Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low2.0A vulnerability was found in Bdtask Multi-Store Inventory Management System 1.0.Check if you run itEPSS 0.21%May 31, 2026
- Medium5.3A vulnerability has been found in Dolibarr ERP CRM 23.0.0/23.0.1/23.0.2.Check if you run itEPSS 0.22%May 31, 2026
- High8.8Yot CMS 3.3.1 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the ai…Check if you run itEPSS 0.27%May 30, 2026
- High8.8Gate Pass Management System 2.1 contains an SQL injection vulnerability that allows unauthenticated attackers to bypass authentication by injecting SQL code through th…Check if you run itEPSS 0.32%May 30, 2026
- High8.8MOGG web simulator Script contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL commands by injecting malicious code t…Check if you run itEPSS 0.26%May 30, 2026
- High7.1Open STA Manager 2.3 contains a path traversal vulnerability that allows authenticated users to download arbitrary files by manipulating the file parameter.Check if you run itEPSS 0.33%May 30, 2026
- High8.8AiOPMSD Final 1.0.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through…Check if you run itEPSS 0.27%May 30, 2026
- High8.8AiOPMSD Final 1.0.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through…Check if you run itEPSS 0.27%May 30, 2026
- High8.8AiOPMSD Final 1.0.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through…Check if you run itEPSS 0.28%May 30, 2026
- High8.8AiOPMSD Final 1.0.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through…Check if you run itEPSS 0.27%May 30, 2026
- High8.8AiOPMSD Final 1.0.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through…Check if you run itEPSS 0.27%May 30, 2026
- High8.8AiOPMSD Final 1.0.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through…Check if you run itEPSS 0.27%May 30, 2026
- High8.8AiOPMSD Final 1.0.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through…Check if you run itEPSS 0.27%May 30, 2026
- High8.8AiOPMSD Final 1.0.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through…Check if you run itEPSS 0.28%May 30, 2026
- Critical9.3Delta Sql 1.8.2 contains an arbitrary file upload vulnerability that allows unauthenticated attackers to upload malicious files by sending POST requests to docs_upload…Check if you run itEPSS 0.77%May 30, 2026
- High8.8MGB OpenSource Guestbook 0.7.0.2 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious…Check if you run itEPSS 0.27%May 30, 2026
- High7.1SIM-PKH 2.4.1 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code through the 'id' parameter.Check if you run itEPSS 0.22%May 30, 2026
- High8.7SIM-PKH 2.4.1 contains an arbitrary file upload vulnerability that allows authenticated attackers to upload malicious files by submitting PHP code through the fupload parameter.Check if you run itEPSS 0.33%May 30, 2026
- High8.7The Open ISES Project 3.30A contains a path traversal vulnerability in the ajax/download.php endpoint that allows unauthenticated attackers to download arbitrary files…Check if you run itEPSS 0.64%May 30, 2026
- High8.8eNdonesia Portal 8.7 contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code…Check if you run itEPSS 0.27%May 30, 2026
- High8.8eNdonesia Portal 8.7 contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code…Check if you run itEPSS 0.27%May 30, 2026
- High8.8eNdonesia Portal 8.7 contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code…Check if you run itEPSS 0.27%May 30, 2026
- Medium5.5A vulnerability was detected in code-projects Student Details Management System 1.0.Check if you run itEPSS 0.31%May 30, 2026
- Medium4.3FreeScout is a free help desk and shared inbox built with PHP's Laravel framework.Check if you run itEPSS 0.25%May 29, 2026
- Medium4.3FreeScout is a free help desk and shared inbox built with PHP's Laravel framework.Check if you run itEPSS 0.25%May 29, 2026