Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.4Dolibarr is an enterprise resource planning (ERP) and customer relationship management (CRM) software package.Check if you run itEPSS 0.92%Apr 17, 2026
- High8.1The Drag and Drop Multiple File Upload for Contact Form 7 plugin for WordPress is vulnerable to arbitrary file upload in versions up to, and including, 1.3.9.7.Patch nowKEVEPSS 3.46%Apr 17, 2026
- High8.8The WP Customer Area plugin for WordPress is vulnerable to arbitrary file read and deletion due to insufficient file path validation in the 'ajax_attach_file' function…Check if you run itEPSS 1.23%Apr 17, 2026
- Low2.1A vulnerability was determined in prasathmani TinyFileManager up to 2.6.Check if you run itEPSS 0.35%Apr 17, 2026
- Low2.1A vulnerability was found in prasathmani TinyFileManager up to 2.6.Check if you run itEPSS 0.54%Apr 17, 2026
- Critical9.8A SQL injection vulnerability in CodeAstro Simple Attendance Management System v1.0 allows remote unauthenticated attackers to bypass authentication via the username p…Check if you run itEPSS 0.80%Apr 17, 2026
- Medium5.5A weakness has been identified in QueryMine sms up to 7ab5a9ea196209611134525ffc18de25c57d9593.Check if you run itEPSS 0.41%Apr 17, 2026
- High7.5Craftql v1.3.7 and before is vulnerable to Server-Side Request Forgery (SSRF) which allows an attacker to execute arbitrary code via the vendor/markhuot/craftql/src/Li…Check if you run itEPSS 0.56%Apr 17, 2026
- Low2.1A security flaw has been discovered in QueryMine sms up to 7ab5a9ea196209611134525ffc18de25c57d9593.Check if you run itEPSS 0.35%Apr 17, 2026
- Low2.1A vulnerability was identified in QueryMine sms up to 7ab5a9ea196209611134525ffc18de25c57d9593.Check if you run itEPSS 0.32%Apr 17, 2026
- Low2.1A flaw has been found in Qihui jtbc5 CMS 5.0.3.6.Check if you run itEPSS 0.52%Apr 17, 2026
- Low2.0A vulnerability was detected in classroombookings up to 2.17.0.Check if you run itEPSS 0.36%Apr 17, 2026
- Medium4.3The Canto plugin for WordPress is vulnerable to Missing Authorization in versions up to and including 3.1.1.Check if you run itEPSS 0.36%Apr 17, 2026
- High8.8My Calendar is a WordPress plugin for managing calendar events.Check if you run itEPSS 1.14%Apr 16, 2026
- High7.1A Denial of Service (DoS) vulnerability exists in the Protobuf PHP library during the parsing of untrusted input.Check if you run itEPSS 0.43%Apr 16, 2026
- Critical9.1SourceCodester Payroll Management and Information System v1.0 is vulnerable to SQL Injection in the file /payroll/view_employee.php.Check if you run itEPSS 0.42%Apr 16, 2026
- Medium4.7SourceCodester Payroll Management and Information System v1.0 is vulnerable to SQL Injection in the file /payroll/view_account.php?emp_id=.Check if you run itEPSS 0.27%Apr 16, 2026
- Critical9.8SourceCodester Vehicle Parking Area Management System v1.0 is vulnerable to SQL Injection in the file /parking/manage_park.php.Check if you run itEPSS 0.47%Apr 16, 2026
- High7.2SourceCodester Vehicle Parking Area Management System v1.0 is vulnerable to SQL Injection in the file /parking/manage_location.php.Check if you run itEPSS 0.45%Apr 16, 2026
- High7.2SourceCodester Vehicle Parking Area Management System v1.0 is vulnerable to SQL Injection in the file /parking/manage_user.php.Check if you run itEPSS 0.45%Apr 16, 2026
- High7.2SourceCodester Vehicle Parking Area Management System v1.0 is vulnerable to SQL Injection in the file /parking/view_parked_details.php.Check if you run itEPSS 0.45%Apr 16, 2026
- High7.2SourceCodester Vehicle Parking Area Management System v1.0 is vulnerable to SQL Injection in the file /parking/manage_category.php.Check if you run itEPSS 0.45%Apr 16, 2026
- Critical9.8SourceCodester Simple Music Cloud Community System v1.0 is vulnerable to SQL Injection in the file /music/edit_music.php.Check if you run itEPSS 0.47%Apr 16, 2026
- Critical9.8SourceCodester Simple Music Cloud Community System v1.0 is vulnerable to SQL Injection in the file /music/view_genre.php.Check if you run itEPSS 0.47%Apr 16, 2026
- Critical9.4SourceCodester Simple Music Cloud Community System v1.0 is vulnerable to SQL Injection in the file /music/view_user.php.Check if you run itEPSS 0.41%Apr 16, 2026