Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8Rmedia SMS 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to extract database information by injecting SQL code through the gid parameter.Check if you run itEPSS 0.25%Mar 6, 2026
- High8.8Pedidos 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the 'q' parameter.Check if you run itEPSS 0.30%Mar 6, 2026
- High8.8EdTv 2 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the 'id' parameter.Check if you run itEPSS 0.29%Mar 6, 2026
- High8.8DoceboLMS 1.2 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the id, idC, a…Check if you run itEPSS 0.14%Mar 6, 2026
- High8.7AMPPS 2.7 contains a denial of service vulnerability that allows remote attackers to crash the service by sending malformed data to the default HTTP port.Check if you run itEPSS 0.35%Mar 6, 2026
- Medium5.3Precurio Intranet Portal 2.0 contains a cross-site request forgery vulnerability that allows unauthenticated attackers to create administrative user accounts by submit…Check if you run itEPSS 0.23%Mar 6, 2026
- High8.8Net-Billetterie 2.9 contains an SQL injection vulnerability in the login parameter of login.inc.php that allows unauthenticated attackers to execute arbitrary SQL queries.Check if you run itEPSS 0.25%Mar 6, 2026
- High8.8Meneame English Pligg 5.8 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code th…Check if you run itEPSS 0.25%Mar 6, 2026
- High7.1Galaxy Forces MMORPG 0.5.8 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code thr…Check if you run itEPSS 0.25%Mar 6, 2026
- High8.7EverSync 0.5 contains an arbitrary file download vulnerability that allows unauthenticated attackers to access sensitive files by requesting them directly from the files directory.Check if you run itEPSS 0.28%Mar 6, 2026
- High8.8BitZoom 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the roll…Check if you run itEPSS 0.26%Mar 6, 2026
- High7.12-Plan Team 1.0.4 contains an arbitrary file upload vulnerability that allows authenticated attackers to upload executable PHP files by sending multipart form data to…Check if you run itEPSS 0.47%Mar 6, 2026
- High8.8Warranty Tracking System 11.06.3 contains an SQL injection vulnerability that allows attackers to execute arbitrary SQL queries by injecting malicious code through the…Check if you run itEPSS 0.24%Mar 6, 2026
- Medium5.1QuickCMS is vulnerable to Cross-Site Request Forgery across multiple endpoints.Check if you run itEPSS 0.22%Mar 6, 2026
- Critical9.4An attacker may access restricted filesystem areas on the device via the CROWN REST interface due to incomplete whitelist enforcement.Check if you run itEPSS 0.69%Mar 6, 2026
- Medium6.1SiYuan is a personal knowledge management system.Check if you run itEPSS 0.64%Mar 6, 2026
- High7.5SVGO, short for SVG Optimizer, is a Node.js library and command-line application for optimizing SVG files.Check if you run itEPSS 0.64%Mar 6, 2026
- High8.7jackson-core contains core low-level incremental ("streaming") parser and generator abstractions used by Jackson Data Processor.Check if you run itEPSS 0.57%Mar 6, 2026
- High8.7PJSIP is a free and open source multimedia communication library written in C.Check if you run itEPSS 0.33%Mar 6, 2026
- Medium4.3melange allows users to build apk packages using declarative pipelines.Check if you run itEPSS 0.23%Mar 6, 2026
- High8.9Nuclio is a "Serverless" framework for Real-Time Events and Data Processing.Check if you run itEPSS 2.42%Mar 6, 2026
- Medium6.1changedetection.io is a free open source web page change detection tool.Check if you run itEPSS 0.29%Mar 6, 2026
- High7.7Authlib is a Python library which builds OAuth and OpenID Connect servers.Check if you run itEPSS 0.50%Mar 6, 2026
- High7.8Natro Macro is an open-source Bee Swarm Simulator macro written in AutoHotkey.Check if you run itEPSS 0.13%Mar 6, 2026
- High8.0Natro Macro is an open-source Bee Swarm Simulator macro written in AutoHotkey.Check if you run itEPSS 0.22%Mar 6, 2026
Sort