Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.5A vulnerability has been found in itsourcecode Document Management System 1.0.Check if you run itEPSS 0.61%Feb 25, 2026
- Medium4.8GetSimpleCMS Community Edition (CE) versions prior to 3.3.22 (3.3.16 tested) contains a stored cross-site scripting (XSS) vulnerability in the Theme to Components func…Check if you run itEPSS 0.40%Feb 24, 2026
- Medium5.5Piwigo is an open source photo gallery application for the web.Check if you run itEPSS 0.78%Feb 24, 2026
- High8.9Caddy is an extensible server platform that uses TLS by default.Check if you run itEPSS 0.88%Feb 24, 2026
- Critical9.3Slican NCP/IPL/IPM/IPU devices are vulnerable to PHP Function Injection.Check if you run itEPSS 0.40%Feb 24, 2026
- Low2.0A vulnerability was determined in MuYuCMS 2.7.Check if you run itEPSS 0.72%Feb 24, 2026
- Low2.1A vulnerability was detected in SourceCodester Modern Image Gallery App 1.0.Check if you run itEPSS 0.49%Feb 24, 2026
- Medium5.5A security vulnerability has been detected in itsourcecode Document Management System 1.0.Check if you run itEPSS 0.61%Feb 24, 2026
- Medium5.5A weakness has been identified in itsourcecode Document Management System 1.0.Check if you run itEPSS 0.61%Feb 24, 2026
- Low2.1A security flaw has been discovered in a54552239 pearProjectApi up to 2.8.10.Check if you run itEPSS 0.54%Feb 24, 2026
- Medium5.5A security vulnerability has been detected in itsourcecode E-Logbook with Health Monitoring System for COVID-19 1.0.Check if you run itEPSS 0.61%Feb 24, 2026
- Low2.1A flaw has been found in itsourcecode Event Management System 1.0.Check if you run itEPSS 0.49%Feb 24, 2026
- Medium5.5A vulnerability was detected in itsourcecode Event Management System 1.0.Check if you run itEPSS 0.61%Feb 24, 2026
- Medium5.1Aruba HiSpeed Cache (aruba-hispeed-cache) WordPress plugin versions prior to 3.0.5 contain a cross-site request forgery (CSRF) vulnerability affecting multiple adminis…Check if you run itEPSS 0.23%Feb 23, 2026
- Medium6.1Stored Cross-Site Scripting (XSS) was found in the /admin/edit_user.php page of Society Management System Portal V1.0, which allows remote attackers to inject and stor…Check if you run itEPSS 0.40%Feb 23, 2026
- Medium5.5A vulnerability was identified in SourceCodester Student Result Management System 1.0.Check if you run itEPSS 0.67%Feb 23, 2026
- Medium5.1Reflected Cross-Site Scripting (XSS) vulnerability in PideTuCita.Check if you run itEPSS 0.45%Feb 23, 2026
- Medium5.5A vulnerability was determined in SourceCodester Student Result Management System 1.0.Check if you run itEPSS 0.71%Feb 23, 2026
- Critical9.3SQL injection vulnerability in Infoticketing.Check if you run itEPSS 0.34%Feb 23, 2026
- UnknownHikvision intercom_broadcast_system Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 89.03%Feb 23, 2026
- Medium5.5A flaw has been found in Vaelsys 4.1.0.Check if you run itEPSS 7.41%Feb 22, 2026
- High8.8Dolibarr ERP/CRM 10.0.1 contains an SQL injection vulnerability in the elemid POST parameter of the viewcat.php endpoint that allows unauthenticated attackers to execu…Check if you run itEPSS 0.43%Feb 22, 2026
- High7.1Dolibarr ERP/CRM 10.0.1 contains multiple SQL injection vulnerabilities that allow authenticated attackers to manipulate database queries by injecting SQL code through…Check if you run itEPSS 0.35%Feb 22, 2026
- High8.8DIGIT CENTRIS ERP contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the datum1…Check if you run itEPSS 0.27%Feb 22, 2026
- High8.8Inventory Webapp contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through GET parameters.Check if you run itEPSS 0.27%Feb 22, 2026