Unspecified vulnerabilities

Products

• Ffmpeg 26
• Glusterfs 21
• Hindu Matrimonial Script 15
• Phplist 9
• Automatic Question Paper Generator System 8
• Unspecified 8
• Automad 7
• Student Attendance Management System 7
• Home Clean Services Management System 5
• Movie Ticket Booking System 5
• Ua-parser-js 5
• Drogon 4
• Fast Food Ordering System 4
• Jeecg-boot 4
• S-cms 4
• Utorrent 4
• Countdown Timer 3
• House Rental System 3
• Humhub 3
• Jenkins 3
• Microfinance Management System 3
• 389-ds-base 2
• As 2
• Atahualpa Theme 2
• Demokratian 2
• Dolphinphp 2
• Exim 2
• Gpac 2
• Hospital Management Center 2
• Laravel 2
• Libtiff 2
• Maku-boot 2
• Mavlink 2
• Node-red-dashboard 2
• Online Hotel Booking System 2
• Open5gs 2
• Ovirt-engine 2
• Phpredisadmin 2
• Phpservermon 2
• School Club Application System 2

Show 5 moreShow less

• Simplessus 2
• Studygolang 2
• Vaultpress Plugin 2
• Wp-ban 2
• Zoo Management System 2

Newest

• makunet maku-boot Makunet maku-boot 4.3.0 through 5.0.0 Missing Authorization via Mail and SMS Config Endpoints CVE-2026-110123 7.1 HighOctober 13, 2026
• unspecified drogon Drogon Static File Router StaticFileRouter.cc route path traversal CVE-2026-105144 6.9 MediumOctober 4, 2026
• drogonframework drogon drogonframework drogon ORM Criteria.cc makeCriteria sql injection CVE-2026-94144 6.9 MediumSeptember 21, 2026
• drogonframework drogon drogonframework drogon ORM Mapper Mapper.h orderBy sql injection CVE-2026-94143 6.9 MediumSeptember 21, 2026
• phplist phpList before 3.6.17 Cross-Site Request Forgery via massremove.php CVE-2026-92806 7.2 HighSeptember 16, 2026
• unspecified automad automad Password Reset Endpoint UserController.php requestPasswordResetToken response discrepancy CVE-2026-19965 6.3 MediumAugust 17, 2026
• faisalman ua-parser-js UAParser.js: Unbounded `Sec-CH-UA-Model` parsing can trigger ReDoS in `withClientHints()` CVE-2026-48125 Fix available 5.3 MediumJune 15, 2026
• codeastro student attendance management system CodeAstro Student Attendance Management System createStudents.php sql injection CVE-2026-12175 5.1 MediumJune 13, 2026
• codeastro student attendance management system CodeAstro Student Attendance Management System createClassArms.php sql injection CVE-2026-11585 5.3 MediumJune 8, 2026
• codeastro student attendance management system CodeAstro Student Attendance Management System createClass.php edit sql injection CVE-2026-11584 5.3 MediumJune 8, 2026
• codeastro student attendance management system CodeAstro Student Attendance Management System createClass.php sql injection CVE-2026-11583 5.3 MediumJune 8, 2026
• codeastro student attendance management system CodeAstro Student Attendance Management System index.php sql injection CVE-2026-11582 6.9 MediumJune 8, 2026
• marcantondahmen automad Automad Broken Access Control: unauthenticated exposure of administrator bcrypt password hashes and TOTP secrets via public API endpoint CVE-2026-45332 Public exploitFix available 7.5 HighMay 27, 2026
• unknown countdown timer Countdown Timer <= 1.0 - Reflected XSS CVE-2024-13864 7.1 HighMarch 11, 2025
• bplugins countdown timer WordPress Countdown Timer block plugin <= 1.2.6 - Cross Site Scripting (XSS) vulnerability CVE-2025-26938 6.5 MediumFebruary 25, 2025
• acetech home clean services management system SourceCodester Home Clean Services Management System process.php sql injection CVE-2025-0294 5.1 MediumJanuary 7, 2025
• s-cms S-CMS reg.php sql injection CVE-2023-7191 5.5 MediumDecember 31, 2023
• s-cms S-CMS sql injection CVE-2023-7190 5.5 MediumDecember 31, 2023
• s-cms S-CMS sql injection CVE-2023-7189 5.5 MediumDecember 31, 2023
• automad automad User Creation cross-site request forgery CVE-2023-7038 Fix available 4.3 MediumDecember 21, 2023
• automad automad FileController.php import server-side request forgery CVE-2023-7037 6.3 MediumDecember 21, 2023
• automad automad Content Type FileCollectionController.php upload unrestricted upload CVE-2023-7036 4.7 MediumDecember 21, 2023
• automad automad Setting post.php cross site scripting CVE-2023-7035 4.8 MediumDecember 21, 2023
• automattic vaultpress, unspecified vaultpress plugin +1 more VaultPress Plugin MailPoet Plugin class.vaultpress-hotfixes.php protect_aioseo_ajax unrestricted upload CVE-2014-125104 6.3 MediumJune 1, 2023
• jeecg boot, unspecified jeecg-boot +1 more jeecg-boot API Documentation improper authentication CVE-2023-1784 5.3 MediumMarch 31, 2023
• jeecg boot, unspecified jeecg-boot +1 more jeecg-boot Sleep Command SysDictMapper.java sql injection CVE-2023-1741 4.3 MediumMarch 30, 2023
• automatic question paper generator system project question paper generator system, sourcecodester automatic question paper generator system +1 more SourceCodester Automatic Question Paper Generator System GET Parameter view_class.php sql injection CVE-2023-1666 6.3 MediumMarch 27, 2023
• automatic question paper generator system project question paper generator system, sourcecodester automatic question paper generator system +1 more SourceCodester Automatic Question Paper Generator System cross site scripting CVE-2023-1593 3.5 LowMarch 23, 2023
• automatic question paper generator system project question paper generator system, sourcecodester automatic question paper generator system +1 more SourceCodester Automatic Question Paper Generator System GET Parameter view_class.php sql injection CVE-2023-1592 6.3 MediumMarch 23, 2023
• automatic question paper generator system project question paper generator system, sourcecodester automatic question paper generator system +1 more SourceCodester Automatic Question Paper Generator System sql injection CVE-2023-1591 6.3 MediumMarch 23, 2023
• automatic question paper generator system project question paper generator system, sourcecodester automatic question paper generator system +1 more SourceCodester Automatic Question Paper Generator System GET Parameter manage_question_paper.php sql injection CVE-2023-1474 6.3 MediumMarch 17, 2023
• jeecg boot, unspecified jeecg-boot +1 more jeecg-boot qurestSql sql injection CVE-2023-1454 Public exploit EPSS 36.1% 6.3 MediumMarch 17, 2023
• automatic question paper generator system project question paper generator system, sourcecodester automatic question paper generator system +1 more SourceCodester Automatic Question Paper Generator System GET Parameter view_course.php sql injection CVE-2023-1441 6.3 MediumMarch 17, 2023
• automatic question paper generator system project question paper generator system, sourcecodester automatic question paper generator system +1 more SourceCodester Automatic Question Paper Generator System GET Parameter manage_user.php sql injection CVE-2023-1440 6.3 MediumMarch 17, 2023
• dolphinphp project dolphinphp DolphinPHP Incomplete Fix CVE-2021-46097 common.php os command injection CVE-2023-0935 6.3 MediumFebruary 21, 2023
• ua-parser-js project ua-parser-js ReDoS Vulnerability in ua-parser-js version CVE-2022-25927 Public exploitFix available 5.3 MediumJanuary 24, 2023
• tatoeba tatoeba2 tatoeba2 Profile Name cross site scripting CVE-2022-4642 3.5 LowDecember 21, 2022
• pig-vector project pig-vector pig-vector LogisticRegression.java LogisticRegression temp file CVE-2022-4641 2.5 LowDecember 21, 2022
• sslh project sslh sslh Packet Dumping probe.c hexdump format string CVE-2022-4639 5.6 MediumDecember 21, 2022
• collective.contact.widget project collective.contact.widget collective.contact.widget widgets.py title cross site scripting CVE-2022-4638 Fix available 3.5 LowDecember 21, 2022
• unknown wp-ban WP-Ban ban-options.php cross site scripting CVE-2022-4631 3.5 LowDecember 21, 2022
• studygolang studygolang search.go Search cross site scripting CVE-2021-4273 4.3 MediumDecember 21, 2022
• studygolang studygolang topics.js cross site scripting CVE-2021-4272 3.5 LowDecember 21, 2022
• imprint cms project cms, unspecified imprint cms +1 more Imprint CMS ViewHelpers.cs SearchForm cross site scripting CVE-2021-4270 3.5 LowDecember 21, 2022
• simplerisk SimpleRisk common.js checkAndSetValidation cross site scripting CVE-2021-4269 3.5 LowDecember 21, 2022
• phpredisadmin project phpredisadmin phpRedisAdmin cross-site request forgery CVE-2021-4268 4.3 MediumDecember 21, 2022
• tad discuss project discuss, unspecified tad discuss +1 more tad_discuss cross site scripting CVE-2021-4267 3.5 LowDecember 21, 2022
• siwapp siwapp-ror siwapp-ror cross site scripting CVE-2021-4265 3.5 LowDecember 21, 2022
• pengu project pengu Pengu index.js runApp cross-site request forgery CVE-2020-36623 4.3 MediumDecember 21, 2022
• laravel jqgrid project jqgrid, unspecified laravel-jqgrid +1 more laravel-jqgrid EloquentRepositoryAbstract.php getRows sql injection CVE-2021-4262 5.5 MediumDecember 19, 2022
• Show olderLoading…