Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.5A vulnerability was found in itsourcecode Agri-Trading Online Shopping System 1.0.Check if you run itEPSS 0.61%Feb 21, 2026
- High8.8ZoneMinder is a free, open source closed-circuit television software application.Check if you run itEPSS 0.57%Feb 21, 2026
- High8.1Zumba Json Serializer is a library to serialize PHP variables in JSON format.Check if you run itEPSS 1.04%Feb 21, 2026
- Medium6.8Deciso OPNsense diag_backup.php filename Command Injection Remote Code Execution Vulnerability.Check if you run itEPSS 1.53%Feb 20, 2026
- Medium5.3phpMoAdmin 1.1.5 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating the collection parameter.Check if you run itEPSS 0.29%Feb 20, 2026
- Medium5.1phpMoAdmin 1.1.5 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating the newdb parameter.Check if you run itEPSS 0.34%Feb 20, 2026
- Medium5.3phpMoAdmin 1.1.5 contains a cross-site request forgery vulnerability that allows attackers to perform unauthorized database operations by crafting malicious requests.Check if you run itEPSS 0.38%Feb 20, 2026
- High8.8LabCollector 5.423 contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to execute arbitrary SQL commands by injecting malicious code t…Check if you run itEPSS 0.56%Feb 20, 2026
- High8.7Chamilo LMS 1.11.8 contains an arbitrary file upload vulnerability that allows authenticated users to upload and execute PHP files through the elfinder filemanager module.Check if you run itEPSS 0.44%Feb 20, 2026
- High8.8openITCOCKPIT is an open source monitoring tool built for different monitoring engines like Nagios, Naemon and Prometheus.Check if you run itEPSS 0.84%Feb 20, 2026
- Medium5.1Fiverr Clone Script 1.2.2 contains a cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating the keyword parameter.Check if you run itEPSS 0.25%Feb 20, 2026
- High8.8Fiverr Clone Script 1.2.2 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through th…Check if you run itEPSS 0.43%Feb 20, 2026
- High7.5openITCOCKPIT is an open source monitoring tool built for different monitoring engines like Nagios, Naemon and Prometheus.Check if you run itEPSS 0.37%Feb 20, 2026
- Medium5.5A flaw has been found in SourceCodester Simple Responsive Tourism Website 1.0.Check if you run itEPSS 0.61%Feb 20, 2026
- Medium5.1SVXportal version 2.5 and prior contain a stored cross-site scripting vulnerability in the user profile update workflow (user_settings.php submitting to admin/update_user.php).Check if you run itEPSS 0.30%Feb 20, 2026
- Medium5.1SVXportal version 2.5 and prior contain a stored cross-site scripting vulnerability in the user registration workflow (index.php submitting to admin/user_action.php).Check if you run itEPSS 0.33%Feb 20, 2026
- Medium5.1SVXportal version 2.5 and prior contain a reflected cross-site scripting vulnerability in radiomobile_front.php via the stationid query parameter.Check if you run itEPSS 0.33%Feb 20, 2026
- Medium5.1SVXportal version 2.5 and prior contain a reflected cross-site scripting vulnerability in admin/log.php via the search query parameter.Check if you run itEPSS 0.28%Feb 20, 2026
- Medium5.1SVXportal version 2.5 and prior contain a reflected cross-site scripting vulnerability in log.php via the search query parameter.Check if you run itEPSS 0.37%Feb 20, 2026
- Critical9.1A Host Header Poisoning vulnerability exists in Monica 4.1.2 due to improper handling of the HTTP Host header in app/Providers/AppServiceProvider.php, combined with th…Check if you run itEPSS 0.58%Feb 20, 2026
- High8.8OpenSourcePOS 3.4.1 contains a Local File Inclusion (LFI) vulnerability in the Sales.php::getInvoice() function.Check if you run itEPSS 0.84%Feb 20, 2026
- Critical9.4An Authentication Bypass vulnerability in Smanga 3.2.7 allows an unauthenticated attacker to reset the password of any user (including the administrator) and fully tak…Check if you run itEPSS 0.42%Feb 20, 2026
- Low2.0A weakness has been identified in detronetdip E-commerce 1.0.0.Check if you run itEPSS 0.28%Feb 20, 2026
- High8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes PawFriends - Pet Shop and Veteri…Check if you run itEPSS 0.35%Feb 20, 2026
- High8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes UnlimHost unlimhost allows PHP Lo…Check if you run itEPSS 0.35%Feb 20, 2026