Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low2.1A vulnerability was identified in SourceCodester Web-based Pharmacy Product Management System 1.0.Check if you run itEPSS 0.32%May 4, 2026
- High8.1phpBB before 3.3.16 is vulnerable to Host Header Injection that can lead to password rest link poisoning.Check if you run itEPSS 0.44%May 4, 2026
- Medium5.5A flaw has been found in funadmin up to 7.1.0-rc6.Check if you run itEPSS 0.50%May 4, 2026
- Low2.1A vulnerability was detected in code-projects BloodBank Managing System 1.0.Check if you run itEPSS 0.35%May 4, 2026
- Low2.1A security vulnerability has been detected in code-projects BloodBank Managing System 1.0.Check if you run itEPSS 0.32%May 4, 2026
- Low2.1A vulnerability was found in code-projects Gym Management System In PHP and Windows NT 1.0.Check if you run itEPSS 0.32%May 4, 2026
- Unknowncridio listingpro Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')Patch nowKEVEPSS 0.40%May 4, 2026
- Unknownweb-shop-host startklar_elmentor_addons Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 1.52%May 4, 2026
- Low2.0A vulnerability was determined in AMTT Hotel Broadband Operation System 1.0.Check if you run itEPSS 0.33%May 3, 2026
- Low2.9A security flaw has been discovered in Dolibarr ERP CRM up to 23.0.2.Check if you run itEPSS 0.17%May 3, 2026
- Low1.3A vulnerability was identified in Dolibarr ERP CRM up to 23.0.2.Check if you run itEPSS 0.27%May 3, 2026
- Medium5.5A vulnerability was determined in code-projects Online Hospital Management System 1.0.Check if you run itEPSS 0.43%May 2, 2026
- Medium5.5A vulnerability has been found in innocommerce InnoShop up to 0.7.8.Check if you run itEPSS 0.69%May 2, 2026
- Low2.0A vulnerability was determined in itsourcecode Courier Management System 1.0.Check if you run itEPSS 0.33%May 2, 2026
- High7.2brizy brizy Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.43%May 2, 2026
- High8.1The Profile Builder Pro plugin for WordPress is vulnerable to PHP Object Injection in all versions up to and including 3.14.5.Check if you run itEPSS 0.62%May 2, 2026
- High7.2The Gravity Forms plugin for WordPress is vulnerable to Unauthenticated Stored Cross-Site Scripting in versions up to and including 2.10.0.Check if you run itEPSS 0.32%May 2, 2026
- High7.2The Gravity Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to and including 2.10.0.Check if you run itEPSS 0.30%May 2, 2026
- Critical9.8The User Verification by PickPlugins plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 2.0.46.Check if you run itEPSS 0.84%May 2, 2026
- Medium5.5A weakness has been identified in itsourcecode Courier Management System 1.0.Check if you run itEPSS 0.41%May 1, 2026
- Medium6.5SQL injection vulnerability in MixPHP Framework 2.x thru 2.2.17 via crafted array to the joinOn function in BuildHelper.php.Check if you run itEPSS 0.33%May 1, 2026
- Medium6.5SQL injection vulnerability in MixPHP Framework 2.x thru 2.2.17 via crafted array to the data function in BuildHelper.php.Check if you run itEPSS 0.33%May 1, 2026
- Critical9.8Unsafe deserialization vulnerability in MixPHP Framework 2.x thru 2.2.17.Check if you run itEPSS 0.70%May 1, 2026
- Critical9.8Unsafe deserialization vulnerability in MixPHP Framework 2.x thru 2.2.17.Check if you run itEPSS 0.70%May 1, 2026
- High8.1Unsafe deserialization vulnerability in MixPHP Framework 2.x thru 2.2.17.Check if you run itEPSS 1.91%May 1, 2026