Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8WebOfisi E-Ticaret 4.0 contains an SQL injection vulnerability in the 'urun' GET parameter of the endpoint that allows unauthenticated attackers to manipulate database queries.Check if you run itEPSS 0.28%Mar 26, 2026
- High8.8OpenBiz Cubi Lite 3.0.8 contains a SQL injection vulnerability in the login form that allows unauthenticated attackers to manipulate database queries through the usern…Check if you run itEPSS 0.33%Mar 26, 2026
- High8.8qdPM 9.1 contains an SQL injection vulnerability that allows unauthenticated attackers to extract database information by injecting SQL code through filter_by parameters.Check if you run itEPSS 0.34%Mar 26, 2026
- High7.1Online Quiz Maker 1.0 contains SQL injection vulnerabilities in the catid and usern parameters that allow authenticated attackers to execute arbitrary SQL commands.Check if you run itEPSS 0.27%Mar 26, 2026
- High8.8KomSeo Cart 1.3 contains an SQL injection vulnerability that allows attackers to inject SQL commands through the 'my_item_search' parameter in edit.php.Check if you run itEPSS 0.25%Mar 26, 2026
- High8.8ASP.NET jVideo Kit 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to inject SQL commands through the 'query' parameter in the search…Check if you run itEPSS 0.27%Mar 26, 2026
- High8.8Library CMS 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to bypass authentication by injecting SQL code through the username parameter.Check if you run itEPSS 0.55%Mar 26, 2026
- High8.8Online Store System CMS 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through…Check if you run itEPSS 0.34%Mar 26, 2026
- High8.8SAT CFDI 3.3 contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting SQL code through the 'id' parameter in the signIn endpoint.Check if you run itEPSS 0.25%Mar 26, 2026
- High7.1School Management System CMS 1.0 contains an SQL injection vulnerability in the admin login functionality that allows attackers to bypass authentication by injecting S…Check if you run itEPSS 0.51%Mar 26, 2026
- High8.8Wecodex Hotel CMS 1.0 contains an SQL injection vulnerability in the admin login functionality that allows unauthenticated attackers to bypass authentication by injecting SQL code.Check if you run itEPSS 0.53%Mar 26, 2026
- High8.8Wecodex Restaurant CMS 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through t…Check if you run itEPSS 0.48%Mar 26, 2026
- High8.8Shipping System CMS 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to bypass authentication by injecting SQL code through the username parameter.Check if you run itEPSS 0.53%Mar 26, 2026
- Critical9.3plank/laravel-mediable through version 6.4.0 can allow upload of a dangerous file type when an application using the package accepts or prefers a client-supplied MIME…Check if you run itEPSS 0.89%Mar 26, 2026
- Medium5.4Mattermost versions 11.2.x <= 11.2.2, 10.11.x <= 10.11.10, 11.4.x <= 11.4.0, 11.3.x <= 11.3.1 fail to restrict team-level access when processing membership sync from a…Check if you run itEPSS 0.14%Mar 26, 2026
- High8.8The VSL privileged helper does utilize NSXPC for IPC.Check if you run itEPSS 0.47%Mar 26, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: icmp: fix NULL pointer dereference in icmp_tag_validation() icmp_tag_validation() unconditionally d…Check if you run itEPSS 0.13%Mar 26, 2026
- High7.1In the Linux kernel, the following vulnerability has been resolved: nfnetlink_osf: validate individual option lengths in fingerprints nfnl_osf_add_callback() validates…Check if you run itEPSS 0.13%Mar 26, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix NULL deref in mesh_matches_local() mesh_matches_local() unconditionally derefer…Check if you run itEPSS 0.12%Mar 26, 2026
- High7.4A security vulnerability has been detected in UTT HiPER 1250GW up to 3.2.7-210907-180535.Check if you run itEPSS 0.48%Mar 26, 2026
- Medium6.9Vulnerability of incorrect authorization in HiJiffy Chatbot allows an attacker to download private messages from other users via the parameter 'visitor' in '/api/v1/we…Check if you run itEPSS 0.27%Mar 26, 2026
- Medium6.9Vulnerability of incorrect authorization in HiJiffy Chatbot allows an attacker to download private messages from other users via the parameter 'ID' in '/api/v1/download/ /'.Check if you run itEPSS 0.25%Mar 26, 2026
- High7.4A weakness has been identified in Wavlink WL-NU516U1 260227.Check if you run itEPSS 0.86%Mar 26, 2026
- Medium5.5A security flaw has been discovered in 648540858 wvp-GB28181-pro up to 2.7.4.Check if you run itEPSS 0.43%Mar 26, 2026
- Low3.1A flaw was found in Keycloak.Check if you run itEPSS 0.35%Mar 26, 2026
Sort