Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low2.2A cross-site scripting (XSS) vulnerability has been reported to affect QuMagie.Check if you run itEPSS 0.22%Jan 2, 2026
- Medium6.1RoundCube Webmail Cross-site Scripting VulnerabilityPatch nowKEVEPSS 26.84%Dec 17, 2025
- Medium5.4grav before v1.7.49.5 has a Stored Cross-Site Scripting (Stored XSS) vulnerability in the page editing functionality.Check if you run itEPSS 0.16%Dec 15, 2025
- High8.1An issue was discovered in Wekan The Open Source kanban board system up to version 18.15, fixed in 18.16.Check if you run itEPSS 0.38%Dec 15, 2025
- Critical9.0In MISP before 2.5.28, app/View/Elements/Workflows/executionPath.ctp allows XSS in the workflow execution path.Check if you run itEPSS 0.33%Dec 15, 2025
- Low2.0A security vulnerability has been detected in Qualitor up to 8.24.73.Check if you run itEPSS 0.25%Dec 12, 2025
- Medium4.6RuoYi versions 4.8.1 and earlier is affected by a stored XSS vulnerability in the /system/menu/edit endpoint.Check if you run itEPSS 0.18%Dec 12, 2025
- Medium4.6jshERP v3.5 and earlier is affected by a stored Cross Site Scripting (XSS) vulnerability via the /msg/add endpoint.Check if you run itEPSS 0.17%Dec 12, 2025
- Medium4.6jshERP versions 3.5 and earlier are affected by a stored XSS vulnerability.Check if you run itEPSS 0.17%Dec 12, 2025
- Medium6.1Masa CMS is an open source Enterprise Content Management platform.Check if you run itEPSS 0.25%Dec 12, 2025
- Medium6.1HotelDruid v3.0.7 and before is vulnerable to Cross Site Scripting (XSS) in the /modifica_app.php file.Check if you run itEPSS 0.27%Dec 11, 2025
- High8.8edoc-doctor-appointment-system v1.0.1 is vulnerable to Cross Site Scripting (XSS) in admin/add-session.php via the "title" parameter.Check if you run itEPSS 0.56%Dec 11, 2025
- High8.0GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.11 before 18.4.6, 18.5 before 18.5.4, and 18.6 before 18.6.2 that could have, under certa…Check if you run itEPSS 0.53%Dec 11, 2025
- High8.7GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.4 before 18.4.6, 18.5 before 18.5.4, and 18.6 before 18.6.2 that, under certain condition…Check if you run itEPSS 0.43%Dec 11, 2025
- Medium6.1Shopware is an open commerce platform.Check if you run itEPSS 0.19%Dec 11, 2025
- Medium5.4Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacke…Check if you run itEPSS 0.25%Dec 10, 2025
- Medium5.4Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacke…Check if you run itEPSS 0.20%Dec 10, 2025
- Medium5.4Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacke…Check if you run itEPSS 0.25%Dec 10, 2025
- Medium5.4Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacke…Check if you run itEPSS 0.25%Dec 10, 2025
- Medium5.4Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacke…Check if you run itEPSS 0.25%Dec 10, 2025
- Medium5.4Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacke…Check if you run itEPSS 0.25%Dec 10, 2025
- Medium5.4Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacke…Check if you run itEPSS 0.25%Dec 10, 2025
- Medium5.4Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacke…Check if you run itEPSS 0.22%Dec 10, 2025
- Medium5.4Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacke…Check if you run itEPSS 0.25%Dec 10, 2025
- Medium5.4Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacke…Check if you run itEPSS 0.25%Dec 10, 2025