Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3A vulnerability was identified in SourceCodester Web-based Pharmacy Product Management System 1.0.Check if you run itEPSS 0.39%Mar 12, 2026
- Low2.1A security vulnerability has been detected in itsourcecode Payroll Management System 1.0.Check if you run itEPSS 0.47%Mar 12, 2026
- Low2.0A weakness has been identified in Campcodes Division Regional Athletic Meet Game Result Matrix System 2.1.Check if you run itEPSS 0.34%Mar 12, 2026
- Low2.0A security flaw has been discovered in Campcodes Division Regional Athletic Meet Game Result Matrix System 2.1.Check if you run itEPSS 0.34%Mar 12, 2026
- Low2.1A vulnerability was determined in itsourcecode University Management System 1.0.Check if you run itEPSS 0.47%Mar 12, 2026
- Medium5.5A vulnerability was found in itsourcecode Online Doctor Appointment System 1.0.Check if you run itEPSS 0.61%Mar 12, 2026
- Medium5.5A vulnerability has been found in itsourcecode Online Doctor Appointment System 1.0.Check if you run itEPSS 0.61%Mar 12, 2026
- Medium5.5A vulnerability was detected in FeMiner wms up to 1.0.Check if you run itEPSS 0.43%Mar 12, 2026
- Critical9.9Winter is a free, open-source content management system (CMS) based on the Laravel PHP framework.Check if you run itEPSS 0.86%Mar 11, 2026
- Medium5.4OpenEMR is a free and open source electronic health records and medical practice management application.Check if you run itEPSS 0.67%Mar 11, 2026
- Critical9.8WeGIA is a web manager for charitable institutions.Check if you run itEPSS 0.52%Mar 11, 2026
- High8.8WeGIA is a web manager for charitable institutions.Check if you run itEPSS 0.48%Mar 11, 2026
- Medium6.9WeGIA is a web manager for charitable institutions.Check if you run itEPSS 0.54%Mar 11, 2026
- High8.7ARMBot contains an unrestricted file upload vulnerability in upload.php that allows unauthenticated attackers to upload arbitrary files by manipulating the file parame…Check if you run itEPSS 0.73%Mar 11, 2026
- Critical9.3FileThingie 2.5.7 contains an arbitrary file upload vulnerability that allows attackers to upload malicious files by sending ZIP archives through the ft2.php endpoint.Check if you run itEPSS 0.92%Mar 11, 2026
- Medium6.9Craft is a content management system (CMS).Check if you run itEPSS 0.26%Mar 11, 2026
- High8.8GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses tracking and software auditing.Check if you run itEPSS 0.32%Mar 11, 2026
- Low2.0A vulnerability was detected in PHPEMS 11.0.Check if you run itEPSS 0.34%Mar 11, 2026
- Medium5.5A vulnerability was determined in itsourcecode University Management System 1.0.Check if you run itEPSS 0.59%Mar 11, 2026
- High8.1The divi-booster WordPress plugin before 5.0.2 does not have authorization and CSRF checks in one of its fixing function, allowing unauthenticated users to modify stor…Check if you run itEPSS 0.25%Mar 11, 2026
- High8.8The Royal Addons for Elementor plugin for WordPress is vulnerable to arbitrary file upload in all versions up to, and including, 1.7.1049.Patch nowKEVEPSS 0.49%Mar 11, 2026
- Medium5.3LinkAce is a self-hosted archive to collect website links.Check if you run itEPSS 0.29%Mar 10, 2026
- Medium6.5LinkAce is a self-hosted archive to collect website links.Check if you run itEPSS 0.39%Mar 10, 2026
- High8.8GetSimple CMS is a content management system.Check if you run itEPSS 0.33%Mar 10, 2026
- Medium6.1A Stored Cross-Site Scripting (XSS) vulnerability exists in the PluXml article comments feature for PluXml versions 5.8.22 and earlier.Check if you run itEPSS 0.23%Mar 10, 2026