CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 30/09/2022 |
| CVE-2022-35156 | CRITICO9.8 | Bus Pass Management System 1.0 was discovered to contain a SQL Injection vulnerability via the searchdata parameter at /buspassms/download-pass.php.. | 30/09/2022 |
| CVE-2022-35155 | MEDIO6.1 | Bus Pass Management System v1.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the searchdata parameter. | 30/09/2022 |
| CVE-2022-40944 | CRITICO9.8 | Dairy Farm Shop Management System 1.0 is vulnerable to SQL Injection via sales-report-ds.php file. | 30/09/2022 |
| CVE-2022-40925 | ALTO7.2 | Zoo Management System v1.0 has an arbitrary file upload vulnerability in the picture upload point of the "save_event" file of the "Events" module in the background management system. | 26/09/2022 |
| CVE-2022-40924 | ALTO7.2 | Zoo Management System v1.0 has an arbitrary file upload vulnerability in the picture upload point of the "save_animal" file of the "Animals" module in the background management system. | 26/09/2022 |
| CVE-2022-40932 | ALTO7.2 | In Zoo Management System v1.0, there is an arbitrary file upload vulnerability in the picture upload point of the "gallery" file of the "Gallery" module in the background management system. | 22/09/2022 |
| CVE-2022-36198 | CRITICO9.8 | Multiple SQL injections detected in Bus Pass Management System 1.0 via buspassms/admin/view-enquiry.php, buspassms/admin/pass-bwdates-reports-details.php, buspassms/admin/changeimage.php, buspassms/admin/search-pass.php, buspassms/admin/edit-category-detail.php, and buspassms/admin/edit-pass-detail.php | 22/08/2022 |
| CVE-2020-23466 | MEDIO5.4 | Cross Site Scripting (XSS) vulnerability exists in the phpgurukul Online Marriage Registration System 1.0 allows attackers to run arbitrary code via the wzipcode field. | 19/08/2022 |
| CVE-2022-33075 | MEDIO5.4 | A stored cross-site scripting (XSS) vulnerability in the Add Classification function of Zoo Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via unspecified vectors. | 05/07/2022 |
| CVE-2022-31897 | MEDIO6.1 | SourceCodester Zoo Management System 1.0 is vulnerable to Cross Site Scripting (XSS) via public_html/register_visitor?msg=. | 29/06/2022 |
| CVE-2022-31384 | CRITICO9.8 | Directory Management System v1.0 was discovered to contain a SQL injection vulnerability via the fullname parameter in add-directory.php. | 16/06/2022 |
| CVE-2022-31383 | CRITICO9.8 | Directory Management System v1.0 was discovered to contain a SQL injection vulnerability via the editid parameter in view-directory.php. | 16/06/2022 |
| CVE-2022-31382 | CRITICO9.8 | Directory Management System v1.0 was discovered to contain a SQL injection vulnerability via the searchdata parameter in search-dirctory.php. | 16/06/2022 |
| CVE-2022-31914 | MEDIO5.4 | Zoo Management System v1.0 is vulnerable to Cross Site Scripting (XSS) via zms/admin/public_html/save_animal?an_id=24. | 16/06/2022 |
| CVE-2022-30930 | MEDIO4.3 | Tourism Management System Version: V 3.2 is affected by: Cross Site Request Forgery (CSRF). | 14/06/2022 |
| CVE-2021-4232 | MEDIO6.1 | A vulnerability classified as problematic has been found in Zoo Management System 1.0. Affected is an unknown function of the file admin/manage-ticket.php. The manipulation with the input <script>alert(1)</script> leads to cross site scripting. It is possible to launch the attack remotely. | 26/05/2022 |