Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Unknowntraccar traccar Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 1.28%Nov 17, 2025
- High8.1Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 0.72%Nov 17, 2025
- Medium6.5The ACF Flexible Layouts Manager plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'acf_flm_update_template_with_pastPatch nowKEVEPSS 0.22%Nov 17, 2025
- Medium6.1kashipara School Management System 1.0 is vulnerable to Cross Site Scripting (XSS) via /client_user/feedback.php.Check if you run itEPSS 0.24%Nov 17, 2025
- Medium4.6PHPGurukul Complaint Management System 2.0 is vulnerble to Cross Site Scripting (XSS) via the fromdate and todate parameters in between-date-userreport.php.Check if you run itEPSS 0.22%Nov 17, 2025
- Medium6.1kashipara School Management System 1.0 is vulnerable to Cross Site Scripting (XSS) via the formuser and formpassword parameters in /adminLogin.php.Check if you run itEPSS 0.24%Nov 17, 2025
- Medium6.5PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the name, summary, review, quality, price, and value parameters in product-details.php.Check if you run itEPSS 0.26%Nov 17, 2025
- Medium6.5PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the product parameter in search-result.php.Check if you run itEPSS 0.26%Nov 17, 2025
- Medium6.5PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the username parameter in the admin page.Check if you run itEPSS 0.26%Nov 17, 2025
- Medium5.4PHPGurukul Online Shopping Portal 2.0 is vulnerable to Cross Site Scripting (XSS) via the quantity parameter in my-cart.php.Check if you run itEPSS 0.24%Nov 17, 2025
- Medium6.5PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the fullname, emailid, and contactno parameters in login.php.Check if you run itEPSS 0.26%Nov 17, 2025
- Critical9.8PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the email parameter in forgot-password.php.Check if you run itEPSS 0.44%Nov 17, 2025
- Medium6.5PHPGurukul Complaint Management System 2.0 is vulnerable to SQL Injection via the subcategory and category parameters in subcategory.php.Check if you run itEPSS 0.26%Nov 17, 2025
- Medium6.5PHPGurukul Complaint Management System 2.0 is vulnerable to SQL Injection via the fromdate and todate parameters in between-date-userreport.php.Check if you run itEPSS 0.26%Nov 17, 2025
- Medium6.1PHPGurukul Complaint Management System 2.0 is vulnerable to Cross Site Scripting (XSS) via the search parameter in user-search.php.Check if you run itEPSS 0.24%Nov 17, 2025
- Medium6.5PHPGurukul Complaint Management System 2.0 is vulnerable to SQL Injection via the email and mobileno parameters in reset-password.php.Check if you run itEPSS 0.26%Nov 17, 2025
- Medium6.5Kashipara Ecommerce Website 1.0 is vulnerable to SQL Injection via the user_email parameter in user_login.php.Check if you run itEPSS 0.26%Nov 17, 2025
- Medium6.5Kashipara Ecommerce Website 1.0 is vulnerable to SQL Injection via the user_email, username, user_firstname, user_lastname, and user_address parameters in user_register.php.Check if you run itEPSS 0.26%Nov 17, 2025
- Medium6.5Kashipara Ecommerce Website 1.0 is vulnerable to SQL Injection via the recover_email parameter in user_password_recover.php.Check if you run itEPSS 0.26%Nov 17, 2025
- Medium6.5PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection via id and adminremark parameters in quote-details.php.Check if you run itEPSS 0.26%Nov 17, 2025
- Medium6.1PHPGurukul Small CRM 3.0 is vulnerable to Cross Site Scripting (XSS) via the aremark parameter in manage-tickets.php.Check if you run itEPSS 0.24%Nov 17, 2025
- Medium6.5PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection via the frm_id and aremark parameters in manage-tickets.php.Check if you run itEPSS 0.26%Nov 17, 2025
- Medium6.5PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection via the oldpass parameter in change-password.php.Check if you run itEPSS 0.26%Nov 17, 2025
- Medium5.3A vulnerability was determined in projectworlds Advanced Library Management System 1.0.Check if you run itEPSS 0.38%Nov 16, 2025
- Medium6.9A vulnerability was found in shsuishang ShopSuite ModulithShop up to 45a99398cec3b7ad7ff9383694f0b53339f2d35a.Check if you run itEPSS 0.36%Nov 16, 2025
Sort