Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8Open Source Point of Sale is a web based point-of-sale application written in PHP using CodeIgniter framework.Check if you run itEPSS 0.48%Mar 20, 2026
- Medium6.4ChurchCRM is an open-source church management system.Check if you run itEPSS 0.39%Mar 20, 2026
- Critical9.1Admidio is an open-source user management solution.Check if you run itEPSS 0.50%Mar 20, 2026
- Medium6.8Admidio is an open-source user management solution.Check if you run itEPSS 0.48%Mar 20, 2026
- Critical9.3Xerte Online Toolkits versions 3.14 and earlier contain an unauthenticated arbitrary file upload vulnerability in the template import functionality that allows remote…Check if you run itEPSS 2.00%Mar 20, 2026
- High8.8Admidio is an open-source user management solution.Check if you run itEPSS 0.99%Mar 20, 2026
- Medium6.5Admidio is an open-source user management solution.Check if you run itEPSS 0.35%Mar 19, 2026
- Medium5.7Admidio is an open-source user management solution.Check if you run itEPSS 0.18%Mar 19, 2026
- Medium5.7Admidio is an open-source user management solution.Check if you run itEPSS 0.18%Mar 19, 2026
- High7.2SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application.Check if you run itEPSS 0.93%Mar 19, 2026
- Critical9.3FreeScout is a free help desk and shared inbox built with PHP's Laravel framework.Check if you run itEPSS 0.64%Mar 19, 2026
- High8.5FreeScout is a free help desk and shared inbox built with PHP's Laravel framework.Check if you run itEPSS 0.33%Mar 19, 2026
- High8.1FreeScout is a free help desk and shared inbox built with PHP's Laravel framework.Check if you run itEPSS 0.45%Mar 19, 2026
- Medium6.5OpenEMR is a free and open source electronic health records and medical practice management application.Check if you run itEPSS 0.70%Mar 19, 2026
- Medium5.1Location Aware Sensor System by Linkit ONE, up to commit f06bd20 (2023-04-26), contains a reflected cross-site scripting vulnerability in the PM25.php file that allows…Check if you run itEPSS 0.58%Mar 19, 2026
- High8.8Devome GRR v4.5.0 was discovered to contain multiple authenticated SQL injection vulnerabilities in the include/session.inc.php file via the referer and user-agent.Check if you run itEPSS 0.47%Mar 19, 2026
- Critical9.8Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThimPress BuilderPress builderpress allows PHP…Check if you run itEPSS 0.62%Mar 19, 2026
- Medium6.4The Info Cards – Add Text and Media in Card Layouts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'btnUrl' parameter within the Info Cards…Check if you run itEPSS 0.37%Mar 19, 2026
- High8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ovatheme Tripgo tripgo allows PHP Local File I…Check if you run itEPSS 0.58%Mar 19, 2026
- High8.8The Photo Gallery, Sliders, Proofing and Themes – NextGEN Gallery plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.0.…Check if you run itEPSS 0.47%Mar 18, 2026
- Low1.9A flaw has been found in itsourcecode University Management System 1.0.Check if you run itEPSS 0.36%Mar 18, 2026
- Low2.0A vulnerability was detected in Portabilis i-Educar 2.11.Check if you run itEPSS 0.34%Mar 18, 2026
- High8.8LDAP Account Manager (LAM) is a webfrontend for managing entries (e.g.Check if you run itEPSS 0.80%Mar 18, 2026
- High8.8LDAP Account Manager (LAM) is a webfrontend for managing entries (e.g.Check if you run itEPSS 0.69%Mar 18, 2026
- Medium5.5A vulnerability was identified in code-projects Simple Food Order System 1.0.Check if you run itEPSS 0.59%Mar 17, 2026