Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3ChurchCRM is an open-source church management system.Check if you run itEPSS 0.27%Apr 13, 2026
- Low2.7Sourcecodester Online Thesis Archiving System v1.0 is vulnerable to SQL injection in the file /otas/admin/curriculum/manage_curriculum.php.Check if you run itEPSS 0.19%Apr 13, 2026
- Low2.7Sourcecodester Online Thesis Archiving System v1.0 is vulnerable to SQL injection in /otas/projects_per_department.php.Check if you run itEPSS 0.19%Apr 13, 2026
- High7.3Sourcecodester Online Thesis Archiving System v1.0 is vulnerale to SQL injection in the file /otas/view_archive.php.Check if you run itEPSS 0.17%Apr 13, 2026
- Medium5.8An issue was discovered in HAProxy before 3.3.6.Check if you run itEPSS 0.31%Apr 13, 2026
- Critical9.3Decidim is a participatory democracy framework.Check if you run itEPSS 0.36%Apr 13, 2026
- Medium5.3The bson_validate function may return early on specific inputs and incorrectly report success.Check if you run itEPSS 0.18%Apr 13, 2026
- Medium5.5A flaw has been found in SourceCodester Pharmacy Sales and Inventory System 1.0.Check if you run itEPSS 0.25%Apr 13, 2026
- Medium5.5A vulnerability was detected in SourceCodester Pharmacy Sales and Inventory System 1.0.Check if you run itEPSS 0.25%Apr 13, 2026
- High7.4A security vulnerability has been detected in UTT HiPER 1200GW up to 2.5.3-170306.Check if you run itEPSS 0.61%Apr 13, 2026
- Low1.9A weakness has been identified in code-projects Simple Content Management System 1.0.Check if you run itEPSS 0.30%Apr 13, 2026
- Low2.7Sourcecodester Online Resort Management System v1.0 is vulnerable to SQL injection in /orms/admin/rooms/view_room.php.Check if you run itEPSS 0.24%Apr 13, 2026
- Low2.7Sourcecodester Online Resort Management System v1.0 is vulnerable to SQL injection in /orms/admin/reservations/view_details.php.Check if you run itEPSS 0.19%Apr 13, 2026
- High7.5Improper Neutralization of Special Elements used in an OS Command vulnerability allows OS Command Injection via Event Response execution.Check if you run itEPSS 1.07%Apr 13, 2026
- High8.7Improper Neutralization of Special Elements used in an SQL Command vulnerability allows SQL Injection via custom fields.Check if you run itEPSS 0.25%Apr 13, 2026
- High8.7Improper Neutralization of Special Elements used in an SQL Command vulnerability allows SQL Injection via module search.Check if you run itEPSS 0.34%Apr 13, 2026
- Low2.1Improper Neutralization of Input During Web Page Generation vulnerability allows Stored Cross-Site Scripting via event comments.Check if you run itEPSS 0.18%Apr 13, 2026
- High8.4Missing Authorization vulnerability allows Exposure of Sensitive Information via configuration endpoint.Check if you run itEPSS 0.27%Apr 13, 2026
- High8.7Improper Neutralization of Special Elements used in an OS Command vulnerability allows OS Command Injection via WebServerModuleDebug.Check if you run itEPSS 0.94%Apr 13, 2026
- High8.7Improper Neutralization of Special Elements used in an OS Command vulnerability allows OS Command Injection via Network Report.Check if you run itEPSS 0.94%Apr 13, 2026
- High8.6Unrestricted Upload of File with Dangerous Type vulnerability allows Remote Code Execution via file upload.Check if you run itEPSS 0.43%Apr 13, 2026
- High8.4Nitro PDF Pro for Windows 14.41.1.4 contains a heap use-after-free vulnerability in the implementation of the JavaScript method this.mailDoc().Check if you run itEPSS 0.20%Apr 13, 2026
- High7.5Nitro PDF Pro before 14.43 for Windows contains a NULL pointer dereference vulnerability in the JavaScript implementation of app.alert().Check if you run itEPSS 0.43%Apr 13, 2026
- High7.5A NULL pointer dereference in Nitro PDF Pro for Windows v14.41.1.4 allows attackers to cause a Denial of Service (DoS) via a crafted XFA packet.Check if you run itEPSS 0.44%Apr 13, 2026
- Medium5.4Cross-Site Scripting vulnerability in the Snipe-IT web-based asset management system v8.3.0 to up and including v8.3.1 allows authenticated attacker with lowest privil…Check if you run itEPSS 0.23%Apr 13, 2026
Sort