Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8Hospital Management System v4 was discovered to contain a SQL injection vulnerability via the password2 parameter in func.php.Check if you run itEPSS 0.37%Aug 7, 2025
- Critical9.8Hospital Management System v4 was discovered to contain multiple SQL injection vulnerabilities in func1.php via the username3 and password3 parameters.Check if you run itEPSS 0.37%Aug 7, 2025
- Critical9.8Hospital Management System v4 was discovered to contain a SQL injection vulnerability via the patient_contact parameter in patientsearch.php.Check if you run itEPSS 0.37%Aug 7, 2025
- High8.8Student Attendance Management System v1 was discovered to contain a SQL injection vulnerability via the username parameter at index.php.Check if you run itEPSS 0.32%Aug 7, 2025
- High8.8Student Attendance Management System v1 was discovered to contain a SQL injection vulnerability via the emailAddress parameter at createClassTeacher.php.Check if you run itEPSS 0.32%Aug 7, 2025
- High8.8Student Attendance Management System v1 was discovered to contain multiple SQL injection vulnerabilities in createStudents.php via the Id, firstname, and admissionNumber parametersCheck if you run itEPSS 0.32%Aug 7, 2025
- High8.8Student Attendance Management System v1 was discovered to contain multiple SQL injection vulnerabilities in createSessionTerm.php via the id, termId, and sessionName parameters.Check if you run itEPSS 0.32%Aug 7, 2025
- High8.8Student Attendance Management System v1 was discovered to contain multiple SQL injection vulnerabilities in createClassArms.php via the classId and classArmName parameters.Check if you run itEPSS 0.32%Aug 7, 2025
- Medium6.1Student Attendance Management System v1 was discovered to contain a cross-site scripting (XSS) vulnerability via the sessionName parameter at createSessionTerm.php.Check if you run itEPSS 0.21%Aug 7, 2025
- Medium6.5Hospital Management System 4 is vulnerable to a SQL injection in /Hospital-Management-System-master/func.php via the password2 parameter.Check if you run itEPSS 0.23%Aug 7, 2025
- High8.8SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application.Check if you run itEPSS 0.45%Aug 6, 2025
- Medium5.3SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application.Check if you run itEPSS 0.30%Aug 6, 2025
- High8.8SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application.Check if you run itEPSS 0.40%Aug 6, 2025
- None0.0Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.Open the advisoryAug 6, 2025
- High8.7Tigo Energy's CCA device is vulnerable to insecure session ID generation in their remote API.Check if you run itEPSS 0.59%Aug 6, 2025
- High7.8A maliciously crafted TGA file, when linked or imported into Autodesk 3ds Max, can force a Memory Corruption vulnerability.Check if you run itEPSS 0.22%Aug 6, 2025
- High7.8A maliciously crafted RBG file, when parsed through Autodesk 3ds Max, can force an Out-of-Bounds Write vulnerability.Check if you run itEPSS 0.22%Aug 6, 2025
- High8.7Tigo Energy's CCA is vulnerable to a command injection vulnerability in the /cgi-bin/mobile_api endpoint when the DEVICE_PING command is called, allowing remote code execution dueCheck this weekEPSS 19.40%Aug 6, 2025
- High7.5Middleware causes a prohibitive amount of heap allocations when processing malicious preflight requests that include a Access-Control-Request-Headers (ACRH) header whose value contCheck if you run itEPSS 0.63%Aug 6, 2025
- Critical9.3Tigo Energy's Cloud Connect Advanced (CCA) device contains hard-coded credentials that allow unauthorized users to gain administrative access.Check if you run itEPSS 0.61%Aug 6, 2025
- Low3.5Dell SupportAssist OS Recovery, versions prior to 5.5.14.0, contains an Exposure of Sensitive Information to an Unauthorized Actor vulnerability.Check if you run itEPSS 0.19%Aug 6, 2025
- High7.8Dell SupportAssist OS Recovery, versions prior to 5.5.14.0, contain a Creation of Temporary File With Insecure Permissions vulnerability.Check if you run itEPSS 0.15%Aug 6, 2025
- Medium5.3A vulnerability, which was classified as critical, was found in SkyworkAI DeepResearchAgent up to 08eb7f8eb9505d0094d75bb97ff7dacc3fa3bbf2.Check if you run itEPSS 1.48%Aug 6, 2025
- Medium5.3A vulnerability was found in Keycloak-services.Check if you run itEPSS 0.57%Aug 6, 2025
- Medium5.3A vulnerability, which was classified as critical, has been found in agno-agi agno up to 1.7.5.Check if you run itEPSS 1.48%Aug 6, 2025
Sort