Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.5A vulnerability was found in projectworlds Online Art Gallery Shop 1.0.Check if you run itEPSS 0.59%Mar 2, 2026
- Low1.9A vulnerability was detected in PHPGurukul Student Record Management System 1.0.Check if you run itEPSS 0.36%Mar 2, 2026
- Low1.9A security vulnerability has been detected in PHPGurukul Student Record Management System up to 1.0.Check if you run itEPSS 0.36%Mar 2, 2026
- Medium5.5A flaw has been found in MaxSite CMS up to 109.1.Patch nowKEVEPSS 2.47%Mar 1, 2026
- High7.5The WP Mail Logging plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.15.0 via deserialization of untrusted input from…Check if you run itEPSS 0.40%Feb 28, 2026
- Medium6.5The Super Stage WP WordPress plugin through 1.0.1 unserializes user input via REQUEST, which could allow unauthenticated users to perform PHP Object Injection when a s…Check if you run itEPSS 0.20%Feb 28, 2026
- Critical9.3openDCIM version 23.04, through commit 4467e9c4, contains an OS command injection vulnerability in report_network_map.php.Patch nowKEVEPSS 9.40%Feb 27, 2026
- Critical9.3openDCIM version 23.04, through commit 4467e9c4, contains a SQL injection vulnerability in Config::UpdateParameter.Check if you run itEPSS 1.58%Feb 27, 2026
- Critical9.3openDCIM version 23.04, through commit 4467e9c4, contains a missing authorization vulnerability in install.php and container-install.php.Patch nowKEVEPSS 2.12%Feb 27, 2026
- Critical9.8WeGIA is a web manager for charitable institutions.Check if you run itEPSS 2.97%Feb 27, 2026
- Critical9.8WeGIA is a web manager for charitable institutions.Check if you run itEPSS 0.68%Feb 27, 2026
- Medium5.7ClipBucket v5 is an open source video sharing platform.Check if you run itEPSS 0.33%Feb 27, 2026
- High7.5phpMyFAQ is an open source FAQ web application.Check if you run itEPSS 0.51%Feb 27, 2026
- High8.8osCommerce 2.3.4.1 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the currency parameter.Check if you run itEPSS 0.34%Feb 27, 2026
- High8.8osCommerce 2.3.4.1 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the produc…Check if you run itEPSS 0.34%Feb 27, 2026
- High8.8osCommerce 2.3.4.1 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the review…Check if you run itEPSS 0.34%Feb 27, 2026
- High8.8Homey BNB V4 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'val' parameter.Check if you run itEPSS 0.33%Feb 27, 2026
- High8.8Homey BNB V4 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'pt' parameter.Check if you run itEPSS 0.33%Feb 27, 2026
- High8.8Homey BNB V4 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the catid parameter.Check if you run itEPSS 0.33%Feb 27, 2026
- High8.8Homey BNB V4 contains a SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the 'id' parameter.Check if you run itEPSS 0.33%Feb 27, 2026
- Medium6.5The OVRI Payment plugin for WordPress contains malicious .htaccess files in version 1.7.0.Check if you run itEPSS 0.32%Feb 27, 2026
- Low2.1A weakness has been identified in SourceCodester Doctor Appointment System 1.0.Check if you run itEPSS 0.50%Feb 27, 2026
- Low2.1A security vulnerability has been detected in jizhiCMS up to 2.5.6.Check if you run itEPSS 0.53%Feb 27, 2026
- Medium5.5A flaw has been found in itsourcecode School Management System 1.0.Check if you run itEPSS 0.61%Feb 26, 2026
- High8.7SPIP versions prior to 4.4.10 contain a SQL injection vulnerability that allows authenticated low-privilege users to execute arbitrary SQL queries by manipulating unio…Check if you run itEPSS 0.58%Feb 26, 2026