Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.8Silurus Classifieds Script 2.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious co…Check if you run itEPSS 0.24%Mar 6, 2026
- High8.7Easyndexer 1.0 contains an arbitrary file download vulnerability that allows unauthenticated attackers to download sensitive files by manipulating the file parameter.Check if you run itEPSS 0.59%Mar 6, 2026
- Medium6.9Data Center Audit 2.6.2 contains a cross-site request forgery vulnerability that allows attackers to reset administrator passwords without authentication by submitting…Check if you run itEPSS 0.13%Mar 6, 2026
- High8.8Alienor Web Libre 2.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code throug…Check if you run itEPSS 0.26%Mar 6, 2026
- Medium6.9ABC ERP 0.6.4 contains a cross-site request forgery vulnerability that allows attackers to modify administrator credentials by submitting forged requests to _configurar_perfil.php.Check if you run itEPSS 0.13%Mar 6, 2026
- High8.8Rmedia SMS 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to extract database information by injecting SQL code through the gid parameter.Check if you run itEPSS 0.24%Mar 6, 2026
- High8.8Pedidos 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the 'q' parameter.Check if you run itEPSS 0.30%Mar 6, 2026
- High8.8DoceboLMS 1.2 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the id, idC, a…Check if you run itEPSS 0.14%Mar 6, 2026
- High8.8Net-Billetterie 2.9 contains an SQL injection vulnerability in the login parameter of login.inc.php that allows unauthenticated attackers to execute arbitrary SQL queries.Check if you run itEPSS 0.24%Mar 6, 2026
- High8.8Meneame English Pligg 5.8 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code th…Check if you run itEPSS 0.24%Mar 6, 2026
- High7.1Galaxy Forces MMORPG 0.5.8 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code thr…Check if you run itEPSS 0.24%Mar 6, 2026
- High8.8BitZoom 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the roll…Check if you run itEPSS 0.26%Mar 6, 2026
- High7.12-Plan Team 1.0.4 contains an arbitrary file upload vulnerability that allows authenticated attackers to upload executable PHP files by sending multipart form data to…Check if you run itEPSS 0.46%Mar 6, 2026
- High8.8Warranty Tracking System 11.06.3 contains an SQL injection vulnerability that allows attackers to execute arbitrary SQL queries by injecting malicious code through the…Check if you run itEPSS 0.23%Mar 6, 2026
- High7.5Talishar is a fan-made Flesh and Blood project.Check if you run itEPSS 0.95%Mar 6, 2026
- Critical9.8WWBN AVideo is an open source video platform.Check if you run itEPSS 0.64%Mar 6, 2026
- Critical9.3WWBN AVideo is an open source video platform.Check if you run itEPSS 1.04%Mar 6, 2026
- Critical9.8WWBN AVideo is an open source video platform.Check if you run itEPSS 1.42%Mar 6, 2026
- Low2.1A vulnerability was detected in DefaultFuction Jeson Customer Relationship Management System 1.0.0.Check if you run itEPSS 0.35%Mar 6, 2026
- Low2.1A vulnerability was found in HSC Cybersecurity Mailinspector up to 5.3.2-3.Check if you run itEPSS 0.47%Mar 6, 2026
- Critical9.8The Database for Contact Form 7, WPforms, Elementor forms plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.4.7 via de…Check if you run itEPSS 1.01%Mar 5, 2026
- High8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in axiomthemes Little Birdies little-birdies allo…Check if you run itEPSS 0.58%Mar 5, 2026
- High8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Verse verse allows PHP Local File Inc…Check if you run itEPSS 0.58%Mar 5, 2026
- High8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Midi midi allows PHP Local File I…Check if you run itEPSS 0.58%Mar 5, 2026
- High8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AncoraThemes Notarius notarius allows PHP Loca…Check if you run itEPSS 0.58%Mar 5, 2026