Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX ProLingua prolingua allows PHP Local…Check if you run itEPSS 0.50%Mar 25, 2026
- High8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Nelson nelson allows PHP Local File I…Check if you run itEPSS 0.50%Mar 25, 2026
- High8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Mr.Check if you run itEPSS 0.50%Mar 25, 2026
- High8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes Lella lella allows PHP Local Fil…Check if you run itEPSS 0.50%Mar 25, 2026
- High8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes Laurent laurent allows PHP Local…Check if you run itEPSS 0.50%Mar 25, 2026
- High8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Hypnotherapy hypnotherapy allows…Check if you run itEPSS 0.50%Mar 25, 2026
- High8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Greenville greenville allows PHP…Check if you run itEPSS 0.50%Mar 25, 2026
- High8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Good Homes good-homes allows PHP Loca…Check if you run itEPSS 0.50%Mar 25, 2026
- High8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Elated-Themes Gaspard gaspard allows PHP Local…Check if you run itEPSS 0.50%Mar 25, 2026
- Medium4.8A Reflected Cross Site Scripting (XSS) vulnerability has been found in Support Board v3.7.7.Check if you run itEPSS 0.23%Mar 25, 2026
- High8.7A SQL Injection vulnerability has been found in Support Board v3.7.7.Patch nowKEVEPSS 0.24%Mar 25, 2026
- Medium5.5A vulnerability was found in code-projects Simple Laundry System 1.0.Check if you run itEPSS 0.57%Mar 25, 2026
- Low2.1A vulnerability has been found in itsourcecode College Management System 1.0.Check if you run itEPSS 0.32%Mar 25, 2026
- Low2.1A flaw has been found in SourceCodester Sales and Inventory System 1.0.Check if you run itEPSS 0.47%Mar 25, 2026
- Low2.1A vulnerability was detected in SourceCodester Sales and Inventory System 1.0.Check if you run itEPSS 0.47%Mar 25, 2026
- Low2.1A security vulnerability has been detected in SourceCodester Sales and Inventory System 1.0.Check if you run itEPSS 0.47%Mar 24, 2026
- Low2.1A weakness has been identified in SourceCodester Sales and Inventory System 1.0.Check if you run itEPSS 0.37%Mar 24, 2026
- Low2.1A security flaw has been discovered in SourceCodester Sales and Inventory System 1.0.Check if you run itEPSS 0.37%Mar 24, 2026
- Medium6.3league/commonmark is a PHP Markdown parser.Check if you run itEPSS 0.32%Mar 24, 2026
- Medium6.9An unauthenticated attacker can exploit the Frontend 'validate' action to blindly instantiate arbitrary PHP classes.Check if you run itEPSS 0.27%Mar 24, 2026
- High8.7A low privilege Zabbix user with API access can exploit a blind SQL injection vulnerability in include/classes/api/CApiService.php to execute arbitrary SQL selects via…Check if you run itEPSS 3.94%Mar 24, 2026
- High8.3Wallos is an open-source, self-hostable personal subscription tracker.Check if you run itEPSS 0.53%Mar 24, 2026
- High7.7Wallos is an open-source, self-hostable personal subscription tracker.Check if you run itEPSS 0.40%Mar 24, 2026
- Medium5.4JiZhiCMS v2.5.6 and before contains a Stored Cross-Site Scripting (XSS) vulnerability in the release function within app/home/c/UserController.php.Check if you run itEPSS 0.28%Mar 24, 2026
- High8.8DedeCMS v5.7.118 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability in /sys_task_add.php.Check if you run itEPSS 0.21%Mar 24, 2026