VULNERABILITY

CVE search

Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.

Severity

严重高危中危低危Exploited in the wild (KEV)

Language / ecosystem

JavaScript / TypeScript (npm)Python (PyPI)PHP (Packagist)Java / Kotlin (Maven)GoRuby (RubyGems).NET (NuGet)

Stack

JavaScript / Node.js

Next.jsNuxtReactAngularSvelte / SvelteKitAstroRemixViteExpressNestJSFastifyNode.jsaxios

PHP

LaravelSymfonyPHP

Python

DjangoFlaskFastAPI / Starlette

Ruby

Ruby on Rails

Java

Spring

GinFiber

CMS

WordPressWooCommerceDrupalGhostStrapi

Servers & databases

nginxApache HTTP ServerMySQLPostgreSQLRedis

Vendor1

carmelooracleibmgoogleadobemicrosoftmozillaciscoapacheappleredhatjenkinshpAll vendors →

carmelo products

simple pizza ordering system 18church donation system 14intern membership management system 13online event judging system 10simple food order system 10simple flight ticket booking system 9simple stock system 6computer book store 5food ordering review system 5simple student alumni system 5computer laboratory system 4

402,685 vulnerabilities · 1,766 actively exploited (CISA KEV)

carmelo ✕Clear filters

127 results

ID	Severity	Summary	Published
CVE-2025-25914	严重9.8	SQL injection vulnerability in Online Exam Mastering System v.1.0 allows a remote attacker to execute arbitrary code via the fid parameter	17/03/2025
CVE-2024-28279	高危7.3	Code-projects Computer Book Store 1.0 is vulnerable to SQL Injection via book.php?bookisbn=.	14/05/2024
CVE-2024-25250	严重9.8	SQL Injection vulnerability in code-projects Agro-School Management System 1.0 allows attackers to run arbitrary code via the Login page.	13/03/2024
CVE-2024-24105	高危7.8	SQL Injection vulnerability in Code-projects Computer Science Time Table System 1.0 allows attackers to run arbitrary code via adminFormvalidation.php.