Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low2.1A vulnerability has been found in code-projects Online Application System for Admission 1.0.Check if you run itEPSS 0.32%Apr 6, 2026
- Low1.9A vulnerability was detected in code-projects Online Shoe Store 1.0.Check if you run itEPSS 0.35%Apr 6, 2026
- Low1.9A security flaw has been discovered in Cyber-III Student-Management-System up to 1a938fa61e9f735078e9b291d2e6215b4942af3f.Check if you run itEPSS 0.35%Apr 6, 2026
- Low1.9A vulnerability was identified in Cyber-III Student-Management-System up to 1a938fa61e9f735078e9b291d2e6215b4942af3f.Check if you run itEPSS 0.35%Apr 6, 2026
- Low2.1A vulnerability was found in PHPGurukul Online Shopping Portal Project 2.1.Check if you run itEPSS 0.32%Apr 6, 2026
- Low2.1A vulnerability has been found in PHPGurukul Online Shopping Portal Project 2.1.Check if you run itEPSS 0.32%Apr 6, 2026
- Low2.1A flaw has been found in PHPGurukul Online Shopping Portal Project 2.1.Check if you run itEPSS 0.32%Apr 6, 2026
- Medium5.5A security vulnerability has been detected in projectworlds Car Rental System 1.0.Check if you run itEPSS 0.41%Apr 6, 2026
- High8.7LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format.Patch nowKEVEPSS 3.98%Apr 6, 2026
- Medium5.3CMSsite 1.0 contains a cross-site request forgery vulnerability that allows attackers to perform unauthorized administrative actions by crafting malicious HTML forms.Check if you run itEPSS 0.13%Apr 5, 2026
- High8.8eDirectory contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to bypass administrator authentication and disclose sensitive files by…Check if you run itEPSS 0.53%Apr 5, 2026
- Medium5.5A security flaw has been discovered in itsourcecode Free Hotel Reservation System 1.0.Check if you run itEPSS 0.41%Apr 5, 2026
- Low2.1A vulnerability was identified in PHPGurukul User Registration & Login and User Management System 3.3.Check if you run itEPSS 0.32%Apr 5, 2026
- Medium5.3Nodcms contains a cross-site request forgery vulnerability that allows attackers to perform unauthorized administrative actions by crafting malicious forms.Check if you run itEPSS 0.11%Apr 4, 2026
- Medium5.1MyBB Downloads Plugin 2.0.3 contains a persistent cross-site scripting vulnerability that allows regular members to inject malicious scripts through the download title field.Check if you run itEPSS 0.22%Apr 4, 2026
- Medium6.9Redaxo CMS 5.2 contains a cross-site request forgery vulnerability that allows unauthenticated attackers to create administrative user accounts by tricking authenticat…Check if you run itEPSS 0.15%Apr 4, 2026
- Medium6.9Snews CMS 1.7 contains a cross-site request forgery vulnerability that allows attackers to change administrator credentials without authentication by crafting malicious HTML forms.Check if you run itEPSS 0.16%Apr 4, 2026
- High7.2The Visitor Traffic Real Time Statistics plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'page_title' parameter in all versions up to, and in…Check if you run itEPSS 0.32%Apr 4, 2026
- UnknownStrapi Strapi Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Patch nowKEVEPSS 70.60%Apr 4, 2026
- Medium6.5Emlog is an open source website building system.Check if you run itEPSS 0.56%Apr 3, 2026
- High7.2Emlog is an open source website building system.Check if you run itEPSS 0.91%Apr 3, 2026
- High8.7Emlog is an open source website building system.Check if you run itEPSS 0.22%Apr 3, 2026
- Critical9.3Hirschmann HiOS and HiSecOS products RSP, RSPE, RSPS, RSPL, MSP, EES, EESX, GRS, OS, RED, EAGLE contain an authentication bypass vulnerability in the HTTP(S) managemen…Check if you run itEPSS 0.50%Apr 3, 2026
- Critical9.3ProSoft Technology ICX35-HWC version 1.3 and prior cellular gateways contain an authentication bypass vulnerability in the web user interface that allows unauthenticat…Check if you run itEPSS 0.45%Apr 3, 2026
- Critical9.3GarrettCom Magnum 6K and 10K managed switches contain an authentication bypass vulnerability that allows unauthenticated attackers to gain unauthorized access by explo…Check if you run itEPSS 0.46%Apr 3, 2026