Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.1Cross-site scripting (XSS) vulnerability in function urltestAction in file cliAction.php in Xinhu Rainrock RockOA 2.7.0 allows remote attackers to inject arbitrary web…Open the advisoryDec 9, 2025
- High8.8LeptonCMS version 7.3.0 contains an arbitrary file upload vulnerability, which is caused by the lack of proper validation for uploaded files.Check if you run itEPSS 0.77%Dec 9, 2025
- Medium4.8Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Portabilis i-Educar allows Stored Cross-Site Scripting (XSS) via…Check if you run itEPSS 0.21%Dec 9, 2025
- Critical9.8SQL injection vulnerability in /php/api_patient_schedule.php in SourceCodester Patients Waiting Area Queue Management System v1 allows attackers to execute arbitrary S…Open the advisoryDec 8, 2025
- Critical9.1Emlog Pro 2.5.20 has an arbitrary file deletion vulnerability.Check if you run itEPSS 0.73%Dec 8, 2025
- Low3.3phpIPAM v1.7.3 contains a Cross-Site Request Forgery (CSRF) vulnerability in the database export functionality.Check if you run itEPSS 0.20%Dec 8, 2025
- Medium5.5A vulnerability has been found in IdeaCMS up to 1.8.Check if you run itEPSS 0.39%Dec 8, 2025
- Low1.9A flaw has been found in GreenCMS 2.3.0603.Check if you run itEPSS 0.27%Dec 8, 2025
- Medium5.5A vulnerability was identified in tushar-2223 Hotel-Management-System up to bb1f3b3666124b888f1e4bcf51b6fba9fbb01d15.Check if you run itEPSS 0.30%Dec 8, 2025
- Medium5.5A vulnerability was determined in SourceCodester Online Student Clearance System 1.0.Check if you run itEPSS 0.38%Dec 8, 2025
- Low1.9A vulnerability was found in code-projects Chamber of Commerce Membership Management System 1.0.Check if you run itEPSS 0.22%Dec 8, 2025
- UnknownThinkPHP ThinkPHP Deserialization of Untrusted DataPatch nowKEVEPSS 4.21%Dec 8, 2025
- Low2.1A flaw has been found in code-projects Question Paper Generator up to 1.0.Check if you run itEPSS 0.35%Dec 7, 2025
- Low1.9A vulnerability was found in alokjaiswal Hotel-Management-services-using-MYSQL-and-php up to 5f8b60a7aa6c06a5632de569d4e3f6a8cd82f76f.Check if you run itEPSS 0.28%Dec 7, 2025
- Low2.0A vulnerability has been found in alokjaiswal Hotel-Management-services-using-MYSQL-and-php up to 5f8b60a7aa6c06a5632de569d4e3f6a8cd82f76f.Check if you run itEPSS 0.23%Dec 7, 2025
- Medium5.5A vulnerability was found in RashminDungrani online-banking up to 2337ad552ea9d385b4e07b90e6f32d011b7c68a2.Check if you run itEPSS 0.32%Dec 7, 2025
- Medium5.5A vulnerability was detected in Chanjet CRM up to 20251121.Check if you run itEPSS 0.30%Dec 7, 2025
- Low2.0A security flaw has been discovered in AMTT Hotel Broadband Operation System 1.0.Check if you run itEPSS 0.34%Dec 5, 2025
- Medium6.1The Twitscription plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the admin.php PATH_INFO in all versions up to, and including, 0.1.1 due to i…Check if you run itEPSS 0.26%Dec 5, 2025
- Medium6.1The Jabbernotification plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the admin.php PATH_INFO in all versions up to, and including, 0.99-RC2…Check if you run itEPSS 0.26%Dec 5, 2025
- Unknownsir gnuboard URL Redirection to Untrusted Site ('Open Redirect')Patch nowKEVEPSS 0.53%Dec 5, 2025
- High8.9LaraDashboard is an all-In-one solution to start a Laravel Application.Open the advisoryDec 4, 2025
- Critical9.3UNA CMS versions 9.0.0-RC1 - 14.0.0-RC4 contain a PHP object injection vulnerability in BxBaseMenuSetAclLevel.php where the profile_id POST parameter is passed to PHP…Open the advisoryDec 4, 2025
- Low1.9A vulnerability was identified in JIZHICMS up to 2.5.5.Check if you run itEPSS 0.28%Dec 4, 2025
- Low2.0A vulnerability was determined in JIZHICMS up to 2.5.5.Check if you run itEPSS 0.38%Dec 4, 2025