Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low2.1A flaw has been found in PHPGurukul Online Shopping Portal Project 2.1.Check if you run itEPSS 0.32%Apr 6, 2026
- Medium5.5A security vulnerability has been detected in projectworlds Car Rental System 1.0.Check if you run itEPSS 0.41%Apr 6, 2026
- Low2.1A weakness has been identified in PHPGurukul Online Shopping Portal Project 2.1.Check if you run itEPSS 0.32%Apr 6, 2026
- Low2.1A security flaw has been discovered in PHPGurukul Online Shopping Portal Project 2.1.Check if you run itEPSS 0.32%Apr 6, 2026
- Medium5.5A vulnerability was identified in projectworlds Car Rental Project 1.0.Check if you run itEPSS 0.41%Apr 6, 2026
- Low2.1A security flaw has been discovered in ProjectSend r2002.Check if you run itEPSS 0.23%Apr 6, 2026
- Low2.1A vulnerability has been found in itsourcecode Construction Management System 1.0.Check if you run itEPSS 0.33%Apr 6, 2026
- Low2.1A weakness has been identified in givanz Vvvebjs up to 2.0.5.Check if you run itEPSS 1.00%Apr 6, 2026
- Medium5.3A security flaw has been discovered in PHPGurukul Online Shopping Portal Project 2.1.Check if you run itEPSS 0.32%Apr 6, 2026
- Critical9.3topsecgroup tianxin_internet_behavior_management_system Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 6.17%Apr 6, 2026
- Critical9.3Pegasus CMS 1.0 contains a remote code execution vulnerability in the extra_fields.php plugin that allows unauthenticated attackers to execute arbitrary commands by ex…Check if you run itEPSS 1.42%Apr 5, 2026
- High8.8OpenDocMan 1.3.4 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'where' parameter.Check if you run itEPSS 0.33%Apr 5, 2026
- Medium5.3CMSsite 1.0 contains a cross-site request forgery vulnerability that allows attackers to perform unauthorized administrative actions by crafting malicious HTML forms.Check if you run itEPSS 0.13%Apr 5, 2026
- High8.8Advance Gift Shop Pro Script 2.0.3 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting maliciou…Check if you run itEPSS 0.40%Apr 5, 2026
- High8.8C4G Basic Laboratory Information System 3.4 contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to execute arbitrary SQL commands by i…Check if you run itEPSS 0.27%Apr 5, 2026
- High8.8Ask Expert Script 3.0.5 contains cross-site scripting and SQL injection vulnerabilities that allow unauthenticated attackers to inject malicious code by manipulating U…Check if you run itEPSS 0.46%Apr 5, 2026
- High8.8eDirectory contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to bypass administrator authentication and disclose sensitive files by…Check if you run itEPSS 0.53%Apr 5, 2026
- High8.8CMSsite 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'post' parameter.Check if you run itEPSS 0.40%Apr 5, 2026
- High8.7UniSharp Laravel File Manager v2.0.0-alpha7 and v2.0 contain an arbitrary file upload vulnerability that allows authenticated attackers to upload malicious files by se…Check if you run itEPSS 0.41%Apr 5, 2026
- High8.7VA MAX 8.3.4 contains a remote code execution vulnerability that allows authenticated attackers to execute arbitrary commands by injecting shell metacharacters into th…Check if you run itEPSS 0.66%Apr 5, 2026
- High8.8News Website Script 2.0.5 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through th…Check if you run itEPSS 0.40%Apr 5, 2026
- High7.1SuiteCRM 7.10.7 contains a time-based SQL injection vulnerability in the record parameter of the Users module DetailView action that allows authenticated attackers to…Check if you run itEPSS 0.34%Apr 5, 2026
- High8.8ResourceSpace 8.6 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through th…Check if you run itEPSS 0.42%Apr 5, 2026
- Low2.1A security vulnerability has been detected in PHPGurukul Online Shopping Portal Project 2.1.Check if you run itEPSS 0.32%Apr 5, 2026
- Low2.1A vulnerability was identified in CodeAstro Online Classroom 1.0.Check if you run itEPSS 0.32%Apr 5, 2026