Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low2.7SourceCodester Patient Appointment Scheduler System v1.0 is vulnerable to SQL Injection in the file /scheduler/admin/appointments/view_details.php.Check if you run itEPSS 0.31%Apr 14, 2026
- Low2.7SourceCodester Patient Appointment Scheduler System v1.0 is vulnerable to arbitrary code execution (RCE) via /scheduler/classes/SystemSettings.php?f=update_settings.Check if you run itEPSS 0.39%Apr 14, 2026
- Low2.7SourceCodester Online Employees Work From Home Attendance System v1.0 is vulnerable to SQL Injection in the file /wfh_attendance/admin/attendance_list.php.Check if you run itEPSS 0.31%Apr 14, 2026
- Low2.7SourceCodester Online Employees Work From Home Attendance System v1.0 is vulnerable to SQL Injection in the file /wfh_attendance/admin/manage_department.php.Check if you run itEPSS 0.31%Apr 14, 2026
- Low2.7SourceCodester Online Employees Work From Home Attendance System v1.0 is vulnerable to SQL Injection in the file /wfh_attendance/admin/manage_employee.php.Check if you run itEPSS 0.31%Apr 14, 2026
- Low2.7SourceCodester Online Employees Work From Home Attendance System v1.0 is vulnerable to SQL Injection in the file /wfh_attendance/admin/view_employee.php.Check if you run itEPSS 0.31%Apr 14, 2026
- Low2.7SourceCodester Online Employees Work From Home Attendance System v1.0 is vulnerable to SQL Injection in the file /wfh_attendance/admin/view_att.php.Check if you run itEPSS 0.31%Apr 14, 2026
- Low2.7Sourcecodester Storage Unit Rental Management System v1.0 is vulnerable to SQL in the file /storage/admin/maintenance/manage_pricing.php.Check if you run itEPSS 0.32%Apr 14, 2026
- Low2.7Sourcecodester Storage Unit Rental Management System v1.0 is vulnerable to SQL injection in the file /storage/admin/tenants/view_details.php.Check if you run itEPSS 0.31%Apr 14, 2026
- Low2.7SourceCodester Storage Unit Rental Management System v1.0 is vulnerable to SQL Injection in the file /storage/admin/rents/manage_rent.php.Check if you run itEPSS 0.31%Apr 14, 2026
- Low2.7SourceCodester Storage Unit Rental Management System v1.0 is vulnerable to SQL Injection in the file /storage/admin/maintenance/manage_storage_unit.php.Check if you run itEPSS 0.31%Apr 14, 2026
- Medium6.5A Local File Inclusion (LFI) vulnerability in the NFSen module (nfsen.inc.php) of LibreNMS 22.11.0-23-gd091788f2 allows authenticated attackers to include arbitrary PH…Check if you run itEPSS 0.35%Apr 14, 2026
- High7.2The Smart Post Show – Post Grid, Post Carousel & Slider, and List Category Posts plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and…Check if you run itEPSS 0.69%Apr 14, 2026
- High7.2The BackWPup plugin for WordPress is vulnerable to Local File Inclusion via the parameter of the REST endpoint in all versions up to, and including, 5.6.6 due to a non…Check if you run itEPSS 1.03%Apr 14, 2026
- High7.7Craft Commerce is an ecommerce platform for Craft CMS.Check if you run itEPSS 0.60%Apr 13, 2026
- High8.8In Phpgurukul Online Course Registration v3.1, an arbitrary file upload vulnerability was discovered within the profile picture upload functionality on the /my-profile.php page.Check if you run itEPSS 0.30%Apr 13, 2026
- Low2.1A security flaw has been discovered in code-projects Easy Blog Site 1.0.Check if you run itEPSS 0.32%Apr 13, 2026
- Low2.1A vulnerability was identified in CodeAstro Online Job Portal 1.0.Check if you run itEPSS 0.38%Apr 13, 2026
- Medium4.3EspoCRM is an open source customer relationship management application.Check if you run itEPSS 1.68%Apr 13, 2026
- Critical9.3Pachno 1.0.6 contains a deserialization vulnerability that allows unauthenticated attackers to execute arbitrary code by injecting malicious serialized objects into cache files.Check if you run itEPSS 0.88%Apr 13, 2026
- High8.7Pachno 1.0.6 contains an unrestricted file upload vulnerability that allows authenticated users to upload arbitrary file types by bypassing ineffective extension filte…Check if you run itEPSS 0.83%Apr 13, 2026
- Medium5.5A security flaw has been discovered in PHPGurukul Daily Expense Tracking System 1.1.Check if you run itEPSS 0.41%Apr 13, 2026
- Low2.1A vulnerability was determined in itsourcecode Construction Management System 1.0.Check if you run itEPSS 0.32%Apr 13, 2026
- Low2.1A vulnerability was found in itsourcecode Construction Management System 1.0.Check if you run itEPSS 0.32%Apr 13, 2026
- Medium5.5A vulnerability has been found in SourceCodester Pharmacy Sales and Inventory System 1.0.Check if you run itEPSS 0.41%Apr 13, 2026