Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3A vulnerability, which was classified as critical, was found in itsourcecode Employee Management System 1.0.Check if you run itEPSS 0.43%Jul 25, 2025
- Medium5.3A vulnerability, which was classified as critical, has been found in code-projects Document Management System 1.0.Check if you run itEPSS 0.38%Jul 25, 2025
- Medium5.1A vulnerability was found in code-projects Church Donation System 1.0.Check if you run itEPSS 0.36%Jul 25, 2025
- Medium6.9A vulnerability was found in code-projects Church Donation System 1.0.Check if you run itEPSS 0.60%Jul 25, 2025
- Medium5.3A vulnerability was found in code-projects Food Review System 1.0 and classified as critical.Check if you run itEPSS 0.55%Jul 25, 2025
- Medium5.3A vulnerability has been found in code-projects Public Chat Room 1.0 and classified as critical.Check if you run itEPSS 0.44%Jul 25, 2025
- Critical10.0An unauthenticated SQL injection vulnerability exists in Pandora FMS version 5.0 SP2 and earlier.Check if you run itEPSS 2.47%Jul 25, 2025
- Critical9.3A remote code execution vulnerability exists in HybridAuth versions 2.0.9 through 2.2.2 due to insecure use of the install.php installation script.Check if you run itEPSS 2.49%Jul 25, 2025
- High8.7An authenticated remote code execution vulnerability exists in GetSimpleCMS version 3.2.1.Check if you run itEPSS 4.00%Jul 25, 2025
- Critical9.4A command injection vulnerability exists in the eScan Web Management Console version 5.5-2.Check if you run itEPSS 4.67%Jul 25, 2025
- Medium5.3A vulnerability was found in PHPGurukul Login and User Management System 3.3.Check if you run itEPSS 0.48%Jul 25, 2025
- Medium5.3A vulnerability was found in PHPGurukul User Registration & Login and User Management 3.3.Check if you run itEPSS 0.49%Jul 25, 2025
- Critical9.3A remote code execution vulnerability exists in Kaltura versions prior to 11.1.0-2 due to unsafe deserialization of user-controlled data within the keditorservices module.Check if you run itEPSS 2.21%Jul 23, 2025
- Critical9.3An unauthenticated OS command injection vulnerability exists within Xdebug versions 2.5.5 and earlier, a PHP debugging extension developed by Derick Rethans.Check if you run itEPSS 7.30%Jul 23, 2025
- Critical9.3oscommerce online_merchant Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 4.47%Jul 23, 2025
- Medium6.1The YANewsflash plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.3.Check if you run itEPSS 0.13%Jul 23, 2025
- Medium4.3HAX CMS allows users to manage their microsite universe with a NodeJS or PHP backend.Check if you run itEPSS 0.33%Jul 22, 2025
- Medium5.3A vulnerability was found in code-projects Food Ordering Review System 1.0.Check if you run itEPSS 0.41%Jul 22, 2025
- Medium5.1A vulnerability classified as problematic has been found in code-projects Public Chat Room 1.0.Check if you run itEPSS 0.36%Jul 22, 2025
- Medium6.9A vulnerability was found in code-projects Public Chat Room 1.0.Check if you run itEPSS 0.60%Jul 22, 2025
- Medium5.3A vulnerability has been found in PHPGurukul Online Banquet Booking System 1.0 and classified as critical.Check if you run itEPSS 0.53%Jul 21, 2025
- Medium5.1A vulnerability, which was classified as problematic, was found in PHPGurukul Online Banquet Booking System 1.0.Check if you run itEPSS 0.38%Jul 21, 2025
- Medium5.3A vulnerability, which was classified as problematic, has been found in PHPGurukul Online Banquet Booking System 1.0.Check if you run itEPSS 0.57%Jul 21, 2025
- Medium5.1A vulnerability classified as problematic was found in PHPGurukul Online Banquet Booking System 1.0.Check if you run itEPSS 0.38%Jul 21, 2025
- Critical9.8In Netgear RAX30 V1.0.10.94, a PHP-FPM misconfiguration vulnerability is caused by not following the specification to only limit FPM to .php extensions.Check if you run itEPSS 1.17%Jul 21, 2025