A vulnerability was found in PHPGurukul Directory Management System 2.0.Check if you run itEPSS 0.56%May 15, 2025
- Medium5.3A vulnerability was found in PHPGurukul/Campcodes Cyber Cafe Management System 1.0.Check if you run itEPSS 0.50%May 15, 2025
- Medium5.3A vulnerability was found in PHPGurukul/Campcodes Cyber Cafe Management System 1.0.Check if you run itEPSS 0.46%May 15, 2025
- Critical9.8The TicketBAI Facturas para WooCommerce plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation via the 'delpdf' action in all versioCheck if you run itEPSS 1.22%May 15, 2025
- Medium5.1A SQL Injection vulnerability in WebERP v4.15.2 allows attackers to execute arbitrary SQL commands and extract sensitive data by injecting a crafted payload into the ReportID and RCheck if you run itEPSS 0.26%May 15, 2025
- Critical9.8An error-based SQL Injection (SQLi) vulnerability in WebERP v4.15.2 allows attackers to execute arbitrary SQL command and extract sensitive data by injecting a crafted payload intoCheck if you run itEPSS 0.52%May 15, 2025
- Medium5.4SourceCodester Best Employee Management System V1.0 is vulnerable to Cross Site Request Forgery (CSRF) in /admin/change_pass.php via the password parameter.Check if you run itEPSS 0.21%May 15, 2025
- Medium6.1Phpgurukul Vehicle Record Management System v1.0 is vulnerable to Cross Site Scripting (XSS) in /admin/profile.php via the name, email, and mobile parameters.Check if you run itEPSS 0.29%May 15, 2025
- Medium6.1Phpgurukul Vehicle Record Management System v1.0 is vulnerable to Cross Site Scripting (XSS) via the vehiclename, modelnumber, regnumber, vehiclesubtype, chasisnum, enginenumber' iCheck if you run itEPSS 0.30%May 15, 2025
- Medium6.1Phpgurukul Vehicle Record Management System v1.0 is vulnerable to Cross Site Scripting (XSS) in /admin/add-brand.php via the brandname parameter.Check if you run itEPSS 0.29%May 15, 2025
- Medium6.1Phpgurukul Vehicle Record Management System v1.0 is vulnerable to Cross Site Scripting (XSS) in /edit-brand.php?bid={brandId}.Check if you run itEPSS 0.29%May 15, 2025
- Medium5.4FluxBB 1.5.11 is vulnerable to Cross Site Scripting (XSS) in via the Forum Description Field in admin_forums.php.Check if you run itEPSS 0.26%May 15, 2025
- Medium6.1Sulu is an open-source PHP content management system based on the Symfony framework.Check if you run itEPSS 0.47%May 14, 2025
- Medium4.3iTop is an web based IT Service Management tool.Check if you run itEPSS 0.29%May 14, 2025
- Critical9.1The Uncanny Automator plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 6.4.0.1 via deserialization of untrusted input in the automatCheck if you run itEPSS 0.87%May 14, 2025
- Medium5.4SourceCodester Best Employee Management System 1.0 is vulnerable to Cross Site Request Forgery (CSRF) in /admin/Operation/User.php page.Check if you run itEPSS 0.17%May 14, 2025
- Medium4.8SourceCodester Best Employee Management System V1.0 is vulnerable to Cross Site Scripting (XSS) in /admin/profile.php via the website_image, fname, lname, contact, username, and adCheck if you run itEPSS 0.27%May 14, 2025
- Medium5.4Netgate pfSense CE (prior to 2.8.0 beta release) and corresponding Plus builds is vulnerable to Cross Site Scripting (XSS) in widgets/log.widget.php.Check if you run itEPSS 8.52%May 14, 2025
- Medium6.3Kirby is an open-source content management system.Check if you run itEPSS 0.59%May 13, 2025
- Low2.3Kirby is an open-source content management system.Check if you run itEPSS 0.59%May 13, 2025
- Medium6.3Kirby is an open-source content management system.Check if you run itEPSS 0.71%May 13, 2025
- Critical9.3SQL injection vulnerability in DomainsPRO 1.2.Check if you run itEPSS 0.36%May 13, 2025
- Medium6.1davidstutz bootstrap_multiselect Cross-Site Request Forgery (CSRF)Patch nowKEVEPSS 0.44%May 13, 2025
- Critical10.0netalertx netalertx Missing Authentication for Critical FunctionPatch nowKEVEPSS 62.67%May 13, 2025
- Critical9.8Billing Software v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities.Check if you run itEPSS 0.42%May 12, 2025
Sort