Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.9A vulnerability was found in code-projects Exam Form Submission 1.0 and classified as critical.Check if you run itEPSS 0.58%Jul 28, 2025
- Medium6.9A vulnerability has been found in code-projects Exam Form Submission 1.0 and classified as critical.Check if you run itEPSS 0.58%Jul 28, 2025
- Medium6.9A vulnerability, which was classified as critical, was found in code-projects Exam Form Submission 1.0.Check if you run itEPSS 0.58%Jul 28, 2025
- Medium6.9A vulnerability, which was classified as critical, has been found in code-projects Exam Form Submission 1.0.Check if you run itEPSS 0.58%Jul 28, 2025
- Medium6.9A vulnerability classified as critical was found in code-projects Online Ordering System 1.0.Check if you run itEPSS 0.51%Jul 28, 2025
- Unknownbricksbuilder bricks Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.48%Jul 28, 2025
- Medium4.5In Malwarebytes Binisoft Windows Firewall Control before 6.16.0.0, the installer is vulnerable to local privilege escalation.Check if you run itEPSS 0.13%Jul 28, 2025
- High7.5Improper session invalidation in the component /doctor/change-password.php of PHPGurukul Car Washing Management System v1.0 allows attackers to execute a session hijacking attack.Check if you run itEPSS 0.46%Jul 28, 2025
- High7.5Improper session invalidation in the component /doctor/change-password.php of PHPGurukul Doctor Appointment Management System v1 allows attackers to execute a session hijacking attCheck if you run itEPSS 0.37%Jul 28, 2025
- High7.5Improper session invalidation in the component /edms/change-password.php of PHPGurukul e-Diary Management System v1 allows attackers to execute a session hijacking attack.Check if you run itEPSS 0.51%Jul 28, 2025
- High7.1Improper session invalidation in the component /banker/change-password.php of PHPGurukul Bank Locker Management System v1 allows attackers to execute a session hijacking attack.Check if you run itEPSS 0.34%Jul 28, 2025
- High7.5Improper session invalidation in the component /elms/emp-changepassword.php of PHPGurukul Student Result Management System v2.0 allows attackers to execute a session hijacking attaCheck if you run itEPSS 0.47%Jul 28, 2025
- High7.5Improper session invalidation in the component /srms/change-password.php of PHPGurukul Student Result Management System v2.0 allows attackers to execute a session hijacking attack.Check if you run itEPSS 0.57%Jul 28, 2025
- High7.1Improper session invalidation in the component /library/change-password.php of PHPGurukul Online Library Management System v3.0 allows attackers to execute a session hijacking attaCheck if you run itEPSS 0.37%Jul 28, 2025
- High7.1Improper session invalidation in the component /bbdms/change-password.php of PHPGurukul Blood Bank & Donor Management System v2.4 allows attackers to execute a session hijacking atCheck if you run itEPSS 0.31%Jul 28, 2025
- High7.1Improper session invalidation in the component /carrental/update-password.php of PHPGurukul Car Rental Project v3.0 allows attackers to execute a session hijacking attack.Check if you run itEPSS 0.38%Jul 28, 2025
- High7.1Improper session invalidation in the component /crm/change-password.php of PHPGurukul Online Course Registration v3.1 allows attackers to execute a session hijacking attack.Check if you run itEPSS 0.38%Jul 28, 2025
- High7.1Improper session invalidation in the component /crm/change-password.php of PHPGurukul Small CRM v3.0 allows attackers to execute a session hijacking attack.Check if you run itEPSS 0.31%Jul 28, 2025
- Low2.9The buffered-reader crate before 1.1.5 for Rust allows out-of-bounds array access and a panic.Check if you run itEPSS 0.39%Jul 28, 2025
- Low2.9The sequoia-openpgp crate before 1.16.0 for Rust allows out-of-bounds array access and a panic.Check if you run itEPSS 0.33%Jul 28, 2025
- Medium4.5The openssl crate before 0.10.55 for Rust allows an out-of-bounds read via an empty string to X509VerifyParamRef::set_host.Check if you run itEPSS 0.23%Jul 28, 2025
- Medium4.1The gix-transport crate before 0.36.1 for Rust allows command execution via the "gix clone 'ssh://-oProxyCommand=open$IFS" substring.Check if you run itEPSS 0.21%Jul 28, 2025
- Medium5.9The ed25519-dalek crate before 2 for Rust allows a double public key signing function oracle attack.Check if you run itEPSS 0.22%Jul 28, 2025
- Medium5.3A vulnerability classified as critical has been found in Projectworlds Online Admission System 1.0.Check if you run itEPSS 0.40%Jul 27, 2025
- High8.7A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105.Check if you run itEPSS 0.99%Jul 27, 2025
Sort