Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Evently evently allows PHP Local…Check if you run itEPSS 0.52%Mar 5, 2026
- High8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Cortex cortex allows PHP Local F…Check if you run itEPSS 0.52%Mar 5, 2026
- High8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Cocco cocco allows PHP Local Fil…Check if you run itEPSS 0.52%Mar 5, 2026
- High8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Mikado-Themes Aviana aviana allows PHP Local F…Check if you run itEPSS 0.52%Mar 5, 2026
- High8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in don-themes Wolmart wolmart allows PHP Local Fi…Check if you run itEPSS 0.54%Mar 5, 2026
- High8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in don-themes Molla molla allows PHP Local File I…Check if you run itEPSS 0.52%Mar 5, 2026
- High8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ovatheme Remons remons allows PHP Local File I…Check if you run itEPSS 0.52%Mar 5, 2026
- High8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ThemeREX Berger berger allows PHP Local File I…Check if you run itEPSS 0.52%Mar 5, 2026
- Medium4.9The Apocalypse Meow plugin for WordPress is vulnerable to SQL Injection via the 'type' parameter in all versions up to, and including, 22.1.0.Check if you run itEPSS 0.62%Mar 5, 2026
- High8.8Ashop Shopping Cart Software contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through…Check if you run itEPSS 0.25%Mar 4, 2026
- High8.8FreeSMS 2.1.2 contains a boolean-based blind SQL injection vulnerability in the password parameter that allows unauthenticated attackers to bypass authentication by in…Check if you run itEPSS 0.47%Mar 4, 2026
- High7.1PHPads 2.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the banne…Check if you run itEPSS 0.34%Mar 4, 2026
- High8.8Simple Job Script contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting malicious SQL code through the app_id parameter.Check if you run itEPSS 0.36%Mar 4, 2026
- High8.8Simple Job Script contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the job_id parameter.Check if you run itEPSS 0.47%Mar 4, 2026
- Critical9.4Craft is a content management system (CMS).Check if you run itEPSS 0.57%Mar 4, 2026
- Critical9.4Craft is a content management system (CMS).Check if you run itEPSS 1.14%Mar 4, 2026
- High7.5Craft is a content management system (CMS).Check if you run itEPSS 0.63%Mar 4, 2026
- High8.9Concrete CMS below version 9.4.8 is vulnerable to Remote Code Execution by stored PHP object injection into the Express Entry List block via the columns parameter.Check if you run itEPSS 0.95%Mar 4, 2026
- High8.1FreeScout is a free help desk and shared inbox built with PHP's Laravel framework.Check if you run itEPSS 2.66%Mar 3, 2026
- Low2.0A vulnerability was found in itsourcecode College Management System 1.0.Check if you run itEPSS 0.50%Mar 3, 2026
- Critical9.8OpenSTAManager is an open source management software for technical assistance and invoicing.Check if you run itEPSS 0.67%Mar 3, 2026
- High8.7OpenEMR is a free and open source electronic health records and medical practice management application.Check if you run itEPSS 6.60%Mar 3, 2026
- Low2.0A vulnerability has been found in itsourcecode College Management System 1.0.Check if you run itEPSS 0.50%Mar 3, 2026
- High7.2Sourcecodester Logistic Hub Parcel's Management System v1.0 is vulnerable to SQL Injection in /manage_carrier.php.Check if you run itEPSS 0.44%Mar 3, 2026
- Low2.7Sourcecodester Logistic Hub Parcel's Management System v1.0 is vulnerable to SQL Injection in /manage_parcel_type.php.Check if you run itEPSS 0.34%Mar 3, 2026