Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low2.1A weakness has been identified in SourceCodester Sales and Inventory System 1.0.Check if you run itEPSS 0.37%Mar 24, 2026
- Low2.1A security flaw has been discovered in SourceCodester Sales and Inventory System 1.0.Check if you run itEPSS 0.37%Mar 24, 2026
- Medium6.3league/commonmark is a PHP Markdown parser.Check if you run itEPSS 0.32%Mar 24, 2026
- Medium6.9An unauthenticated attacker can exploit the Frontend 'validate' action to blindly instantiate arbitrary PHP classes.Check if you run itEPSS 0.27%Mar 24, 2026
- High8.7A low privilege Zabbix user with API access can exploit a blind SQL injection vulnerability in include/classes/api/CApiService.php to execute arbitrary SQL selects via…Check if you run itEPSS 3.94%Mar 24, 2026
- High8.3Wallos is an open-source, self-hostable personal subscription tracker.Check if you run itEPSS 0.53%Mar 24, 2026
- High7.7Wallos is an open-source, self-hostable personal subscription tracker.Check if you run itEPSS 0.40%Mar 24, 2026
- Medium5.4JiZhiCMS v2.5.6 and before contains a Stored Cross-Site Scripting (XSS) vulnerability in the release function within app/home/c/UserController.php.Check if you run itEPSS 0.28%Mar 24, 2026
- High8.8DedeCMS v5.7.118 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability in /sys_task_add.php.Check if you run itEPSS 0.21%Mar 24, 2026
- Medium6.5ConcreteCMS v9.4.7 contains a Denial of Service (DoS) vulnerability in the File Manager component.Check if you run itEPSS 0.44%Mar 24, 2026
- Medium6.5SQL injection in Solicitante::resetaSenha() in esiclivre/esiclivre v0.2.2 and earlier allows unauthenticated remote attackers to gain unauthorized access to sensitive…Check if you run itEPSS 0.38%Mar 24, 2026
- High8.7PhreeBooks ERP 5.2.3 contains a remote code execution vulnerability in the image manager that allows authenticated attackers to upload and execute arbitrary PHP files…Check if you run itEPSS 0.81%Mar 24, 2026
- High8.8eNdonesia Portal v8.7 contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code…Check if you run itEPSS 0.35%Mar 24, 2026
- High8.8Bootstrapy CMS contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code throug…Check if you run itEPSS 0.27%Mar 24, 2026
- High8.8Netartmedia Vlog System contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the…Check if you run itEPSS 0.27%Mar 24, 2026
- High8.8Inout Article Base CMS contains SQL injection vulnerabilities that allow unauthenticated attackers to manipulate database queries through the 'p' and 'u' parameters.Check if you run itEPSS 0.34%Mar 24, 2026
- High8.8Matrimony Website Script M-Plus contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to manipulate database queries by injecting SQL co…Check if you run itEPSS 0.34%Mar 24, 2026
- High7.1Meeplace Business Review Script contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious c…Check if you run itEPSS 0.30%Mar 24, 2026
- High8.8Zeeways Jobsite CMS contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'id'…Check if you run itEPSS 0.33%Mar 24, 2026
- Medium6.9phpFileManager 1.7.8 contains a local file inclusion vulnerability that allows unauthenticated attackers to read arbitrary files by manipulating the action, fm_current…Check if you run itEPSS 0.57%Mar 24, 2026
- High8.7PhreeBooks ERP 5.2.3 contains an arbitrary file upload vulnerability in the Image Manager component that allows authenticated attackers to upload malicious files by su…Check if you run itEPSS 0.91%Mar 24, 2026
- Medium5.5A weakness has been identified in itsourcecode Online Enrollment System 1.0.Check if you run itEPSS 0.41%Mar 24, 2026
- Low2.0A vulnerability has been found in projectworlds Lawyer Management System 1.0.Check if you run itEPSS 0.33%Mar 24, 2026
- Medium5.5A flaw has been found in SourceCodester Online Admission System 1.0.Check if you run itEPSS 0.41%Mar 24, 2026
- Medium5.5A vulnerability was detected in SourceCodester Online Library Management System 1.0.Check if you run itEPSS 0.41%Mar 24, 2026