Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.1Lepszy BIP is vulnerable to Reflected Cross-Site Scripting (XSS).Check this weekEPSS 45.00%Aug 14, 2025
- Medium6.9A vulnerability has been found in PHPGurukul Hospital Management System 4.0.Check this weekEPSS 54.00%Aug 14, 2025
- Medium6.9A vulnerability was identified in PHPGurukul Hospital Management System 4.0.Check this weekEPSS 43.00%Aug 14, 2025
- Medium6.9A vulnerability was determined in SourceCodester COVID 19 Testing Management System 1.0.Check this weekEPSS 44.00%Aug 14, 2025
- Medium6.9A vulnerability was found in Campcodes Online Flight Booking Management System 1.0.Check this weekEPSS 42.00%Aug 14, 2025
- Medium6.9A vulnerability has been found in PHPGurukul Teachers Record Management System 2.1.Check this weekEPSS 43.00%Aug 14, 2025
- Medium6.9A vulnerability was identified in Campcodes Online Recruitment Management System 1.0.Check this weekEPSS 43.00%Aug 14, 2025
- Medium6.9A vulnerability was determined in projectworlds Visitor Management System 1.0.Check this weekEPSS 43.00%Aug 14, 2025
- Medium6.9A vulnerability was found in projectworlds Visitor Management System 1.0.Check this weekEPSS 41.00%Aug 14, 2025
- Medium6.9A vulnerability has been found in projectworlds Online Notes Sharing Platform 1.0.Check this weekEPSS 44.00%Aug 14, 2025
- Medium6.9A vulnerability was determined in 1000 Projects Sales Management System 1.0.Check this weekEPSS 52.00%Aug 14, 2025
- Unknownthememove unicamp Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')Patch nowKEVEPSS 0.49%Aug 14, 2025
- Critical10.0WeBid 1.0.2 contains a remote code injection vulnerability in the converter.php script, where unsanitized input in the to parameter of a POST request is written directly into incluCheck if you run itEPSS 2.46%Aug 13, 2025
- Critical10.0Traq versions 2.0 through 2.3 contain a remote code execution vulnerability in the admincp/common.php script.Check if you run itEPSS 2.30%Aug 13, 2025
- Critical10.0Snort Report versions < 1.3.2 contains a remote command execution vulnerability in the nmap.php and nbtscan.php scripts.Check if you run itEPSS 2.76%Aug 13, 2025
- High8.7S40 CMS v0.4.2 contains a path traversal vulnerability in its index.php page handler.Check if you run itEPSS 1.92%Aug 13, 2025
- High8.7PHP Volunteer Management System v1.0.2 contains an arbitrary file upload vulnerability in its document upload functionality.Check if you run itEPSS 1.52%Aug 13, 2025
- Critical10.0myBB version 1.6.4 was distributed with an unauthorized backdoor embedded in the source code.Check if you run itEPSS 2.85%Aug 13, 2025
- Medium6.9A vulnerability was found in SourceCodester COVID 19 Testing Management System 1.0.Check this weekEPSS 44.00%Aug 13, 2025
- Medium6.9A vulnerability has been found in itsourcecode Sports Management System 1.0.Check this weekEPSS 43.00%Aug 13, 2025
- Medium6.9A vulnerability was identified in Campcodes Online Water Billing System 1.0.Check this weekEPSS 43.00%Aug 13, 2025
- Medium6.9A vulnerability was determined in code-projects Job Diary 1.0.Check this weekEPSS 46.00%Aug 13, 2025
- Medium6.9A vulnerability was found in code-projects Job Diary 1.0.Check this weekEPSS 46.00%Aug 13, 2025
- Medium6.9A vulnerability has been found in code-projects Job Diary 1.0.Check this weekEPSS 46.00%Aug 13, 2025
- Medium4.8A vulnerability was found in Portabilis i-Educar up to 2.10.Check this weekEPSS 33.00%Aug 13, 2025