Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.1A vulnerability in the web-based management interface of Cisco Secure FMC Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an…Check if you run itEPSS 0.40%Mar 4, 2026
- Medium6.5A vulnerability in the REST API of Cisco Secure FMC Software could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system.Check if you run itEPSS 0.38%Mar 4, 2026
- High8.8Ashop Shopping Cart Software contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through…Check if you run itEPSS 0.27%Mar 4, 2026
- High8.8FreeSMS 2.1.2 contains a boolean-based blind SQL injection vulnerability in the password parameter that allows unauthenticated attackers to bypass authentication by in…Check if you run itEPSS 0.52%Mar 4, 2026
- High7.1Tradebox 5.4 contains an SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code through the symbol parameter.Check if you run itEPSS 0.33%Mar 4, 2026
- High8.8NCrypted Jobgator contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the experi…Check if you run itEPSS 0.27%Mar 4, 2026
- High7.1PHPads 2.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the banne…Check if you run itEPSS 0.38%Mar 4, 2026
- Medium5.1Simple Job Script contains a cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating the job_type_value pa…Check if you run itEPSS 0.30%Mar 4, 2026
- High8.8Simple Job Script contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting malicious SQL code through the app_id parameter.Check if you run itEPSS 0.39%Mar 4, 2026
- High8.8Simple Job Script contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the employ…Check if you run itEPSS 0.33%Mar 4, 2026
- High8.8Simple Job Script contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the job_id parameter.Check if you run itEPSS 0.52%Mar 4, 2026
- High8.8Simple Job Script contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the landin…Check if you run itEPSS 0.42%Mar 4, 2026
- High8.7Multer is a node.js middleware for handling .Check if you run itEPSS 0.82%Mar 4, 2026
- Medium6.9Craft is a content management system (CMS).Check if you run itEPSS 0.32%Mar 4, 2026
- High8.6Craft is a content management system (CMS).Check if you run itEPSS 0.59%Mar 4, 2026
- Critical9.4Craft is a content management system (CMS).Check if you run itEPSS 1.19%Mar 4, 2026
- High8.7Craft is a content management system (CMS).Check if you run itEPSS 0.49%Mar 4, 2026
- High7.5Craft is a content management system (CMS).Check if you run itEPSS 0.66%Mar 4, 2026
- Medium5.4A vulnerability has been identified in the wireless encryption handling of Wi-Fi transmissions.Check if you run itEPSS 0.09%Mar 4, 2026
- Medium5.5Dell Device Management Agent (DDMA), versions prior to 26.02, contain an Improper Check for Unusual or Exceptional Conditions vulnerability.Check if you run itEPSS 0.14%Mar 4, 2026
- Critical9.8An issue in the HwRwDrv.sys component of Nil Hardware Editor Hardware Read & Write Utility v1.25.11.26 and earlier allows attackers to execute arbitrary read and write…Check if you run itEPSS 0.74%Mar 4, 2026
- High7.5An issue in DJI Mavic Mini, Spark, Mavic Air, Mini, Mini SE 0.1.00.0500 and below allows a remote attacker to cause a denial of service via the DJI Enhanced-WiFi trans…Check if you run itEPSS 0.43%Mar 4, 2026
- Medium4.4Dell Device Management Agent (DDMA), versions prior to 26.02, contain a Plaintext Storage of Password vulnerability.Check if you run itEPSS 0.12%Mar 4, 2026
- Medium5.32N Access Commander application version 3.4.2 and prior returns HTTP 500 Internal Server Error responses when receiving malformed or manipulated requests, indicating i…Check if you run itEPSS 0.22%Mar 4, 2026
- Medium6.02N Access Commander version 3.4.2 and prior improperly invalidates session tokens, allowing multiple session cookies to remain active after logout in web application.Check if you run itEPSS 0.29%Mar 4, 2026
Sort