Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in themeuniver Glamer glamer allows PHP Local File Inclusion.TCheck this weekEPSS 54.00%Aug 28, 2025
- Medium4.3Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Favethemes Houzez allows PHP Local File Inclusion.This issuCheck this weekEPSS 27.00%Aug 28, 2025
- High8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in CocoBasic Neresa neresa-wp allows PHP Local File Inclusion.Check this weekEPSS 53.00%Aug 28, 2025
- Medium6.1The WP ULike Pro plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the WP_Ulike_Pro_File_Uploader class in all versions up toCheck this weekEPSS 21.00%Aug 28, 2025
- Medium6.5A SQL Injection vulnerability exists in the login.php of PuneethReddyHC Online Shopping System Advanced 1.0 due to improper sanitization of user-supplied input in the keyword POSTCheck this weekEPSS 24.00%Aug 28, 2025
- Medium5.4A reflected Cross-Site Scripting (XSS) vulnerability exists in register.php of PuneethReddyHC Online Shopping System Advanced 1.0.Check this weekEPSS 27.00%Aug 28, 2025
- Medium6.5A SQL Injection vulnerability exists in the product.php page of PuneethReddyHC Online Shopping System Advanced 1.0.Check this weekEPSS 24.00%Aug 28, 2025
- Medium6.5A SQL Injection vulnerability exists in the action.php file of PuneethReddyHC Online Shopping System Advanced 1.0.Check this weekEPSS 24.00%Aug 28, 2025
- Medium6.1A Reflected Cross-site Scripting (XSS) vulnerability exists in the themeSet.php file of ProjectsAndPrograms School Management System 1.0.Check this weekEPSS 23.00%Aug 28, 2025
- Medium5.3A vulnerability was detected in Portabilis i-Educar up to 2.10.Check this weekEPSS 40.00%Aug 27, 2025
- Medium6.9A weakness has been identified in Campcodes Payroll Management System 1.0.Check this weekEPSS 53.00%Aug 27, 2025
- Medium6.9A vulnerability was identified in itsourcecode Apartment Management System 1.0.Check this weekEPSS 42.00%Aug 27, 2025
- Medium6.9A security vulnerability has been detected in itsourcecode Apartment Management System 1.0.Check this weekEPSS 42.00%Aug 27, 2025
- Medium6.9A security flaw has been discovered in itsourcecode Apartment Management System 1.0.Check this weekEPSS 42.00%Aug 27, 2025
- Medium6.9A vulnerability was detected in itsourcecode Apartment Management System 1.0.Check this weekEPSS 42.00%Aug 27, 2025
- Medium6.9A weakness has been identified in itsourcecode Apartment Management System 1.0.Check this weekEPSS 42.00%Aug 27, 2025
- Medium6.9A vulnerability has been found in Campcodes Online Loan Management System 1.0.Check this weekEPSS 42.00%Aug 27, 2025
- Medium6.9A flaw has been found in Campcodes Online Loan Management System 1.0.Check this weekEPSS 48.00%Aug 27, 2025
- Medium6.9A vulnerability was detected in Campcodes Online Loan Management System 1.0.Check this weekEPSS 42.00%Aug 27, 2025
- Medium6.9A security vulnerability has been detected in Campcodes Online Loan Management System 1.0.Check this weekEPSS 44.00%Aug 27, 2025
- Medium6.9A weakness has been identified in Campcodes Online Loan Management System 1.0.Check this weekEPSS 42.00%Aug 27, 2025
- High8.8In FoxCMS 1.2.6, there is a reflected Cross Site Scripting (XSS) vulnerability in /index.php/plus.Check this weekEPSS 42.00%Aug 27, 2025
- Critical9.1OPNsense before 25.1.8 contains an authenticated command injection vulnerability in its Bridge Interface Edit endpoint (interfaces_bridge_edit.php).Check if you run itEPSS 9.04%Aug 27, 2025
- Critical9.8SQL Injection vulnerability in AbanteCart 1.4.2, allows unauthenticated attackers to execute arbitrary SQL commands via the tmpl_id parameter to index.php.Check this weekEPSS 45.00%Aug 27, 2025
- Critical9.8In RaspAP raspap-webgui 3.3.2 and earlier, a command injection vulnerability exists in the includes/hostapd.php script.Check if you run itEPSS 1.63%Aug 27, 2025