Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low2.9In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, when a SOAP server has a typemap configured, the decoding proces…Check if you run itEPSS 1.05%May 10, 2026
- Medium6.3In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, when SoapServer is configured with SOAP_PERSISTENCE_SESSION, the…Check if you run itEPSS 0.53%May 10, 2026
- Low2.1In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, a mismatch between encoding lists in Oniguruma and mbfl leads to…Check if you run itEPSS 0.34%May 10, 2026
- Medium6.3In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, some functions, including urldecode(), pass signed char to ctype…Check if you run itEPSS 0.40%May 10, 2026
- High7.3In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, 8.5.* before 8.5.6, due to improper sanitation of user data, it allows an attacker to co…Check if you run itEPSS 0.31%May 10, 2026
- Critical9.5In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, the SOAP extension's object deduplication mechanism stores point…Check if you run itEPSS 1.29%May 10, 2026
- High7.4In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, the PDO Firebird driver improperly handles NUL bytes when prepar…Check if you run itEPSS 0.44%May 10, 2026
- Low2.1A security vulnerability has been detected in osTicket up to 1.18.3.Check if you run itEPSS 0.23%May 9, 2026
- High8.8AzuraCast is a self-hosted, all-in-one web radio management suite.Check if you run itEPSS 1.03%May 9, 2026
- Critical9.4phpVMS is a PHP application to run and simulate an airline.Check if you run itEPSS 1.32%May 9, 2026
- High8.3Plainpad is a self hosted note taking app.Check if you run itEPSS 0.46%May 9, 2026
- Low2.1A weakness has been identified in Akaunting 3.1.21.Check if you run itEPSS 0.35%May 9, 2026
- Medium6.9Gibbon versions before v30.0.01 are affected by a path traversal vulnerability resulting in DOS by attempting extraction of web application PHP files, failed .zip extr…Check if you run itEPSS 0.39%May 9, 2026
- High8.9Gibbon versions before v30.0.01 are affected by a local file inclusion vulnerability resulting in RCE by changing the report archive directory and forcing interpretati…Check if you run itEPSS 0.40%May 9, 2026
- High7.0Gibbon versions before v30.0.01 are affected by an authenticated SQL Injection vulnerability by abusing the Tracking/graphing https://github.com/GibbonEdu/core/blob/c4…Check if you run itEPSS 0.38%May 9, 2026
- High7.6ipl/web is a set of common web components for php projects.Check if you run itEPSS 0.45%May 8, 2026
- None0.0Emlog is an open source website building system.Check if you run itEPSS 0.43%May 8, 2026
- Medium5.3novaGallery is a php image gallery.Check if you run itEPSS 0.46%May 8, 2026
- Medium4.9Flarum is open-source forum software.Check if you run itEPSS 0.46%May 8, 2026
- Medium4.7In the Linux kernel, the following vulnerability has been resolved: ceph: fix i_nlink underrun during async unlink During async unlink, we drop the counter before we r…Check if you run itEPSS 0.11%May 8, 2026
- High7.1Brave CMS is an open-source CMS.Check if you run itEPSS 0.45%May 8, 2026
- High7.8PHPUnit is a testing framework for PHP.Check if you run itEPSS 0.28%May 8, 2026
- Critical9.8Beauty Parlour Management System v1.1 was discovered to contain a SQL injection vulnerability via the aptnumber parameter in the /appointment-detail.php endpoint.Check if you run itEPSS 0.47%May 8, 2026
- High8.6Dolibarr is an enterprise resource planning (ERP) and customer relationship management (CRM) software package.Check if you run itEPSS 0.88%May 8, 2026
- High8.8The User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration plugin for WordPress is vulnerable to Deserialization of Untrus…Check if you run itEPSS 1.33%May 8, 2026