Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.9A vulnerability was found in code-projects Online Movie Streaming 1.0.Check this weekEPSS 39.00%Aug 1, 2025
- Medium6.9A vulnerability was found in code-projects Online Movie Streaming 1.0.Check this weekEPSS 41.00%Aug 1, 2025
- Medium5.3A vulnerability was found in code-projects Document Management System 1.0 and classified as critical.Check this weekEPSS 50.00%Aug 1, 2025
- Medium6.9A vulnerability has been found in PHPGurukul Boat Booking System 1.0 and classified as critical.Check this weekEPSS 55.00%Aug 1, 2025
- Critical9.8Institute-of-Current-Students 1.0 is vulnerable to Incorrect Access Control in the mydetailsstudent.php endpoint.Check this weekEPSS 36.00%Aug 1, 2025
- Medium6.1A stored Cross-Site Scripting (XSS) vulnerability exists in the qureydetails.php page of Institute-of-Current-Students 1.0, where the input fields for Query and Answer do not propeCheck this weekEPSS 19.00%Aug 1, 2025
- Medium6.5A SQL Injection vulnerability exists in the takeassessment2.php file of CloudClassroom-PHP-Project 1.0.Check this weekEPSS 24.00%Aug 1, 2025
- Critical9.3An OS command injection vulnerability exists in WebTester version 5.x via the install2.php installation script.Check this weekEPSS 13.40%Jul 31, 2025
- Critical9.2An unrestricted file upload vulnerability exists in Simple E-Document versions 3.0 to 3.1 that allows an unauthenticated attacker to bypass authentication by sending a specific cooCheck if you run itEPSS 1.90%Jul 31, 2025
- High8.7A code injection vulnerability exists in ProcessMaker Open Source versions 2.x when using the default 'neoclassic' skin.Check if you run itEPSS 2.32%Jul 31, 2025
- Critical9.3An unauthenticated SQL injection vulnerability exists in Kimai version 0.9.2.x via the db_restore.php endpoint.Check if you run itEPSS 1.96%Jul 31, 2025
- Critical9.3An unauthenticated arbitrary file upload vulnerability exists in FlashChat versions 6.0.2 and 6.0.4 through 6.0.8.Check if you run itEPSS 2.06%Jul 31, 2025
- Critical10.0ClipBucket version 2.6 and earlier contains a critical vulnerability in the ofc_upload_image.php script located at /admin_area/charts/ofc-library/.Check if you run itEPSS 4.07%Jul 31, 2025
- Critical9.5A vulnerability exists in OAstium VoIP PBX astium-confweb-2.1-25399 and earlier, where improper input validation in the logon.php script allows an attacker to bypass authenticationCheck if you run itEPSS 2.47%Jul 31, 2025
- Medium5.3A vulnerability, which was classified as critical, was found in Campcodes Online Hotel Reservation System 1.0.Check this weekEPSS 49.00%Jul 31, 2025
- Medium5.3A vulnerability, which was classified as problematic, has been found in Portabilis i-Educar 2.10.Check this weekEPSS 40.00%Jul 31, 2025
- Unknownidccms idccms Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.91%Jul 31, 2025
- Critical10.0Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 1.10%Jul 31, 2025
- High8.2GetProjectsIdea Create School Management System 1.0 is vulnerable to Cross Site Scripting (XSS) in my_profile_update_form1.php.Check this weekEPSS 42.00%Jul 30, 2025
- Medium4.8Reflected Cross-Site Scripting (XSS) in Human Resource Management System version 1.0.Check this weekEPSS 19.00%Jul 29, 2025
- Medium4.8Reflected Cross-Site Scripting (XSS) in Human Resource Management System version 1.0.Check this weekEPSS 19.00%Jul 29, 2025
- Medium4.8Reflected Cross-Site Scripting (XSS) in Human Resource Management System version 1.0.Check this weekEPSS 19.00%Jul 29, 2025
- Medium4.8Reflected Cross-Site Scripting (XSS) in Human Resource Management System version 1.0.Check this weekEPSS 19.00%Jul 29, 2025
- High8.7SQL injection vulnerability in Human Resource Management System version 1.0, which allows an attacker to retrieve, create, update and delete databases via the “city” and “state” paCheck this weekEPSS 32.00%Jul 29, 2025
- Critical9.1Versions of the package z-push/z-push-dev before 2.7.6 are vulnerable to SQL Injection due to unparameterized queries in the IMAP backend.Check this weekEPSS 43.00%Jul 29, 2025