Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.2SourceCodester Vehicle Parking Area Management System v1.0 is vulnerable to SQL Injection in the file /parking/view_parked_details.php.Check if you run itEPSS 0.45%Apr 16, 2026
- High7.2SourceCodester Vehicle Parking Area Management System v1.0 is vulnerable to SQL Injection in the file /parking/manage_category.php.Check if you run itEPSS 0.45%Apr 16, 2026
- Critical9.8SourceCodester Simple Music Cloud Community System v1.0 is vulnerable to SQL Injection in the file /music/edit_music.php.Check if you run itEPSS 0.47%Apr 16, 2026
- Critical9.8SourceCodester Simple Music Cloud Community System v1.0 is vulnerable to SQL Injection in the file /music/view_genre.php.Check if you run itEPSS 0.47%Apr 16, 2026
- Critical9.4SourceCodester Simple Music Cloud Community System v1.0 is vulnerable to SQL Injection in the file /music/view_user.php.Check if you run itEPSS 0.41%Apr 16, 2026
- High7.3SourceCodester Simple Music Cloud Community System v1.0 is vulnerable to SQL Injection in the file /music/view_playlist.php.Check if you run itEPSS 0.29%Apr 16, 2026
- High7.3SourceCodester Simple Music Cloud Community System v1.0 is vulnerable to SQL Injection in the file /music/view_music.php.Check if you run itEPSS 0.29%Apr 16, 2026
- Critical10.0Improper Access ControlPatch nowKEVEPSS 1.17%Apr 16, 2026
- High8.8Composer is a dependency manager for PHP.Check if you run itEPSS 1.91%Apr 15, 2026
- High7.8Composer is a dependency manager for PHP.Check if you run itEPSS 1.00%Apr 15, 2026
- Critical9.8Slah CMS v1.5.0 and below was discovered to contain a remote code execution (RCE) vulnerability in the session() function at config.php.Check if you run itEPSS 0.93%Apr 15, 2026
- High7.5An issue in the file handling logic of the component download.php of SAC-NFe v2.0.02 allows attackers to execute a directory traversal and read arbitrary files from th…Check if you run itEPSS 0.99%Apr 15, 2026
- High8.6Slah CMS v1.5.0 and below was discovered to contain a SQL injection vulnerability via the id parameter in the vereador_ver.php endpoint.Check if you run itEPSS 0.35%Apr 15, 2026
- High7.5Incorrect access control in the config.php component of Slah v1.5.0 and below allows unauthenticated attackers to access sensitive information, including active sessio…Check if you run itEPSS 0.42%Apr 15, 2026
- High8.3Daylight Studio FuelCMS v1.5.2 was discovered to contain an authenticated remote code execution (RCE) vulnerability via the /controllers/Installer.php and the function…Check if you run itEPSS 0.73%Apr 15, 2026
- High7.2Serendipity is a PHP-powered weblog engine.Check if you run itEPSS 0.30%Apr 15, 2026
- Medium6.9Serendipity is a PHP-powered weblog engine.Check if you run itEPSS 0.30%Apr 15, 2026
- UnknownWordPress wordpress Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 15.17%Apr 15, 2026
- High7.2BoidCMS is an open-source, PHP-based flat-file CMS for building simple websites and blogs, using JSON as its database.Check if you run itEPSS 0.81%Apr 14, 2026
- High8.8Chamilo LMS is an open-source learning management system.Check if you run itEPSS 2.63%Apr 14, 2026
- High8.6Chamilo LMS is an open-source learning management system.Check if you run itEPSS 0.57%Apr 14, 2026
- High7.2Chamilo LMS is an open-source learning management system.Check if you run itEPSS 0.35%Apr 14, 2026
- High7.1Chamilo is an open-source learning management system (LMS).Check if you run itEPSS 0.46%Apr 14, 2026
- Medium4.9October is a Content Management System (CMS) and web platform.Check if you run itEPSS 0.33%Apr 14, 2026
- High8.1A Broken Object-Level Authorization (BOLA) in the /Contact/Persons/PersonController.php endpoint of Webkul Krayin CRM v2.2.x allows authenticated attackers to arbitrar…Check if you run itEPSS 0.41%Apr 14, 2026