Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.3RoundCube Webmail Cross-Site Scripting VulnerabilityPatch nowKEVEPSS 82.88%Aug 5, 2024
- Medium6.1RoundCube Webmail Cross-Site Scripting (XSS) VulnerabilityPatch nowKEVEPSS 73.30%Jun 6, 2024
- Critical9.1StellarWP the_events_calendar Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 2.08%Jun 4, 2024
- Low3.5wp-file-upload Plugin wfu_ajaxactions.php wfu_ajax_action_callback cross site scriptingCheck if you run itEPSS 0.49%Mar 31, 2024
- Medium6.1In Thruk Monitoring through 2.46.3, the login field of the login form is vulnerable to reflected XSS.Patch nowKEVEPSS 0.20%Dec 31, 2023
- Medium6.1undsgn uncode Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.35%Dec 28, 2023
- Medium5.4Roundcube Webmail Persistent Cross-Site Scripting (XSS) VulnerabilityPatch nowKEVEPSS 76.90%Oct 18, 2023
- Medium6.1Roundcube Webmail Persistent Cross-Site Scripting (XSS) VulnerabilityPatch nowKEVEPSS 63.66%Sep 21, 2023
- Critical9.0Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) VulnerabilityPatch nowKEVEPSS 77.27%Jul 6, 2023
- Medium6.1Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) VulnerabilityPatch nowKEVEPSS 49.08%Jun 29, 2023
- Medium6.1Cross-site scripting (XSS) issue Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier, allows remote attackers to inject arbitrary web script in the br…Check if you run itEPSS 0.65%Apr 25, 2023
- Medium6.1Cross-site scripting (XSS) issue in Website app of Odoo Community 15.0 and earlier and Odoo Enterprise 15.0 and earlier, allows remote attackers to inject arbitrary we…Check if you run itEPSS 0.55%Apr 25, 2023
- Medium6.1Cross-site scripting (XSS) issue in Accounting app of Odoo Enterprise 13.0 through 15.0, allows remote attackers who are able to control the contents of accounting jou…Check if you run itEPSS 0.49%Apr 25, 2023
- Medium6.1[IMP] web: StaticList: support CLEAR (5) orm command Before this commit, the StaticList didn't expose a way to apply a CLEAR command (command 5), i.e.Check if you run itEPSS 1.40%Apr 25, 2023
- Medium6.1Cross-site scripting (XSS) issue in Discuss app of Odoo Community 14.0 through 15.0, and Odoo Enterprise 14.0 through 15.0, allows remote attackers to inject arbitrary…Check if you run itEPSS 0.56%Apr 25, 2023
- Critical9.8Fortra Cobalt Strike User Interface Remote Code Execution VulnerabilityPatch nowKEVEPSS 2.71%Mar 24, 2023
- Medium6.1php_curl_class_project php_curl_class Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 1.27%Dec 26, 2022
- Medium6.1Fortra Cobalt Strike Teamserver Cross-Site Scripting (XSS) VulnerabilityPatch nowKEVEPSS 46.45%Sep 21, 2022
- Medium6.1Possible cross-site scripting vulnerability in libxml after commit 960f0e2.Check if you run itEPSS 1.31%Jul 28, 2022
- Medium6.1Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) VulnerabilityPatch nowKEVEPSS 17.63%Apr 20, 2022
- Critical9.8dompdf_project dompdf Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 82.85%Apr 3, 2022
- Medium6.1Synacor Zimbra Collaborate Suite (ZCS) Cross-Site Scripting VulnerabilityPatch nowKEVEPSS 30.93%Dec 16, 2021
- Medium5.4OpenPLC ScadaBR Cross-site Scripting VulnerabilityPatch nowKEVEPSS 48.05%Jun 11, 2021
- Medium6.1Apple iOS, iPadOS, and watchOS WebKit Cross-Site Scripting (XSS) VulnerabilityPatch nowKEVEPSS 7.08%Mar 26, 2021
- Medium6.1chamilo chamilo Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.99%Feb 19, 2021