Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium4.9code-projects Simple Student Alumni System v1.0 is vulnerable to SQL Injection in /TracerStudy/recordteacher_view.php?teacherID=.Mar 2, 2026
- Critical9.3openDCIM version 23.04, through commit 4467e9c4, contains an OS command injection vulnerability in report_network_map.php.Feb 27, 2026
- Critical9.3openDCIM version 23.04, through commit 4467e9c4, contains a missing authorization vulnerability in install.php and container-install.php.Feb 27, 2026
- High8.7SPIP versions prior to 4.4.10 contain an authentication bypass vulnerability caused by PHP type juggling that allows unauthenticated attackers to access protected information.EPSS 0.5%Feb 26, 2026
- Critical9.8ZenTaoPMS v18.11 through v21.6.beta is vulnerable to Directory Traversal in /module/ai/control.php.EPSS 2.4%Feb 26, 2026
- Medium5.4A reflected Cross-Site Scripting (XSS) vulnerability exists in the register.php backend script of PuneethReddyHC Event Management System 1.0.EPSS 0.2%Feb 26, 2026
- Medium4.3Packistry is a self-hosted Composer repository designed to handle PHP package distribution.Feb 26, 2026
- High7.1The SPIP interface_traduction_objets plugin versions prior to 2.2.2 contain an authenticated SQL injection vulnerability in interface_traduction_objets_pipelines.php.Feb 25, 2026
- Critical9.8FreeScout is a free help desk and shared inbox built with PHP's Laravel framework.Feb 25, 2026
- High8.8FreeScout is a free help desk and shared inbox built with PHP's Laravel framework.Feb 25, 2026
- Critical9.3Slican NCP/IPL/IPM/IPU devices are vulnerable to PHP Function Injection.EPSS 0.4%Feb 24, 2026
- High8.1Zumba Json Serializer is a library to serialize PHP variables in JSON format.Feb 21, 2026
- Medium6.8Deciso OPNsense diag_backup.php filename Command Injection Remote Code Execution Vulnerability.Feb 20, 2026
- High8.7Chamilo LMS 1.11.8 contains an arbitrary file upload vulnerability that allows authenticated users to upload and execute PHP files through the elfinder filemanager module.EPSS 0.4%Feb 20, 2026
- Medium5.1SVXportal version 2.5 and prior contain a stored cross-site scripting vulnerability in the user profile update workflow (user_settings.php submitting to admin/update_user.php).Feb 20, 2026
- Medium5.1SVXportal version 2.5 and prior contain a stored cross-site scripting vulnerability in the user registration workflow (index.php submitting to admin/user_action.php).Feb 20, 2026
- Medium5.1SVXportal version 2.5 and prior contain a reflected cross-site scripting vulnerability in radiomobile_front.php via the stationid query parameter.Feb 20, 2026
- Medium5.1SVXportal version 2.5 and prior contain a reflected cross-site scripting vulnerability in admin/log.php via the search query parameter.Feb 20, 2026
- Medium5.1SVXportal version 2.5 and prior contain a reflected cross-site scripting vulnerability in log.php via the search query parameter.Feb 20, 2026
- High8.8OpenSourcePOS 3.4.1 contains a Local File Inclusion (LFI) vulnerability in the Sales.php::getInvoice() function.Feb 20, 2026
- Critical9.8A Remote Code Execution (RCE) vulnerability was found in Smanga 3.2.7 in the /php/path/rescan.php interface.EPSS 1.0%Feb 20, 2026
- Medium5.1LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring tool.Feb 20, 2026
- Medium5.1LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring tool.Feb 20, 2026
- Medium5.4LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring tool.Feb 20, 2026
- High8.8LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring tool.Feb 20, 2026