Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.9A vulnerability was found in PHPGurukul Vehicle Parking Management System 1.13.Check if you run itEPSS 0.56%May 15, 2025
- Medium6.9A vulnerability was found in PHPGurukul Vehicle Parking Management System 1.13 and classified as critical.Check if you run itEPSS 0.49%May 15, 2025
- Medium6.9A vulnerability has been found in PHPGurukul Vehicle Parking Management System 1.13 and classified as critical.Check if you run itEPSS 0.56%May 15, 2025
- Medium6.9A vulnerability, which was classified as critical, was found in PHPGurukul Vehicle Parking Management System 1.13.Check if you run itEPSS 0.56%May 15, 2025
- Medium6.9A vulnerability classified as critical was found in PHPGurukul Apartment Visitors Management System 1.0.Check if you run itEPSS 0.56%May 15, 2025
- Medium6.9A vulnerability classified as critical has been found in PHPGurukul Directory Management System 2.0.Check if you run itEPSS 0.56%May 15, 2025
- Medium6.9A vulnerability was found in PHPGurukul Directory Management System 2.0.Check if you run itEPSS 0.56%May 15, 2025
- High7.2The File Manager Advanced Shortcode plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.5.4 (file-manager-advanced-shortcode) and 2.5Check if you run itEPSS 0.90%May 15, 2025
- High8.8The UiPress lite | Effortless custom dashboards, admin themes and pages plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 3.5.07 viaCheck if you run itEPSS 1.12%May 15, 2025
- Medium5.1A SQL Injection vulnerability in WebERP v4.15.2 allows attackers to execute arbitrary SQL commands and extract sensitive data by injecting a crafted payload into the ReportID and RCheck if you run itEPSS 0.26%May 15, 2025
- Medium5.4SourceCodester Best Employee Management System V1.0 is vulnerable to Cross Site Request Forgery (CSRF) in /admin/change_pass.php via the password parameter.Check if you run itEPSS 0.21%May 15, 2025
- Medium6.1Phpgurukul Vehicle Record Management System v1.0 is vulnerable to Cross Site Scripting (XSS) in /admin/profile.php via the name, email, and mobile parameters.Check if you run itEPSS 0.29%May 15, 2025
- Medium6.1Phpgurukul Vehicle Record Management System v1.0 is vulnerable to Cross Site Scripting (XSS) via the vehiclename, modelnumber, regnumber, vehiclesubtype, chasisnum, enginenumber' iCheck if you run itEPSS 0.30%May 15, 2025
- Medium6.1Phpgurukul Vehicle Record Management System v1.0 is vulnerable to Cross Site Scripting (XSS) in /admin/add-brand.php via the brandname parameter.Check if you run itEPSS 0.29%May 15, 2025
- Medium5.4FluxBB 1.5.11 is vulnerable to Cross Site Scripting (XSS) in via the Forum Description Field in admin_forums.php.Check if you run itEPSS 0.26%May 15, 2025
- Medium4.8An improper input neutralization vulnerability in the management web interface of the Palo Alto Networks PAN-OS® software enables a malicious authenticated read-write administratorCheck if you run itEPSS 0.42%May 14, 2025
- Medium5.2An incorrect privilege assignment vulnerability in the Palo Alto Networks GlobalProtect™ App on macOS devices enables a locally authenticated non administrative user to disable theCheck if you run itEPSS 0.14%May 14, 2025
- High7.1An incorrect privilege management vulnerability in the OPSWAT MetaDefender Endpoint Security SDK used by the Palo Alto Networks GlobalProtect™ app on Windows devices allows a localCheck if you run itEPSS 0.16%May 14, 2025
- High8.9motionEye is an online interface for the software motion, a video surveillance program with motion detection.Check if you run itEPSS 0.51%May 14, 2025
- Medium6.1Sulu is an open-source PHP content management system based on the Symfony framework.Check if you run itEPSS 0.47%May 14, 2025
- Medium5.5The Ninja Forms Webhooks plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 3.0.7 via the form webhook functionality.Check if you run itEPSS 0.25%May 14, 2025
- Medium6.3LF Edge eKuiper is a lightweight internet of things (IoT) data analytics and stream processing engine.Check if you run itEPSS 0.30%May 14, 2025
- Medium5.4SourceCodester Best Employee Management System 1.0 is vulnerable to Cross Site Request Forgery (CSRF) in /admin/Operation/User.php page.Check if you run itEPSS 0.17%May 14, 2025
- Medium4.8SourceCodester Best Employee Management System V1.0 is vulnerable to Cross Site Scripting (XSS) in /admin/profile.php via the website_image, fname, lname, contact, username, and adCheck if you run itEPSS 0.27%May 14, 2025
- Medium5.4Race condition in some Administrative Tools for some Intel(R) Network Adapters package before version 29.4 may allow an authenticated user to potentially enable escalation of priviCheck if you run itEPSS 0.14%May 13, 2025
Sort