National Vulnerability Database • Synced Real-Time from NIST NVD & MITRE

Universal Security Vulnerabilities & CVE Catalog

Fast, deterministic intelligence across 391,734 official Common Vulnerabilities and Exposures (CVEs) with CVSS v3.1 vector breakdowns, threat severity scores, and verified remediation links.

Reset All
Found 39,241 matching advisories
Page 21 of 1,636
CVE-2024-44658 MEDIUM 6.5
phpgurukul/complaint_management_system CWE-89 Remote (AV:N)

PHPGurukul Complaint Management System 2.0 is vulnerable to SQL Injection via the subcategory and category parameters in subcategory.php....

📅 2025-11-17 Inspect Dossier →
CVE-2024-44655 MEDIUM 6.1
phpgurukul/complaint_management_system CWE-79 Remote (AV:N)

PHPGurukul Complaint Management System 2.0 is vulnerable to Cross Site Scripting (XSS) via the search parameter in user-search.php....

📅 2025-11-17 Inspect Dossier →
CVE-2024-44654 MEDIUM 6.5
phpgurukul/complaint_management_system CWE-89 Remote (AV:N)

PHPGurukul Complaint Management System 2.0 is vulnerable to SQL Injection via the email and mobileno parameters in reset-password.php....

📅 2025-11-17 Inspect Dossier →
CVE-2024-44657 MEDIUM 6.5
phpgurukul/complaint_management_system CWE-89 Remote (AV:N)

PHPGurukul Complaint Management System 2.0 is vulnerable to SQL Injection via the fromdate and todate parameters in between-date-userreport.php....

📅 2025-11-17 Inspect Dossier →
CVE-2024-44653 MEDIUM 6.5
kashipara/ecommerce_website CWE-89 Remote (AV:N)

Kashipara Ecommerce Website 1.0 is vulnerable to SQL Injection via the user_email parameter in user_login.php....

📅 2025-11-17 Inspect Dossier →
CVE-2024-44651 MEDIUM 6.5
kashipara/ecommerce_website CWE-89 Remote (AV:N)

Kashipara Ecommerce Website 1.0 is vulnerable to SQL Injection via the recover_email parameter in user_password_recover.php....

📅 2025-11-17 Inspect Dossier →
CVE-2024-46336 MEDIUM 6.1
kashipara/school_management_system CWE-79 Remote (AV:N)

kashipara School Management System 1.0 is vulnerable to Cross Site Scripting (XSS) via /client_user/feedback.php....

📅 2025-11-17 Inspect Dossier →
CVE-2024-46334 MEDIUM 6.1
kashipara/school_management_system CWE-79 Remote (AV:N)

kashipara School Management System 1.0 is vulnerable to Cross Site Scripting (XSS) via the formuser and formpassword parameters in /adminLogin.php....

📅 2025-11-17 Inspect Dossier →
CVE-2024-44652 MEDIUM 6.5
kashipara/ecommerce_website CWE-89 Remote (AV:N)

Kashipara Ecommerce Website 1.0 is vulnerable to SQL Injection via the user_email, username, user_firstname, user_lastname, and user_address parameters in user_register.php....

📅 2025-11-17 Inspect Dossier →
CVE-2024-44648 MEDIUM 6.5
phpgurukul/small_crm CWE-89 Remote (AV:N)

PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection via id and adminremark parameters in quote-details.php....

📅 2025-11-17 Inspect Dossier →
CVE-2024-44647 MEDIUM 6.1
phpgurukul/small_crm CWE-79 Remote (AV:N)

PHPGurukul Small CRM 3.0 is vulnerable to Cross Site Scripting (XSS) via the aremark parameter in manage-tickets.php....

📅 2025-11-17 Inspect Dossier →
CVE-2024-44644 MEDIUM 6.5
phpgurukul/small_crm CWE-89 Remote (AV:N)

PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection via the frm_id and aremark parameters in manage-tickets.php....

📅 2025-11-17 Inspect Dossier →
CVE-2024-44641 MEDIUM 6.5
phpgurukul/small_crm CWE-89 Remote (AV:N)

PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection via the oldpass parameter in change-password.php....

📅 2025-11-17 Inspect Dossier →
CVE-2024-55016 MEDIUM 6.5
phpgurukul/student_record_system CWE-89 Remote (AV:N)

PHPGurukul Student Record Management System 3.20 is vulnerable to SQL Injection via the id and password parameters in login.php....

📅 2025-11-14 Inspect Dossier →
CVE-2024-44640 MEDIUM 6.5
phpgurukul/student_record_system CWE-89 Remote (AV:N)

PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the course-short, course-full, and cdate parameters in add-course.php....

📅 2025-11-14 Inspect Dossier →
CVE-2024-44639 MEDIUM 6.5
phpgurukul/student_record_system CWE-89 Remote (AV:N)

PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the sub1, sub2, sub3, sub4, and course-short parameters in add-subject.php....

📅 2025-11-14 Inspect Dossier →
CVE-2024-44636 MEDIUM 6.5
phpgurukul/student_record_system CWE-89 Remote (AV:N)

PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the adminname and aemailid parameters in /admin-profile.php....

📅 2025-11-14 Inspect Dossier →
CVE-2024-44635 MEDIUM 6.1
phpgurukul/student_record_system CWE-79 Remote (AV:N)

PHPGurukul Student Record System 3.20 is vulnerable to Cross Site Scripting (XSS) via adminname and aemailid parameters in /admin-profile.php....

📅 2025-11-14 Inspect Dossier →
CVE-2024-44633 MEDIUM 6.5
phpgurukul/student_record_system CWE-89 Remote (AV:N)

PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the currentpassword parameter in change-password.php....

📅 2025-11-14 Inspect Dossier →
CVE-2024-44632 MEDIUM 6.5
phpgurukul/student_record_system CWE-89 Remote (AV:N)

PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the id and emailid parameters in password-recovery.php....

📅 2025-11-14 Inspect Dossier →
CVE-2024-44630 MEDIUM 6.5
phpgurukul/student_record_system CWE-89 Remote (AV:N)

Multiple parameters in register.php in PHPGurukul Student Record System 3.20 are vulnerable to SQL injection. These include: c-full, fname, mname,lname, gname, ocp, nation, mobno, email, board1, roll1...

📅 2025-11-14 Inspect Dossier →
CVE-2024-42749 MEDIUM 6.1
altocms/alto_cms CWE-79 Remote (AV:N)

Cross Site Scripting vulnerability in Alto CMS v.1.1.13 allows a local attacker to execute arbitrary code via a crafted script....

📅 2025-11-14 Inspect Dossier →
usememos/memos CWE-287 Remote (AV:N)

Memos is a privacy-first, lightweight note-taking service that uses Access Tokens to authenticate application access. When a user changes their password, the existing list of Access Tokens stay valid ...

📅 2025-11-14 Inspect Dossier →
google/chrome CWE-416 Remote (AV:N)

Use after free in Internals in Google Chrome on iOS prior to 127.0.6533.88 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a...

📅 2025-11-14 Inspect Dossier →
Showing Page 21 of 1,636 • 39,241 matching CVEs (out of 391,734 NIST advisories)