Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.3oscommerce online_merchant Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 4.47%Jul 23, 2025
- Medium6.1The YANewsflash plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.3.Check if you run itEPSS 0.13%Jul 23, 2025
- Medium4.3HAX CMS allows users to manage their microsite universe with a NodeJS or PHP backend.Check if you run itEPSS 0.33%Jul 22, 2025
- Medium5.3A vulnerability was found in code-projects Food Ordering Review System 1.0.Check if you run itEPSS 0.41%Jul 22, 2025
- Medium5.1A vulnerability classified as problematic has been found in code-projects Public Chat Room 1.0.Check if you run itEPSS 0.36%Jul 22, 2025
- Medium6.9A vulnerability was found in code-projects Public Chat Room 1.0.Check if you run itEPSS 0.60%Jul 22, 2025
- Medium5.3A vulnerability has been found in PHPGurukul Online Banquet Booking System 1.0 and classified as critical.Check if you run itEPSS 0.53%Jul 21, 2025
- Medium5.1A vulnerability, which was classified as problematic, was found in PHPGurukul Online Banquet Booking System 1.0.Check if you run itEPSS 0.38%Jul 21, 2025
- Medium5.3A vulnerability, which was classified as problematic, has been found in PHPGurukul Online Banquet Booking System 1.0.Check if you run itEPSS 0.57%Jul 21, 2025
- Medium5.1A vulnerability classified as problematic was found in PHPGurukul Online Banquet Booking System 1.0.Check if you run itEPSS 0.38%Jul 21, 2025
- Critical9.8In Netgear RAX30 V1.0.10.94, a PHP-FPM misconfiguration vulnerability is caused by not following the specification to only limit FPM to .php extensions.Check if you run itEPSS 1.17%Jul 21, 2025
- Unknownlkw199711 smanga Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 0.62%Jul 21, 2025
- Unknownbyzoro smart_s85f_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Patch nowKEVEPSS 9.33%Jul 21, 2025
- Unknowntongda2000 tongda_office_anywhere Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 0.70%Jul 21, 2025
- Unknownindionetworks unibox_firmware Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 4.95%Jul 21, 2025
- UnknownTerraMaster TerraMaster OS Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 16.66%Jul 21, 2025
- Medium5.3A vulnerability has been found in Zavy86 WikiDocs up to 1.0.78 and classified as problematic.Check if you run itEPSS 0.67%Jul 20, 2025
- Medium6.9A vulnerability, which was classified as critical, was found in pmTicket Project-Management-Software up to 2ef379da2075f4761a2c9029cf91d073474e7486.Check if you run itEPSS 0.45%Jul 20, 2025
- Medium5.1A vulnerability, which was classified as problematic, has been found in Portabilis i-Educar 2.9.0.Check if you run itEPSS 0.27%Jul 20, 2025
- Medium5.1A vulnerability was found in Portabilis i-Educar 2.9.0.Check if you run itEPSS 0.35%Jul 20, 2025
- Medium6.9A vulnerability, which was classified as critical, was found in code-projects Church Donation System 1.0.Check if you run itEPSS 0.50%Jul 20, 2025
- Medium6.9A vulnerability, which was classified as critical, has been found in code-projects Church Donation System 1.0.Check if you run itEPSS 0.50%Jul 20, 2025
- Medium6.9A vulnerability classified as critical was found in code-projects Church Donation System 1.0.Check if you run itEPSS 0.50%Jul 20, 2025
- Medium5.1A vulnerability classified as problematic has been found in PHPGurukul Apartment Visitors Management System 1.0.Check if you run itEPSS 0.29%Jul 19, 2025
- Medium5.1A vulnerability was found in PHPGurukul Apartment Visitors Management System 1.0.Check if you run itEPSS 0.29%Jul 19, 2025