Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.0A time-based blind SQL injection vulnerability was identified in the PHPGurukul Dairy Farm Shop Management System 1.3.Check if you run itEPSS 0.44%Jun 26, 2025
- Medium5.4A SQL injection vulnerability was discovered in the PHPGurukul Dairy Farm Shop Management System 1.3.Check if you run itEPSS 0.30%Jun 26, 2025
- Medium5.4PHPGurukul Pre-School Enrollment System Project v1.0 is vulnerable to Directory Traversal in manage-classes.php.Check if you run itEPSS 0.46%Jun 26, 2025
- Critical9.1Northern.tech Mender Server before 3.7.11 and 4.x before 4.0.1 has Incorrect Access Control.Check if you run itEPSS 0.39%Jun 26, 2025
- Medium6.1A Cross-Site Scripting (XSS) vulnerability exists in the node creation form of Backdrop CMS 1.30.Check if you run itEPSS 0.21%Jun 26, 2025
- UnknownImproper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 2.43%Jun 26, 2025
- UnknownD-Link dsl-2730u_firmware Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 0.68%Jun 26, 2025
- UnknownImproper Input ValidationPatch nowKEVEPSS 0.55%Jun 26, 2025
- UnknownWeaver e-office Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 0.88%Jun 26, 2025
- Unknownweiphp weiphp Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 4.20%Jun 26, 2025
- UnknownImproper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 3.85%Jun 26, 2025
- UnknownImproper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 1.74%Jun 26, 2025
- Critical9.8An issue was discovered on IROAD Dashcam FX2 devices.Check if you run itEPSS 0.68%Jun 26, 2025
- Critical9.8An issue in MHSanaei 3x-ui before v.2.5.3 and before allows a remote attacker to execute arbitrary code via the management script x-ui passes the no check certificate option to wgeCheck if you run itEPSS 0.46%Jun 26, 2025
- Medium6.5Netbox Community v4.1.7 and fixed in v.4.2.2 is vulnerable to Cross Site Scripting (XSS) via the RSS feed widget.Check if you run itEPSS 0.46%Jun 26, 2025
- Medium6.3A vulnerability was found in gooaclok819 sublinkX up to 1.8.Check if you run itEPSS 0.42%Jun 25, 2025
- Medium6.9A vulnerability was found in code-projects Inventory Management System 1.0.Check if you run itEPSS 0.48%Jun 25, 2025
- Medium5.3A vulnerability was found in code-projects Car Rental System 1.0 and classified as critical.Check if you run itEPSS 0.39%Jun 25, 2025
- High7.8PDF-XChange Editor U3D File Parsing Use-After-Free Remote Code Execution Vulnerability.Check if you run itEPSS 0.29%Jun 25, 2025
- Low3.3PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability.Check if you run itEPSS 0.24%Jun 25, 2025
- High7.8PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability.Check if you run itEPSS 0.27%Jun 25, 2025
- Low3.3PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability.Check if you run itEPSS 0.24%Jun 25, 2025
- High7.8PDF-XChange Editor U3D File Parsing Use-After-Free Remote Code Execution Vulnerability.Check if you run itEPSS 0.29%Jun 25, 2025
- High7.8PDF-XChange Editor U3D File Parsing Use-After-Free Remote Code Execution Vulnerability.Check if you run itEPSS 0.29%Jun 25, 2025
- Low3.3PDF-XChange Editor U3D File Parsing Use-After-Free Information Disclosure Vulnerability.Check if you run itEPSS 0.26%Jun 25, 2025
Sort