Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8Beauty Parlour Management System v1.1 was discovered to contain a SQL injection vulnerability via the aptnumber parameter in the /appointment-detail.php endpoint.Check if you run itEPSS 0.47%May 8, 2026
- High8.6Dolibarr is an enterprise resource planning (ERP) and customer relationship management (CRM) software package.Check if you run itEPSS 0.88%May 8, 2026
- High8.8The User Frontend: AI Powered Frontend Posting, User Directory, Profile, Membership & User Registration plugin for WordPress is vulnerable to Deserialization of Untrus…Check if you run itEPSS 1.33%May 8, 2026
- Critical9.9Netgate pfSense CE 2.8.0 allows code execution in the XMLRPC API via pfsense.exec_php.Check if you run itEPSS 0.68%May 8, 2026
- Critical9.1Netgate pfSense CE 2.7.2 allows code execution by using the module installer with a backup file with a serialized PHP object containing the post_reboot_commands property.Check if you run itEPSS 0.81%May 8, 2026
- High7.3An issue was discovered in Control Web Panel (CWP) before 0.9.8.1209.Check if you run itEPSS 3.60%May 8, 2026
- Critical9.81C-Bitrix through 25.100.500 allows Remote Code Execution because an actor with SOURCE/WRITE permissions for the Translate Module can upload and execute code by sendin…Check if you run itEPSS 1.55%May 8, 2026
- Medium6.3Bitrix24 through 25.100.300 allows Remote Code Execution because an actor with SOURCE/WRITE permissions for the Translate Module can upload and execute code by sending…Check if you run itEPSS 1.03%May 8, 2026
- Critical9.1LibreNMS before 24.10.0 allows a remote attacker to execute arbitrary code via OS command injection involving AboutController.php's index(), SettingsController.php's u…Check if you run itEPSS 7.18%May 8, 2026
- Medium5.4SOPlanning 1.52.00 is vulnerable to Cross Site Scripting (XSS) via the groupe_id parameter to process/groupe_save.php.Check if you run itEPSS 0.55%May 8, 2026
- Medium6.3SOPlanning 1.52.00 is vulnerable to SQL Injection by an authenticated user via projets.php with statut[].Check if you run itEPSS 0.24%May 8, 2026
- High7.3Prison Management System Using PHP v1.0 was discovered to contain a SQL injection vulnerability via the username on the Admin login page.Check if you run itEPSS 0.81%May 8, 2026
- Low1.9A flaw has been found in SourceCodester Pharmacy Sales and Inventory System 1.0.Check if you run itEPSS 0.35%May 8, 2026
- Medium5.5A security vulnerability has been detected in zyx0814 FilePress up to 2.2.0.Check if you run itEPSS 0.45%May 8, 2026
- Medium5.5A weakness has been identified in CodeAstro Leave Management System 1.0.Check if you run itEPSS 0.41%May 8, 2026
- Medium5.5A security flaw has been discovered in SourceCodester SUP Online Shopping 1.0.Check if you run itEPSS 0.41%May 8, 2026
- Medium5.5A vulnerability was identified in SourceCodester SUP Online Shopping 1.0.Check if you run itEPSS 0.41%May 8, 2026
- Medium5.5A vulnerability was determined in SourceCodester SUP Online Shopping 1.0.Check if you run itEPSS 0.41%May 8, 2026
- Medium4.9Kimai is an open-source time tracking application.Check if you run itEPSS 0.42%May 8, 2026
- Medium5.5A vulnerability was found in SourceCodester SUP Online Shopping 1.0.Check if you run itEPSS 0.41%May 8, 2026
- Medium5.5A flaw has been found in SourceCodester Comment System 1.0.Check if you run itEPSS 0.41%May 8, 2026
- Low2.1A vulnerability was detected in code-projects Simple Chat System 1.0.Check if you run itEPSS 0.32%May 8, 2026
- Low2.1A security vulnerability has been detected in SourceCodester Pizzafy Ecommerce System 1.0.Check if you run itEPSS 0.45%May 8, 2026
- Medium5.5A security vulnerability has been detected in code-projects Feedback System 1.0.Check if you run itEPSS 0.41%May 7, 2026
- Low2.1A security flaw has been discovered in CodeAstro Online Classroom 1.0.Check if you run itEPSS 0.32%May 7, 2026