Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low2.7SourceCodester Online Employees Work From Home Attendance System v1.0 is vulnerable to SQL Injection in the file /wfh_attendance/admin/manage_department.php.Check if you run itEPSS 0.31%Apr 14, 2026
- Low2.7SourceCodester Online Employees Work From Home Attendance System v1.0 is vulnerable to SQL Injection in the file /wfh_attendance/admin/manage_employee.php.Check if you run itEPSS 0.31%Apr 14, 2026
- Low2.7SourceCodester Online Employees Work From Home Attendance System v1.0 is vulnerable to SQL Injection in the file /wfh_attendance/admin/view_employee.php.Check if you run itEPSS 0.31%Apr 14, 2026
- Low2.7SourceCodester Online Employees Work From Home Attendance System v1.0 is vulnerable to SQL Injection in the file /wfh_attendance/admin/view_att.php.Check if you run itEPSS 0.31%Apr 14, 2026
- Low2.7Sourcecodester Storage Unit Rental Management System v1.0 is vulnerable to SQL in the file /storage/admin/maintenance/manage_pricing.php.Check if you run itEPSS 0.32%Apr 14, 2026
- Low2.7Sourcecodester Storage Unit Rental Management System v1.0 is vulnerable to SQL injection in the file /storage/admin/tenants/view_details.php.Check if you run itEPSS 0.31%Apr 14, 2026
- Low2.7SourceCodester Storage Unit Rental Management System v1.0 is vulnerable to SQL Injection in the file /storage/admin/rents/manage_rent.php.Check if you run itEPSS 0.31%Apr 14, 2026
- Low2.7SourceCodester Storage Unit Rental Management System v1.0 is vulnerable to SQL Injection in the file /storage/admin/maintenance/manage_storage_unit.php.Check if you run itEPSS 0.31%Apr 14, 2026
- High8.2A vulnerability in the AdminServer component of OpenEdge on all supported platforms grants its authenticated users OS-level access to the server through the adopted au…Check if you run itEPSS 0.33%Apr 14, 2026
- High8.7A vulnerability has been identified in RUGGEDCOM CROSSBOW Secure Access Manager Primary (SAM-P) (All versions < V5.8).Check if you run itEPSS 0.42%Apr 14, 2026
- High7.2The Smart Post Show – Post Grid, Post Carousel & Slider, and List Category Posts plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and…Check if you run itEPSS 0.69%Apr 14, 2026
- Medium4.4The WholeSale Products Dynamic Pricing Management WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up t…Check if you run itEPSS 0.24%Apr 14, 2026
- High7.2The BackWPup plugin for WordPress is vulnerable to Local File Inclusion via the parameter of the REST endpoint in all versions up to, and including, 5.6.6 due to a non…Check if you run itEPSS 1.03%Apr 14, 2026
- High7.2The Form Maker by 10Web plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Matrix field (Text Box input type) in form submissions in all version…Check if you run itEPSS 0.40%Apr 14, 2026
- Medium5.1MaxKB is an open-source AI assistant for enterprise.Check if you run itEPSS 0.28%Apr 14, 2026
- Medium5.3MaxKB is an open-source AI assistant for enterprise.Check if you run itEPSS 0.45%Apr 14, 2026
- Medium6.9MaxKB is an open-source AI assistant for enterprise.Check if you run itEPSS 0.29%Apr 14, 2026
- High8.7Craft Commerce is an ecommerce platform for Craft CMS.Check if you run itEPSS 0.46%Apr 13, 2026
- High7.7Craft Commerce is an ecommerce platform for Craft CMS.Check if you run itEPSS 0.60%Apr 13, 2026
- Medium5.4EspoCRM is an open source customer relationship management application.Check if you run itEPSS 0.25%Apr 13, 2026
- High7.1Pachno 1.0.6 contains an authentication bypass vulnerability in the runSwitchUser() action that allows authenticated low-privilege users to escalate privileges by mani…Check if you run itEPSS 0.53%Apr 13, 2026
- Medium5.3Pachno 1.0.6 contains a cross-site request forgery vulnerability that allows attackers to perform arbitrary actions in authenticated user context by exploiting missing…Check if you run itEPSS 0.15%Apr 13, 2026
- High8.9A security vulnerability has been detected in Totolink A7100RU 7.4cu.2313_b20191024.Check if you run itEPSS 3.25%Apr 13, 2026
- Low2.7Sourcecodester Online Thesis Archiving System v1.0 is vulnerable to SQL injection in the file /otas/admin/curriculum/manage_curriculum.php.Check if you run itEPSS 0.31%Apr 13, 2026
- Low1.9A weakness has been identified in code-projects Simple Content Management System 1.0.Check if you run itEPSS 0.35%Apr 13, 2026