Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.1A maliciously crafted HTML payload in a component name, when displayed during the delete confirmation dialog and clicked by a user, can trigger a Stored Cross-site Scr…Check if you run itEPSS 0.29%Apr 14, 2026
- Medium4.8A flaw was found in Keycloak, specifically in the organization selection login page.Check if you run itEPSS 0.38%Apr 14, 2026
- Medium6.1Leaflet versions up to and including 1.9.4 are vulnerable to Cross-Site Scripting (XSS) via the bindPopup() method.Check if you run itEPSS 0.19%Apr 14, 2026
- Medium4.4The WholeSale Products Dynamic Pricing Management WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up t…Check if you run itEPSS 0.24%Apr 14, 2026
- Medium6.4The ShopLentor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the woolentor_quickview_button shortcode's button_text attribute in all versions u…Check if you run itEPSS 0.35%Apr 14, 2026
- Medium6.4The Surbma | Booking.com Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode in all versions up to, and including, 2…Check if you run itEPSS 0.15%Apr 14, 2026
- High7.2The Form Maker by 10Web plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Matrix field (Text Box input type) in form submissions in all version…Check if you run itEPSS 0.40%Apr 14, 2026
- Medium5.1MaxKB is an open-source AI assistant for enterprise.Check if you run itEPSS 0.25%Apr 14, 2026
- Medium6.9MaxKB is an open-source AI assistant for enterprise.Check if you run itEPSS 0.29%Apr 14, 2026
- Medium6.9MaxKB is an open-source AI assistant for enterprise.Check if you run itEPSS 0.30%Apr 14, 2026
- Medium4.1SAP BusinessObjects Business Intelligence application allows an authenticated attacker to inject malicious JavaScript payloads through crafted URLs.Check if you run itEPSS 0.28%Apr 14, 2026
- Medium6.1Due to a Cross-Site Scripting (XSS) vulnerability in the SAP Supplier Relationship Management (SICF Handler in SRM Catalog), an unauthenticated attacker could craft a…Check if you run itEPSS 0.23%Apr 14, 2026
- Medium5.3A vulnerability was found in aandrew-me ytDownloader up to 3.20.2.Check if you run itEPSS 0.45%Apr 13, 2026
- Low2.0A security vulnerability has been detected in DbGate up to 7.1.4.Check if you run itEPSS 0.33%Apr 13, 2026
- Medium5.4Vtiger CRM 8.4.0 contains a reflected cross-site scripting (XSS) vulnerability in the MailManager module.Check if you run itEPSS 0.14%Apr 13, 2026
- Medium5.1Pachno 1.0.6 contains a stored cross-site scripting vulnerability that allows attackers to execute arbitrary HTML and script code by injecting malicious payloads into…Check if you run itEPSS 0.26%Apr 13, 2026
- Critical9.3Decidim is a participatory democracy framework.Check if you run itEPSS 0.36%Apr 13, 2026
- Low1.9A weakness has been identified in code-projects Simple Content Management System 1.0.Check if you run itEPSS 0.35%Apr 13, 2026
- Low2.1Improper Neutralization of Input During Web Page Generation vulnerability allows Stored Cross-Site Scripting via event comments.Check if you run itEPSS 0.23%Apr 13, 2026
- Medium5.4Cross-Site Scripting vulnerability in the Snipe-IT web-based asset management system v8.3.0 to up and including v8.3.1 allows authenticated attacker with lowest privil…Check if you run itEPSS 0.23%Apr 13, 2026
- High8.0Totara LMS v19.1.5 and before is vulnerable to HTML Injection.Check if you run itEPSS 0.43%Apr 13, 2026
- Medium4.6LibreNMS versions before 26.3.0 are affected by an authenticated Cross-site Scripting vulnerability on the showconfig page.Check if you run itEPSS 0.25%Apr 13, 2026
- Medium5.4Stored Cross-Site Scripting (XSS) via Unsanitized Topology Metadata in Apache Storm UI Versions Affected: before 2.8.6 Description: The Storm UI visualization componen…Check if you run itEPSS 0.59%Apr 13, 2026
- Low2.0A vulnerability has been found in 1Panel-dev MaxKB up to 2.4.2.Check if you run itEPSS 0.27%Apr 13, 2026
- Low2.0A vulnerability has been found in PHPGurukul Company Visitor Management System 2.0.Check if you run itEPSS 0.33%Apr 13, 2026