Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.1Shopware is an open commerce platform.Check if you run itEPSS 0.19%Dec 11, 2025
- Medium4.9The Simple Download Counter plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 2.2.2.Check if you run itEPSS 0.52%Dec 10, 2025
- High8.1Filament is a collection of full-stack components for accelerated Laravel development.Check if you run itEPSS 0.34%Dec 10, 2025
- Critical9.4WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users.Check if you run itEPSS 0.51%Dec 10, 2025
- Medium5.4WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users.Check if you run itEPSS 0.25%Dec 9, 2025
- Medium5.5A vulnerability was determined in itsourcecode Student Management System 1.0.Check if you run itEPSS 0.39%Dec 9, 2025
- Medium5.5A vulnerability was found in itsourcecode Student Management System 1.0.Check if you run itEPSS 0.39%Dec 9, 2025
- Medium5.5A vulnerability has been found in itsourcecode Student Management System 1.0.Check if you run itEPSS 0.39%Dec 9, 2025
- Medium5.5A flaw has been found in itsourcecode Student Management System 1.0.Check if you run itEPSS 0.39%Dec 9, 2025
- Critical9.8SQL Injection vulnerability in function setwxqyAction in file webmain/task/api/loginAction.php in Xinhu Rainrock RockOA 2.7.0 allowing attackers gain sensitive informa…Check if you run itEPSS 0.41%Dec 9, 2025
- Medium4.3SQL Injection vulnerability in function getselectdataAjax in file inputAction.php in Xinhu Rainrock RockOA 2.7.0 allowing attackers gain sensitive information, includi…Open the advisoryDec 9, 2025
- Medium4.3An issue was discovered in function phpinisaveAction in file webmain/system/cogini/coginiAction.php in Xinhu Rainrock RockOA 2.7.0 allowing attackers to authenticated…Open the advisoryDec 9, 2025
- Medium4.3An issue was discovered in file index.php in Xinhu Rainrock RockOA 2.7.0 allowing attackers to gain sensitive information via phpinfo via the a parameter to the index.php.Check if you run itEPSS 0.26%Dec 9, 2025
- Medium6.1Cross-site scripting (XSS) vulnerability in function urltestAction in file cliAction.php in Xinhu Rainrock RockOA 2.7.0 allows remote attackers to inject arbitrary web…Open the advisoryDec 9, 2025
- High8.8LeptonCMS version 7.3.0 contains an arbitrary file upload vulnerability, which is caused by the lack of proper validation for uploaded files.Check if you run itEPSS 0.77%Dec 9, 2025
- Medium4.8Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Portabilis i-Educar allows Stored Cross-Site Scripting (XSS) via…Check if you run itEPSS 0.21%Dec 9, 2025
- Critical9.8SQL injection vulnerability in /php/api_patient_schedule.php in SourceCodester Patients Waiting Area Queue Management System v1 allows attackers to execute arbitrary S…Open the advisoryDec 8, 2025
- Critical9.1Emlog Pro 2.5.20 has an arbitrary file deletion vulnerability.Check if you run itEPSS 0.73%Dec 8, 2025
- Low3.3phpIPAM v1.7.3 contains a Cross-Site Request Forgery (CSRF) vulnerability in the database export functionality.Check if you run itEPSS 0.20%Dec 8, 2025
- Medium5.5A vulnerability has been found in IdeaCMS up to 1.8.Check if you run itEPSS 0.39%Dec 8, 2025
- Low1.9A flaw has been found in GreenCMS 2.3.0603.Check if you run itEPSS 0.27%Dec 8, 2025
- Medium5.5A vulnerability was identified in tushar-2223 Hotel-Management-System up to bb1f3b3666124b888f1e4bcf51b6fba9fbb01d15.Check if you run itEPSS 0.30%Dec 8, 2025
- Medium5.5A vulnerability was determined in SourceCodester Online Student Clearance System 1.0.Check if you run itEPSS 0.38%Dec 8, 2025
- Low1.9A vulnerability was found in code-projects Chamber of Commerce Membership Management System 1.0.Check if you run itEPSS 0.22%Dec 8, 2025
- UnknownThinkPHP ThinkPHP Deserialization of Untrusted DataPatch nowKEVEPSS 4.21%Dec 8, 2025