Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low2.0A security vulnerability has been detected in code-projects Simple Flight Ticket Booking System 1.0.Check if you run itEPSS 0.50%Mar 8, 2026
- Medium5.5A weakness has been identified in code-projects Simple Flight Ticket Booking System 1.0.Check if you run itEPSS 0.59%Mar 8, 2026
- Medium5.5A security flaw has been discovered in code-projects Simple Flight Ticket Booking System 1.0.Check if you run itEPSS 0.59%Mar 8, 2026
- Medium5.5A vulnerability was found in code-projects Simple Flight Ticket Booking System 1.0.Check if you run itEPSS 0.59%Mar 8, 2026
- Low2.1A vulnerability was detected in SourceCodester Loan Management System 1.0.Check if you run itEPSS 0.49%Mar 8, 2026
- Medium5.5A vulnerability has been found in SourceCodester Modern Image Gallery App 1.0.Check if you run itEPSS 0.92%Mar 8, 2026
- Medium5.1league/commonmark is a PHP Markdown parser.Check if you run itEPSS 0.25%Mar 7, 2026
- High7.2The Meta Box plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the 'ajax_delete_file' function in all versions…Check if you run itEPSS 2.39%Mar 7, 2026
- Medium6.9Wallos is an open-source, self-hostable personal subscription tracker.Check if you run itEPSS 0.35%Mar 7, 2026
- Medium5.3Wallos is an open-source, self-hostable personal subscription tracker.Check if you run itEPSS 0.39%Mar 7, 2026
- High7.2The Easy PHP Settings plugin for WordPress is vulnerable to PHP Code Injection in all versions up to, and including, 1.0.4 via the method.Check if you run itEPSS 0.70%Mar 7, 2026
- High7.5The JS Archive List plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 6.1.7 via the 'included' shortcode attribute.Check if you run itEPSS 0.42%Mar 7, 2026
- Low2.1Group-Office is an enterprise customer relationship management and groupware tool.Check if you run itEPSS 0.27%Mar 6, 2026
- High8.8Vito is a self-hosted web application that helps manage servers and deploy PHP applications into production servers.Check if you run itEPSS 0.61%Mar 6, 2026
- Medium6.9OOP CMS BLOG 1.0 contains a cross-site request forgery vulnerability that allows unauthenticated attackers to create administrative user accounts by crafting malicious…Check if you run itEPSS 0.16%Mar 6, 2026
- High8.8OOP CMS BLOG 1.0 contains SQL injection vulnerabilities that allow unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through multi…Check if you run itEPSS 0.37%Mar 6, 2026
- High8.8PlayJoom 0.10.1 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the…Check if you run itEPSS 0.24%Mar 6, 2026
- High8.8ServerZilla 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the email parameter.Check if you run itEPSS 0.29%Mar 6, 2026
- High8.8Nominas 0.27 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the use…Check if you run itEPSS 0.32%Mar 6, 2026
- High8.8GPS Tracking System 2.12 contains an SQL injection vulnerability that allows unauthenticated attackers to bypass authentication by injecting SQL code through the usern…Check if you run itEPSS 0.29%Mar 6, 2026
- High7.1Facturation System 1.0 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code through…Check if you run itEPSS 0.20%Mar 6, 2026
- Medium6.9Easyndexer 1.0 contains a cross-site request forgery vulnerability that allows unauthenticated attackers to create administrative accounts by submitting forged POST requests.Check if you run itEPSS 0.13%Mar 6, 2026
- High8.8Data Center Audit 2.6.2 contains an SQL injection vulnerability in the username parameter of dca_login.php that allows unauthenticated attackers to execute arbitrary SQL queries.Check if you run itEPSS 0.24%Mar 6, 2026
- High8.8Webiness Inventory 2.3 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code throu…Check if you run itEPSS 0.24%Mar 6, 2026
- Medium6.9Surreal ToDo 0.6.1.2 contains a local file inclusion vulnerability that allows unauthenticated attackers to read arbitrary files by manipulating the content parameter.Check if you run itEPSS 0.81%Mar 6, 2026