Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8WebIncorp ERP contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the prod_id parameter.Check if you run itEPSS 0.27%Feb 22, 2026
- High8.8XOOPS CMS 2.5.9 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the cid parameter.Check if you run itEPSS 0.30%Feb 22, 2026
- High8.8Ashop Shopping Cart Software contains a time-based blind SQL injection vulnerability that allows attackers to manipulate database queries through the blacklistitemid parameter.Check if you run itEPSS 0.31%Feb 22, 2026
- Medium5.5A security flaw has been discovered in Tosei Online Store Management System ネット店舗管理システム 1.01.Check if you run itEPSS 7.41%Feb 22, 2026
- Low2.1A vulnerability was identified in SapneshNaik Student Management System up to f4b4f0928f0b5551a28ee81ae7e7fe47d9345318.Check if you run itEPSS 0.48%Feb 22, 2026
- Medium5.5A vulnerability has been found in SourceCodester Student Result Management System 1.0.Check if you run itEPSS 0.58%Feb 22, 2026
- Low1.9A security vulnerability has been detected in YiFang CMS up to 2.0.5.Check if you run itEPSS 0.37%Feb 22, 2026
- Low1.9A weakness has been identified in YiFang CMS up to 2.0.5.Check if you run itEPSS 0.37%Feb 22, 2026
- Low1.9A security flaw has been discovered in YiFang CMS up to 2.0.5.Check if you run itEPSS 0.38%Feb 22, 2026
- Medium5.5A vulnerability was found in code-projects Online Reviewer System 1.0.Check if you run itEPSS 0.60%Feb 22, 2026
- Low2.0A vulnerability was detected in funadmin up to 7.1.0-rc4.Check if you run itEPSS 0.46%Feb 22, 2026
- Medium5.5A weakness has been identified in funadmin up to 7.1.0-rc4.Check if you run itEPSS 0.51%Feb 22, 2026
- Low2.9A security flaw has been discovered in funadmin up to 7.1.0-rc4.Check if you run itEPSS 0.68%Feb 21, 2026
- Medium5.5A vulnerability was determined in itsourcecode Vehicle Management System 1.0.Check if you run itEPSS 0.58%Feb 21, 2026
- Medium5.5A vulnerability was found in itsourcecode Agri-Trading Online Shopping System 1.0.Check if you run itEPSS 0.61%Feb 21, 2026
- High8.8ZoneMinder is a free, open source closed-circuit television software application.Check if you run itEPSS 0.57%Feb 21, 2026
- High8.1Zumba Json Serializer is a library to serialize PHP variables in JSON format.Check if you run itEPSS 1.04%Feb 21, 2026
- Medium6.8Deciso OPNsense diag_backup.php filename Command Injection Remote Code Execution Vulnerability.Check if you run itEPSS 1.53%Feb 20, 2026
- Medium5.3phpMoAdmin 1.1.5 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating the collection parameter.Check if you run itEPSS 0.29%Feb 20, 2026
- Medium5.1phpMoAdmin 1.1.5 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating the newdb parameter.Check if you run itEPSS 0.34%Feb 20, 2026
- Medium5.3phpMoAdmin 1.1.5 contains a cross-site request forgery vulnerability that allows attackers to perform unauthorized database operations by crafting malicious requests.Check if you run itEPSS 0.38%Feb 20, 2026
- High8.8LabCollector 5.423 contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to execute arbitrary SQL commands by injecting malicious code t…Check if you run itEPSS 0.56%Feb 20, 2026
- High8.7Chamilo LMS 1.11.8 contains an arbitrary file upload vulnerability that allows authenticated users to upload and execute PHP files through the elfinder filemanager module.Check if you run itEPSS 0.44%Feb 20, 2026
- High8.8openITCOCKPIT is an open source monitoring tool built for different monitoring engines like Nagios, Naemon and Prometheus.Check if you run itEPSS 0.84%Feb 20, 2026
- Medium5.1Fiverr Clone Script 1.2.2 contains a cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating the keyword parameter.Check if you run itEPSS 0.25%Feb 20, 2026