Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.5A security flaw has been discovered in MacCMS 2025.1000.4052.Check if you run itEPSS 0.65%Mar 23, 2026
- Low2.1A vulnerability was detected in code-projects Exam Form Submission 1.0.Check if you run itEPSS 0.45%Mar 22, 2026
- Low2.0A vulnerability has been found in code-projects Simple Gym Management System up to 1.0.Check if you run itEPSS 0.35%Mar 22, 2026
- Medium6.9PHPRunner 10.1 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the dashboard name field.Check if you run itEPSS 0.17%Mar 22, 2026
- Medium5.5A vulnerability was detected in projectworlds Online Notes Sharing System 1.0.Check if you run itEPSS 0.41%Mar 22, 2026
- Low2.1A vulnerability was detected in code-projects Simple Food Ordering System 1.0.Check if you run itEPSS 0.47%Mar 22, 2026
- High7.1i-doit CMDB 1.12 contains an arbitrary file download vulnerability that allows authenticated attackers to download sensitive files by manipulating the file parameter in index.php.Check if you run itEPSS 0.38%Mar 21, 2026
- High8.8ownDMS 4.7 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the IMG parameter.Check if you run itEPSS 0.33%Mar 21, 2026
- High8.7phpTransformer 2016.9 contains a directory traversal vulnerability that allows unauthenticated attackers to access arbitrary files by manipulating the path parameter.Check if you run itEPSS 1.11%Mar 21, 2026
- High8.8phpTransformer 2016.9 contains an SQL injection vulnerability that allows remote attackers to execute arbitrary SQL queries by injecting malicious code through the idn…Check if you run itEPSS 0.38%Mar 21, 2026
- High7.1Green CMS 2.x contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code through the cat parameter.Check if you run itEPSS 0.35%Mar 21, 2026
- Low2.1A flaw has been found in PbootCMS up to 3.2.12.Check if you run itEPSS 0.35%Mar 21, 2026
- Low2.1A weakness has been identified in PbootCMS up to 3.2.12.Check if you run itEPSS 0.45%Mar 21, 2026
- Low2.1A security flaw has been discovered in PbootCMS up to 3.2.12.Check if you run itEPSS 0.38%Mar 21, 2026
- Medium5.3The Punnel – Landing Page Builder plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.3.1.Check if you run itEPSS 0.51%Mar 21, 2026
- Medium5.3The Smarter Analytics plugin for WordPress is vulnerable to unauthorized access in all versions up to, and including, 2.0.Check if you run itEPSS 0.48%Mar 21, 2026
- Medium6.4The Sherk Custom Post Type Displays plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'title' shortcode attribute in all versions up to, and in…Check if you run itEPSS 0.33%Mar 21, 2026
- Medium6.4The Contact List plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the '_cl_map_iframe' parameter in all versions up to, and including, 3.0.18.Check if you run itEPSS 0.37%Mar 21, 2026
- Medium4.9The EmailKit – Email Customizer for WooCommerce & WP plugin for WordPress is vulnerable to arbitrary file read via path traversal in all versions up to, and including, 1.6.3.Check if you run itEPSS 0.61%Mar 21, 2026
- High7.2The Injection Guard plugin for WordPress is vulnerable to Stored Cross-Site Scripting via malicious query parameter names in all versions up to and including 1.2.9.Check if you run itEPSS 0.55%Mar 21, 2026
- Medium5.5A vulnerability was identified in PbootCMS up to 3.2.12.Check if you run itEPSS 0.43%Mar 20, 2026
- High7.5SimpleJWT is a simple JSON web token library written in PHP.Check if you run itEPSS 0.56%Mar 20, 2026
- High7.2An issue in the component /Controllers/RestController.php of DreamFactory Core v1.0.3 allows attackers to execute a directory traversal via an unsanitized URI path.Check if you run itEPSS 0.90%Mar 20, 2026
- Medium5.1XinLiangCoder php_api_doc through commit 1ce5bbf contains a reflected cross-site scripting vulnerability in list_method.php that allows remote attackers to execute arb…Check if you run itEPSS 0.34%Mar 20, 2026
- Low2.1A vulnerability has been found in itsourcecode College Management System 1.0.Check if you run itEPSS 0.33%Mar 20, 2026