Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.6A stored cross-site scripting (XSS) vulnerability exists in the web interface of Lyrion Music Server <= 9.0.3.Open the advisoryDec 8, 2025
- Medium6.1Barix Instreamer v04.06 and earlier is vulnerable to Cross Site Scripting (XSS) in the Web UI I/O & Serial configuration page, specifically the CTS close command user-…Check if you run itEPSS 0.22%Dec 8, 2025
- High8.3In affected versions, vulnerability-lookup handled user-controlled content in comments and bundles in an unsafe way, which could lead to stored Cross-Site Scripting (XSS).Check if you run itEPSS 0.29%Dec 8, 2025
- Low1.9A flaw has been found in GreenCMS 2.3.0603.Check if you run itEPSS 0.27%Dec 8, 2025
- Low1.9A vulnerability was found in code-projects Chamber of Commerce Membership Management System 1.0.Check if you run itEPSS 0.22%Dec 8, 2025
- Low1.9A vulnerability was found in alokjaiswal Hotel-Management-services-using-MYSQL-and-php up to 5f8b60a7aa6c06a5632de569d4e3f6a8cd82f76f.Check if you run itEPSS 0.28%Dec 7, 2025
- Low2.0A vulnerability has been found in alokjaiswal Hotel-Management-services-using-MYSQL-and-php up to 5f8b60a7aa6c06a5632de569d4e3f6a8cd82f76f.Check if you run itEPSS 0.23%Dec 7, 2025
- High7.2The Widgets for Google Reviews plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 13.2.4 due to insufficient input…Check if you run itEPSS 0.40%Dec 6, 2025
- Medium6.1The Link Whisper Free plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the type parameter in all versions up to, and including, 0.8.8 due to in…Check if you run itEPSS 0.21%Dec 6, 2025
- Medium5.4Contacts app for Nextcloud easily syncs contacts from various devices with your Nextcloud and allows editing.Check if you run itEPSS 0.25%Dec 5, 2025
- Medium5.4Nextcloud Mail is the mail app for Nextcloud, a self-hosted productivity platform.Check if you run itEPSS 0.25%Dec 5, 2025
- Medium5.1Advantech WISE-DeviceOn Server versions prior to 5.4 contain a stored cross-site scripting (XSS) vulnerability in the /rmm/v1/plugin-config/addins/menus endpoint.Check if you run itEPSS 0.21%Dec 5, 2025
- Medium5.1Advantech WISE-DeviceOn Server versions prior to 5.4 contain a stored cross-site scripting (XSS) vulnerability in the /rmm/v1/rule-engines endpoint.Check if you run itEPSS 0.20%Dec 5, 2025
- Medium5.1Advantech WISE-DeviceOn Server versions prior to 5.4 contain a stored cross-site scripting (XSS) vulnerability in the /rmm/v1/dog/{agentId} endpoint.Check if you run itEPSS 0.20%Dec 5, 2025
- Medium5.1Advantech WISE-DeviceOn Server versions prior to 5.4 contain a stored cross-site scripting (XSS) vulnerability in the /rmm/v1/plugin-config/dashboards/menus endpoint.Check if you run itEPSS 0.20%Dec 5, 2025
- Medium5.1Advantech WISE-DeviceOn Server versions prior to 5.4 contain a stored cross-site scripting (XSS) vulnerability in the /rmm/v1/devices/name/{agent_id} endpoint.Check if you run itEPSS 0.21%Dec 5, 2025
- Medium5.1Advantech WISE-DeviceOn Server versions prior to 5.4 contain a stored cross-site scripting (XSS) vulnerability in the /rmm/v1/devicegroups/ endpoint.Check if you run itEPSS 0.26%Dec 5, 2025
- Medium5.1Advantech WISE-DeviceOn Server versions prior to 5.4 contain a stored cross-site scripting (XSS) vulnerability in the /rmm/v1/action/schedule endpoint.Check if you run itEPSS 0.25%Dec 5, 2025
- Medium5.1Advantech WISE-DeviceOn Server versions prior to 5.4 contain a stored cross-site scripting (XSS) vulnerability in the /rmm/v1/devicemap/building endpoint.Check if you run itEPSS 0.26%Dec 5, 2025
- Medium5.1Advantech WISE-DeviceOn Server versions prior to 5.4 contain a stored cross-site scripting (XSS) vulnerability in the /rmm/v1/devicemap/plan endpoint.Check if you run itEPSS 0.21%Dec 5, 2025
- Medium6.1Nextcloud Server is a self hosted personal cloud system.Open the advisoryDec 5, 2025
- Medium6.1The Nouri.sh Newsletter plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the parameter in all versions up to, and including, 1.0.1.3 due to ins…Check if you run itEPSS 0.25%Dec 5, 2025
- Medium4.4The Weekly Planner plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.0 due to insufficient i…Check if you run itEPSS 0.20%Dec 5, 2025
- Medium6.4The Easy Jump Links Menus plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the parameter in all versions up to, and including, 1.0.0 due to insuff…Check if you run itEPSS 0.24%Dec 5, 2025
- Medium6.1The WP-SOS-Donate Donation Sidebar Plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the parameter in all versions up to, and including, 0.9.2 d…Check if you run itEPSS 0.26%Dec 5, 2025