Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3A security flaw has been discovered in projectworlds Advanced Library Management System 1.0.Check if you run itEPSS 0.42%Nov 17, 2025
- Medium5.3A vulnerability was identified in projectworlds Advanced Library Management System 1.0.Check if you run itEPSS 0.38%Nov 17, 2025
- Low3.2GoSign Desktop through 2.4.1 disables TLS certificate validation when configured to use a proxy server.Check if you run itEPSS 0.13%Nov 17, 2025
- High7.5OpenStack Keystone before 26.0.1, 27.0.0, and 28.0.0 allows a /v3/ec2tokens or /v3/s3tokens request with a valid AWS Signature to provide Keystone authorization.Check if you run itEPSS 0.24%Nov 17, 2025
- Medium6.2PDFPatcher executable does not validate user-supplied file paths, allowing directory traversal attacks allowing attackers to upload arbitrary files to arbitrary locations.Check if you run itEPSS 0.43%Nov 17, 2025
- High7.1PDFPatcher thru 1.1.3.4663 executable's XML bookmark import functionality does not restrict XML external entity (XXE) references.Check if you run itEPSS 0.43%Nov 17, 2025
- High8.1MyScreenTools v2.2.1.0 contains a critical OS command injection vulnerability in the GIF compression tool.Check if you run itEPSS 1.59%Nov 17, 2025
- Medium6.1Cross-Site Scripting (XSS) vulnerability exists in SourceCodester AI Font Matcher (nid=18425, 2025-10-10) that allows remote attackers to execute arbitrary JavaScript in victims' bCheck if you run itEPSS 0.29%Nov 17, 2025
- Low3.5Freebox v5 HD (firmware = 1.7.20), Freebox v5 Crystal (firmware = 1.7.20), Freebox v6 Révolution r1–r3 (firmware = 4.7.x), Freebox Mini 4K (firmware = 4.7.x), and Freebox One (firmCheck if you run itEPSS 0.11%Nov 17, 2025
- Unknowntraccar traccar Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 1.28%Nov 17, 2025
- High8.1Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 0.72%Nov 17, 2025
- Medium6.5The ACF Flexible Layouts Manager plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'acf_flm_update_template_with_pastPatch nowKEVEPSS 0.22%Nov 17, 2025
- Medium6.1kashipara School Management System 1.0 is vulnerable to Cross Site Scripting (XSS) via /client_user/feedback.php.Check if you run itEPSS 0.24%Nov 17, 2025
- Medium4.6PHPGurukul Complaint Management System 2.0 is vulnerble to Cross Site Scripting (XSS) via the fromdate and todate parameters in between-date-userreport.php.Check if you run itEPSS 0.22%Nov 17, 2025
- Medium6.1kashipara School Management System 1.0 is vulnerable to Cross Site Scripting (XSS) via the formuser and formpassword parameters in /adminLogin.php.Check if you run itEPSS 0.24%Nov 17, 2025
- Medium6.5PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the name, summary, review, quality, price, and value parameters in product-details.php.Check if you run itEPSS 0.26%Nov 17, 2025
- Medium6.5PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the product parameter in search-result.php.Check if you run itEPSS 0.26%Nov 17, 2025
- Medium6.5PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the username parameter in the admin page.Check if you run itEPSS 0.26%Nov 17, 2025
- Medium5.4PHPGurukul Online Shopping Portal 2.0 is vulnerable to Cross Site Scripting (XSS) via the quantity parameter in my-cart.php.Check if you run itEPSS 0.24%Nov 17, 2025
- Medium6.5PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the fullname, emailid, and contactno parameters in login.php.Check if you run itEPSS 0.26%Nov 17, 2025
- Critical9.8PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the email parameter in forgot-password.php.Check if you run itEPSS 0.44%Nov 17, 2025
- Medium6.5PHPGurukul Complaint Management System 2.0 is vulnerable to SQL Injection via the subcategory and category parameters in subcategory.php.Check if you run itEPSS 0.26%Nov 17, 2025
- Medium6.5PHPGurukul Complaint Management System 2.0 is vulnerable to SQL Injection via the fromdate and todate parameters in between-date-userreport.php.Check if you run itEPSS 0.26%Nov 17, 2025
- Medium6.1PHPGurukul Complaint Management System 2.0 is vulnerable to Cross Site Scripting (XSS) via the search parameter in user-search.php.Check if you run itEPSS 0.24%Nov 17, 2025
- Medium6.5PHPGurukul Complaint Management System 2.0 is vulnerable to SQL Injection via the email and mobileno parameters in reset-password.php.Check if you run itEPSS 0.26%Nov 17, 2025
Sort