Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.2Vvveb prior to 1.0.8.1 contains a code injection vulnerability in the installation endpoint where the subdir POST parameter is written unsanitized into the env.php con…Check if you run itEPSS 1.14%Apr 20, 2026
- Low2.0A security flaw has been discovered in Yifang CMS up to 2.0.5.Check if you run itEPSS 0.33%Apr 20, 2026
- Medium5.5A vulnerability was found in rickxy Hospital Management System up to 88a4290d957dc5bdde8a56e5ad451ad14f7f90f4.Check if you run itEPSS 0.47%Apr 20, 2026
- Medium5.5A vulnerability was identified in ProjectsAndPrograms School Management System up to 6b6fae5426044f89c08d0dd101c7fa71f9042a59.Check if you run itEPSS 0.41%Apr 20, 2026
- Low2.1A vulnerability was detected in PHPEMS 11.0.Check if you run itEPSS 0.35%Apr 19, 2026
- Low2.9A security vulnerability has been detected in Collabora KodExplorer up to 4.52.Check if you run itEPSS 0.40%Apr 19, 2026
- Low2.1A weakness has been identified in kodcloud KodExplorer up to 4.52.Check if you run itEPSS 0.36%Apr 19, 2026
- Low2.0A security flaw has been discovered in kodcloud KodExplorer up to 4.52.Check if you run itEPSS 0.40%Apr 19, 2026
- Medium6.9A vulnerability was identified in kodcloud KodExplorer up to 4.52.Check if you run itEPSS 0.65%Apr 19, 2026
- Medium5.5A vulnerability was determined in kodcloud KodExplorer up to 4.52.Check if you run itEPSS 0.72%Apr 19, 2026
- Low2.0A vulnerability was detected in EyouCMS up to 1.7.1.Check if you run itEPSS 0.38%Apr 19, 2026
- Medium4.8ChurchCRM is an open-source church management system.Check if you run itEPSS 0.24%Apr 18, 2026
- High8.1ChurchCRM is an open-source church management system.Check if you run itEPSS 0.23%Apr 18, 2026
- Critical9.1ChurchCRM is an open-source church management system.Check if you run itEPSS 0.99%Apr 18, 2026
- High7.1ChurchCRM is an open-source church management system.Check if you run itEPSS 0.43%Apr 18, 2026
- Unknownmjdm majordomo Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 5.70%Apr 18, 2026
- Medium6.9graphql-go is a Go implementation of GraphQL.Check if you run itEPSS 0.73%Apr 17, 2026
- Medium4.7DOMSanitizer is a DOM/SVG/MathML Sanitizer for PHP 7.3+.Check if you run itEPSS 0.44%Apr 17, 2026
- High8.8WeGIA is a web manager for charitable institutions.Check if you run itEPSS 0.44%Apr 17, 2026
- Critical9.4Dolibarr is an enterprise resource planning (ERP) and customer relationship management (CRM) software package.Check if you run itEPSS 0.92%Apr 17, 2026
- High8.1The Drag and Drop Multiple File Upload for Contact Form 7 plugin for WordPress is vulnerable to arbitrary file upload in versions up to, and including, 1.3.9.7.Patch nowKEVEPSS 3.46%Apr 17, 2026
- High8.8The WP Customer Area plugin for WordPress is vulnerable to arbitrary file read and deletion due to insufficient file path validation in the 'ajax_attach_file' function…Check if you run itEPSS 1.23%Apr 17, 2026
- Low2.1A vulnerability was determined in prasathmani TinyFileManager up to 2.6.Check if you run itEPSS 0.35%Apr 17, 2026
- Low2.1A vulnerability was found in prasathmani TinyFileManager up to 2.6.Check if you run itEPSS 0.54%Apr 17, 2026
- Critical9.8A SQL injection vulnerability in CodeAstro Simple Attendance Management System v1.0 allows remote unauthenticated attackers to bypass authentication via the username p…Check if you run itEPSS 0.80%Apr 17, 2026