Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.4Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts…Check if you run itEPSS 0.63%Apr 14, 2026
- Medium5.4Adobe Experience Manager versions 6.5.24, FP11.7 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.Check if you run itEPSS 0.36%Apr 14, 2026
- Medium5.4Adobe Experience Manager versions 6.5.24, FP11.7 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.Check if you run itEPSS 0.36%Apr 14, 2026
- Medium5.4Adobe Experience Manager versions 6.5.24, FP11.7 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.Check if you run itEPSS 0.36%Apr 14, 2026
- High8.7Adobe Connect versions 2025.3, 12.10 and earlier are affected by a Cross-Site Scripting (XSS) vulnerability that could result in privilege escalation.Check if you run itEPSS 0.70%Apr 14, 2026
- Medium6.1Adobe Connect versions 2025.3, 12.10 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability.Check if you run itEPSS 0.43%Apr 14, 2026
- Medium6.1Improper neutralization of input during web page generation ('cross-site scripting') in Windows Admin Center allows an unauthorized attacker to perform spoofing over a network.Check if you run itEPSS 0.41%Apr 14, 2026
- Medium5.4Adobe Experience Manager versions 6.5.24, FP11.7 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.Check if you run itEPSS 0.36%Apr 14, 2026
- Medium5.4Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts…Check if you run itEPSS 0.63%Apr 14, 2026
- Critical9.3Adobe Connect versions 2025.3, 12.10 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability.Check if you run itEPSS 0.74%Apr 14, 2026
- Critical9.3Adobe Connect versions 2025.3, 12.10 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability.Check if you run itEPSS 0.74%Apr 14, 2026
- Critical9.3Adobe Connect versions 2025.3, 12.10 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability.Check if you run itEPSS 0.74%Apr 14, 2026
- Medium5.1October is a Content Management System (CMS) and web platform.Check if you run itEPSS 0.20%Apr 14, 2026
- Medium5.1October is a Content Management System (CMS) and web platform.Check if you run itEPSS 0.25%Apr 14, 2026
- Medium6.1Adobe Connect versions 2025.3, 12.10 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability.Check if you run itEPSS 0.28%Apr 14, 2026
- Medium5.4Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing o…Check this weekEPSS 19.07%Apr 14, 2026
- Medium4.8A improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 t…Check if you run itEPSS 0.24%Apr 14, 2026
- Medium5.4An improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.3, FortiSOAR PaaS 7.…Check if you run itEPSS 0.22%Apr 14, 2026
- Medium6.1In manikandan580 School-management-system 1.0, a reflected XSS vulnerability exists in /studentms/admin/contact-us.php via the pagedes POST parameter.Check if you run itEPSS 0.18%Apr 14, 2026
- Medium6.1In manikandan580 School-management-system 1.0, a reflected cross-site scripting (XSS) vulnerability exists in /studentms/admin/contact-us.php via the email POST parameter.Check if you run itEPSS 0.18%Apr 14, 2026
- Medium6.1alandsilva26 hotel-management-php 1.0 is vulnerable to Cross Site Scripting (XSS) in /public/admin/edit_room.php which allows an attacker to inject and execute arbitra…Check if you run itEPSS 0.18%Apr 14, 2026
- Medium5.4An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability [CWE-79] vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0…Check if you run itEPSS 0.27%Apr 14, 2026
- Medium5.4Stored XSS in Ivanti N-ITSM before version 2025.4 allows a remote authenticated attacker to obtain limited information from other user sessions.Check if you run itEPSS 0.55%Apr 14, 2026
- High7.1A maliciously crafted HTML payload in an assembly variant name, when displayed during the delete confirmation dialog and clicked by a user, can trigger a Stored Cross-…Check if you run itEPSS 0.29%Apr 14, 2026
- High7.1A maliciously crafted HTML payload, stored in a design name and exported to CSV, can trigger a Stored Cross-site Scripting (XSS) vulnerability in the Autodesk Fusion d…Check if you run itEPSS 0.29%Apr 14, 2026