Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Unknowntychesoftwares print_invoice_\&_delivery_notes_for_woocommerce Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 3.71%Dec 24, 2025
- High8.8Synacor Zimbra Collaboration Suite (ZCS) PHP Remote File Inclusion VulnerabilityPatch nowKEVEPSS 48.87%Dec 22, 2025
- Medium5.5A vulnerability has been found in SeaCMS up to 13.3.Check if you run itEPSS 0.45%Dec 21, 2025
- Critical9.1In grav <1.7.49.5, a SSRF (Server-Side Request Forgery) vector may be triggered via Twig templates when page content is processed by Twig and the configuration allows…Check if you run itEPSS 0.29%Dec 15, 2025
- Low2.0A security vulnerability has been detected in DedeBIZ up to 6.5.9.Check if you run itEPSS 7.28%Dec 14, 2025
- Low2.0A security vulnerability has been detected in Qualitor up to 8.24.73.Check if you run itEPSS 0.25%Dec 12, 2025
- Medium6.1HotelDruid v3.0.7 and before is vulnerable to Cross Site Scripting (XSS) in the /modifica_app.php file.Check if you run itEPSS 0.27%Dec 11, 2025
- High8.8edoc-doctor-appointment-system v1.0.1 is vulnerable to Cross Site Scripting (XSS) in admin/add-session.php via the "title" parameter.Check if you run itEPSS 0.56%Dec 11, 2025
- Critical9.8An arbitrary file rename vulnerability in the /admin/manager.php component of EasyImages 2.0 v2.8.6 and below allows attackers to execute arbitrary code via renaming a…Check if you run itEPSS 0.54%Dec 11, 2025
- Critical9.1An arbitrary file rename vulnerability in the /admin/filer.php component of EasyImages 2.0 v2.8.6 and below allows attackers with Administrator privileges to execute a…Check if you run itEPSS 0.57%Dec 11, 2025
- High8.8A Cross-Site Request Forgery (CSRF) in the /admin/admin.inc.php component of EasyImages 2.0 v2.8.6 and below allows attackers to escalate privileges to Administrator v…Check if you run itEPSS 0.21%Dec 11, 2025
- High8.8An arbitrary file upload vulnerability in the /admin/manager.php component of EasyImages 2.0 v2.8.6 and below allows attackers to execute arbitrary code via uploading…Check if you run itEPSS 0.53%Dec 11, 2025
- Medium6.1Shopware is an open commerce platform.Check if you run itEPSS 0.19%Dec 11, 2025
- Medium4.9The Simple Download Counter plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 2.2.2.Check if you run itEPSS 0.52%Dec 10, 2025
- High8.1Filament is a collection of full-stack components for accelerated Laravel development.Check if you run itEPSS 0.34%Dec 10, 2025
- Critical9.4WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users.Check if you run itEPSS 0.51%Dec 10, 2025
- Medium5.4WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users.Check if you run itEPSS 0.25%Dec 9, 2025
- Medium5.5A vulnerability was determined in itsourcecode Student Management System 1.0.Check if you run itEPSS 0.39%Dec 9, 2025
- Medium5.5A vulnerability was found in itsourcecode Student Management System 1.0.Check if you run itEPSS 0.39%Dec 9, 2025
- Medium5.5A vulnerability has been found in itsourcecode Student Management System 1.0.Check if you run itEPSS 0.39%Dec 9, 2025
- Medium5.5A flaw has been found in itsourcecode Student Management System 1.0.Check if you run itEPSS 0.39%Dec 9, 2025
- Critical9.8SQL Injection vulnerability in function setwxqyAction in file webmain/task/api/loginAction.php in Xinhu Rainrock RockOA 2.7.0 allowing attackers gain sensitive informa…Check if you run itEPSS 0.41%Dec 9, 2025
- Medium4.3SQL Injection vulnerability in function getselectdataAjax in file inputAction.php in Xinhu Rainrock RockOA 2.7.0 allowing attackers gain sensitive information, includi…Open the advisoryDec 9, 2025
- Medium4.3An issue was discovered in function phpinisaveAction in file webmain/system/cogini/coginiAction.php in Xinhu Rainrock RockOA 2.7.0 allowing attackers to authenticated…Open the advisoryDec 9, 2025
- Medium4.3An issue was discovered in file index.php in Xinhu Rainrock RockOA 2.7.0 allowing attackers to gain sensitive information via phpinfo via the a parameter to the index.php.Check if you run itEPSS 0.26%Dec 9, 2025