Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8Online Store System CMS 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through…Check if you run itEPSS 0.34%Mar 26, 2026
- High8.8SAT CFDI 3.3 contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting SQL code through the 'id' parameter in the signIn endpoint.Check if you run itEPSS 0.25%Mar 26, 2026
- High7.1School Management System CMS 1.0 contains an SQL injection vulnerability in the admin login functionality that allows attackers to bypass authentication by injecting S…Check if you run itEPSS 0.51%Mar 26, 2026
- High8.8Wecodex Hotel CMS 1.0 contains an SQL injection vulnerability in the admin login functionality that allows unauthenticated attackers to bypass authentication by injecting SQL code.Check if you run itEPSS 0.53%Mar 26, 2026
- High8.8Wecodex Restaurant CMS 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through t…Check if you run itEPSS 0.48%Mar 26, 2026
- High8.8Shipping System CMS 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to bypass authentication by injecting SQL code through the username parameter.Check if you run itEPSS 0.53%Mar 26, 2026
- Critical9.3plank/laravel-mediable through version 6.4.0 can allow upload of a dangerous file type when an application using the package accepts or prefers a client-supplied MIME…Check if you run itEPSS 0.89%Mar 26, 2026
- Medium5.4Mattermost versions 11.2.x <= 11.2.2, 10.11.x <= 10.11.10, 11.4.x <= 11.4.0, 11.3.x <= 11.3.1 fail to restrict team-level access when processing membership sync from a…Check if you run itEPSS 0.14%Mar 26, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: icmp: fix NULL pointer dereference in icmp_tag_validation() icmp_tag_validation() unconditionally d…Check if you run itEPSS 0.13%Mar 26, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix NULL deref in mesh_matches_local() mesh_matches_local() unconditionally derefer…Check if you run itEPSS 0.12%Mar 26, 2026
- High7.4A weakness has been identified in Wavlink WL-NU516U1 260227.Check if you run itEPSS 0.86%Mar 26, 2026
- Medium5.5A security flaw has been discovered in 648540858 wvp-GB28181-pro up to 2.7.4.Check if you run itEPSS 0.43%Mar 26, 2026
- Low2.1A vulnerability was identified in code-projects Simple Laundry System 1.0.Check if you run itEPSS 0.27%Mar 26, 2026
- High8.8Each RPCSEC_GSS data packet is validated by a routine which checks a signature in the packet.Check if you run itEPSS 3.43%Mar 26, 2026
- High8.5The installer of RATOC RAID Monitoring Manager for Windows allows to customize the installation folder.Check if you run itEPSS 0.14%Mar 26, 2026
- High8.4The installer of RATOC RAID Monitoring Manager for Windows searches the current directory to load certain DLLs.Check if you run itEPSS 0.17%Mar 26, 2026
- Medium5.5A weakness has been identified in code-projects Online Food Ordering System 1.0.Check if you run itEPSS 0.26%Mar 26, 2026
- Medium4.3The Blog2Social: Social Media Auto Post & Scheduler plugin for WordPress is vulnerable to unauthorized data loss in all versions up to, and including, 8.8.2.Check if you run itEPSS 0.25%Mar 26, 2026
- Medium5.3The FormLift for Infusionsoft Web Forms plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 7.5.21.Check if you run itEPSS 0.48%Mar 26, 2026
- High7.0Digital Photo Frame GH-WDF10A provided by GREEN HOUSE CO., LTD.Check if you run itEPSS 0.18%Mar 26, 2026
- Medium5.4The ShortPixel Image Optimizer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the attachment post_title in all versions up to, and including, 6.4.3.Check if you run itEPSS 0.18%Mar 26, 2026
- High7.2The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to PHP Object Injection via deserialization of the 'post_content' of admin_form posts in all versio…Check if you run itEPSS 0.55%Mar 26, 2026
- High8.6An OS command injection vulnerability in the web management interface of certain ASUS router models allows remote authenticated administrators to execute arbitrary sys…Check if you run itEPSS 0.92%Mar 26, 2026
- Low1.9A weakness has been identified in Orc discount up to 3.0.1.2.Check if you run itEPSS 0.12%Mar 26, 2026
- Low2.9A vulnerability was identified in kalcaddle kodbox 1.64.Check if you run itEPSS 0.26%Mar 26, 2026
Sort