Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low2.7SourceCodester Online Employees Work From Home Attendance System v1.0 is vulnerable to SQL Injection in the file /wfh_attendance/admin/attendance_list.php.Check if you run itEPSS 0.19%Apr 14, 2026
- Low2.7SourceCodester Online Employees Work From Home Attendance System v1.0 is vulnerable to SQL Injection in the file /wfh_attendance/admin/manage_department.php.Check if you run itEPSS 0.19%Apr 14, 2026
- Low2.7SourceCodester Online Employees Work From Home Attendance System v1.0 is vulnerable to SQL Injection in the file /wfh_attendance/admin/manage_employee.php.Check if you run itEPSS 0.19%Apr 14, 2026
- Low2.7SourceCodester Online Employees Work From Home Attendance System v1.0 is vulnerable to SQL Injection in the file /wfh_attendance/admin/view_employee.php.Check if you run itEPSS 0.19%Apr 14, 2026
- Low2.7SourceCodester Online Employees Work From Home Attendance System v1.0 is vulnerable to SQL Injection in the file /wfh_attendance/admin/view_att.php.Check if you run itEPSS 0.19%Apr 14, 2026
- Low2.7Sourcecodester Storage Unit Rental Management System v1.0 is vulnerable to SQL in the file /storage/admin/maintenance/manage_pricing.php.Check if you run itEPSS 0.19%Apr 14, 2026
- Low2.7Sourcecodester Storage Unit Rental Management System v1.0 is vulnerable to SQL injection in the file /storage/admin/tenants/view_details.php.Check if you run itEPSS 0.19%Apr 14, 2026
- Low2.7SourceCodester Storage Unit Rental Management System v1.0 is vulnerable to SQL Injection in the file /storage/admin/rents/manage_rent.php.Check if you run itEPSS 0.19%Apr 14, 2026
- Low2.7SourceCodester Storage Unit Rental Management System v1.0 is vulnerable to SQL Injection in the file /storage/admin/maintenance/manage_storage_unit.php.Check if you run itEPSS 0.19%Apr 14, 2026
- Medium6.5A Local File Inclusion (LFI) vulnerability in the NFSen module (nfsen.inc.php) of LibreNMS 22.11.0-23-gd091788f2 allows authenticated attackers to include arbitrary PH…Check if you run itEPSS 0.27%Apr 14, 2026
- Medium6.1Leaflet versions up to and including 1.9.4 are vulnerable to Cross-Site Scripting (XSS) via the bindPopup() method.Check if you run itEPSS 0.19%Apr 14, 2026
- Medium4.6A side-channel vulnerability exists in the implementation of BIP-39 mnemonic processing, as observed in Trezor One v1.13.0 to v1.14.0, Trezor T v1.13.0 to v1.14.0, and…Check if you run itEPSS 0.24%Apr 14, 2026
- Critical9.8A vulnerability was identified in OpenAI Codex CLI v0.23.0 and before that enables code execution through malicious MCP (Model Context Protocol) configuration files.Check if you run itEPSS 6.58%Apr 14, 2026
- Critical9.8An issue in Hostbill v.2025-11-24 and 2025-12-01 allows a remote attacker to execute arbitrary code and escalate privileges via the CSV registration fieldCheck if you run itEPSS 0.66%Apr 14, 2026
- Critical9.1The OECH1 prefix encoding is intended to obfuscate values across the OpenEdge platform.Check if you run itEPSS 0.22%Apr 14, 2026
- High8.2A vulnerability in the AdminServer component of OpenEdge on all supported platforms grants its authenticated users OS-level access to the server through the adopted au…Check if you run itEPSS 0.33%Apr 14, 2026
- High7.4.NET misconfiguration: use of impersonation vulnerability in upKeeper Solutions upKeeper Instant Privilege Access allows Hijacking a Privileged Thread of Execution.Thi…Check if you run itEPSS 0.27%Apr 14, 2026
- Critical9.0Improper neutralization of argument delimiters in a command ('argument injection') vulnerability in upKeeper Solutions upKeeper Instant Privilege Access allows Hijacki…Check if you run itEPSS 0.33%Apr 14, 2026
- Critical9.1In Eclipse Jetty, the HTTP/1.1 parser is vulnerable to request smuggling when chunk extensions are used, similar to the "funky chunks" techniques outlined here: * http…Check if you run itEPSS 1.31%Apr 14, 2026
- Medium5.4Kiuwan SAST improperly authorizes SSO logins for locally disabled mapped user accounts, allowing disabled users to continue accessing the application.Check if you run itEPSS 0.19%Apr 14, 2026
- High7.8Microsoft Defender Insufficient Granularity of Access Control VulnerabilityPatch nowKEVEPSS 6.75%Apr 14, 2026
- Critical9.8Microsoft Internet Key Exchange (IKE) Service Extensions Double Free VulnerabilityPatch nowKEVEPSS 77.05%Apr 14, 2026
- Medium5.3MCPHub in versions below 0.11.0 is vulnerable to authentication bypass.Check if you run itEPSS 0.35%Apr 14, 2026
- Critical9.8Fortinet FortiSandbox OS Command Injection VulnerabilityPatch nowKEVEPSS 93.19%Apr 14, 2026
- Medium4.3The Eventin – Events Calendar, Event Booking, Ticket & Registration (AI Powered) plugin for WordPress is vulnerable to unauthorized access of data due to a improper ca…Check if you run itEPSS 0.18%Apr 14, 2026
Sort