Search

Expected end of text, found ':' (at char 6), (line:1, col:7)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (372364 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2024-44641 1 Phpgurukul 1 Small Crm 2025-11-19 6.5 Medium
PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection via the oldpass parameter in change-password.php.
CVE-2024-44644 1 Phpgurukul 1 Small Crm 2025-11-19 6.5 Medium
PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection via the frm_id and aremark parameters in manage-tickets.php.
CVE-2024-44647 1 Phpgurukul 1 Small Crm 2025-11-19 6.1 Medium
PHPGurukul Small CRM 3.0 is vulnerable to Cross Site Scripting (XSS) via the aremark parameter in manage-tickets.php.
CVE-2024-44648 1 Phpgurukul 1 Small Crm 2025-11-19 6.5 Medium
PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection via id and adminremark parameters in quote-details.php.
CVE-2024-44652 1 Kashipara 1 Ecommerce Website 2025-11-19 6.5 Medium
Kashipara Ecommerce Website 1.0 is vulnerable to SQL Injection via the user_email, username, user_firstname, user_lastname, and user_address parameters in user_register.php.
CVE-2024-46334 1 Kashipara 1 School Management System 2025-11-19 6.1 Medium
kashipara School Management System 1.0 is vulnerable to Cross Site Scripting (XSS) via the formuser and formpassword parameters in /adminLogin.php.
CVE-2024-46336 1 Kashipara 1 School Management System 2025-11-19 6.1 Medium
kashipara School Management System 1.0 is vulnerable to Cross Site Scripting (XSS) via /client_user/feedback.php.
CVE-2025-13290 2 Code-projects, Fabian 2 Simple Food Ordering System, Simple Food Ordering System 2025-11-19 6.3 Medium
A vulnerability has been found in code-projects Simple Food Ordering System 1.0. Affected by this issue is some unknown functionality of the file /saveorder.php. Such manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
CVE-2024-44651 1 Kashipara 1 Ecommerce Website 2025-11-19 6.5 Medium
Kashipara Ecommerce Website 1.0 is vulnerable to SQL Injection via the recover_email parameter in user_password_recover.php.
CVE-2024-44653 1 Kashipara 1 Ecommerce Website 2025-11-19 6.5 Medium
Kashipara Ecommerce Website 1.0 is vulnerable to SQL Injection via the user_email parameter in user_login.php.
CVE-2024-44657 1 Phpgurukul 1 Complaint Management System 2025-11-19 6.5 Medium
PHPGurukul Complaint Management System 2.0 is vulnerable to SQL Injection via the fromdate and todate parameters in between-date-userreport.php.
CVE-2024-46335 1 Phpgurukul 1 Complaint Management System 2025-11-19 4.6 Medium
PHPGurukul Complaint Management System 2.0 is vulnerble to Cross Site Scripting (XSS) via the fromdate and todate parameters in between-date-userreport.php.
CVE-2025-36299 1 Ibm 2 Planning Analytics Local, Planning Analytics Workspace 2025-11-19 4.3 Medium
IBM Planning Analytics Local 2.1.0 through 2.1.14 stores sensitive information in source code could be used in further attacks against the system.
CVE-2025-13302 2 Carmelogarcia, Code-projects 2 Courier Management System, Courier Management System 2025-11-19 4.7 Medium
A vulnerability was identified in code-projects Courier Management System 1.0. This affects an unknown part of the file /add-new-officer.php. Such manipulation of the argument ManagerName leads to sql injection. The attack can be launched remotely. The exploit is publicly available and might be used.
CVE-2025-13303 2 Carmelogarcia, Code-projects 2 Courier Management System, Courier Management System 2025-11-19 6.3 Medium
A vulnerability was determined in code-projects Courier Management System 1.0. Affected by this issue is some unknown functionality of the file /search-edit.php. This manipulation of the argument Consignment causes sql injection. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized.
CVE-2025-13345 1 Oretnom23 1 Train Station Ticketing System 2025-11-19 6.3 Medium
A security vulnerability has been detected in SourceCodester Train Station Ticketing System 1.0. Affected by this issue is some unknown functionality of the file /ajax.php?action=save_ticket. Such manipulation leads to sql injection. The attack can be launched remotely. The exploit has been disclosed publicly and may be used.
CVE-2025-13344 2 Oretnom23, Sourcecodester 2 Train Station Ticketing System, Train Station Ticketing System 2025-11-19 7.3 High
A weakness has been identified in SourceCodester Train Station Ticketing System 1.0. Affected by this vulnerability is an unknown functionality of the file /ajax.php?action=login. This manipulation of the argument Username causes sql injection. The attack can be initiated remotely. The exploit has been made available to the public and could be exploited.
CVE-2025-13325 2 Facebook-julykringcadayona, Itsourcecode 2 Student Information System, Student Information Management System 2025-11-19 6.3 Medium
A vulnerability was determined in itsourcecode Student Information System 1.0. The affected element is an unknown function of the file /enrollment_edit1.php. Executing manipulation of the argument en_id can lead to sql injection. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized.
CVE-2025-13323 2 Carmelo, Code-projects 2 Simple Pizza Ordering System, Simple Pizza Ordering System 2025-11-19 7.3 High
A security flaw has been discovered in code-projects Simple Pizza Ordering System 1.0. Affected is an unknown function of the file /listorder.php. Performing manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The exploit has been released to the public and may be exploited.
CVE-2022-50209 1 Linux 1 Linux Kernel 2025-11-19 5.5 Medium
In the Linux kernel, the following vulnerability has been resolved: meson-mx-socinfo: Fix refcount leak in meson_mx_socinfo_init of_find_matching_node() returns a node pointer with refcount incremented, we should use of_node_put() on it when not need anymore. Add missing of_node_put() to avoid refcount leak.