Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.0CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support.Check if you run itEPSS 0.39%Apr 1, 2026
- Critical9.0CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support.Check if you run itEPSS 0.36%Apr 1, 2026
- High8.4CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support.Check if you run itEPSS 0.35%Apr 1, 2026
- Critical9.0CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support.Check if you run itEPSS 0.46%Apr 1, 2026
- Critical9.0CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support.Check if you run itEPSS 0.39%Apr 1, 2026
- Medium5.4IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10.0 through 10.0.9.1 and IBM Verify Identity Access 11.0 through 11.…Check if you run itEPSS 0.15%Apr 1, 2026
- Medium6.9File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory.Check if you run itEPSS 0.36%Apr 1, 2026
- Critical9.0File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory.Check if you run itEPSS 0.39%Apr 1, 2026
- High8.7Payload is a free and open source headless content management system.Check if you run itEPSS 0.36%Apr 1, 2026
- Medium6.1Notesnook is a note-taking app focused on user privacy & ease of use.Check if you run itEPSS 0.34%Apr 1, 2026
- Medium4.8A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with administrative privileges to conduct a stored XSS…Check if you run itEPSS 0.24%Apr 1, 2026
- Medium4.8A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with administrative privileges to conduct a stored XSS…Check if you run itEPSS 0.24%Apr 1, 2026
- Medium4.8A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with administrative privileges to conduct a stored XSS…Check if you run itEPSS 0.22%Apr 1, 2026
- Medium4.8A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with administrative privileges to conduct a stored XSS…Check if you run itEPSS 0.17%Apr 1, 2026
- Medium6.1A vulnerability in the web-based management interface of Cisco IMC could allow an unauthenticated, remote attacker to conduct a reflected XSS attack against a user of…Check if you run itEPSS 0.18%Apr 1, 2026
- Medium6.1A Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Zoo Management System v1.0.Check if you run itEPSS 0.31%Apr 1, 2026
- Medium5.4Multiple stored cross-site scripting (XSS) vulnerabilities in the submit_add_user.asp endpoint of DDSN Interactive Acora CMS v10.7.1 allow attackers to execute arbitra…Check if you run itEPSS 0.23%Apr 1, 2026
- Medium6.4The King Addons for Elementor plugin for WordPress is vulnerable to multiple Contributor+ DOM-Based Stored Cross-Site Scripting vulnerabilities in all versions up to,…Check if you run itEPSS 0.24%Apr 1, 2026
- High7.3A reflected cross-site scripting (XSS) vulnerability in the dashboard search functionality of the VertiGIS FM solution allows attackers to craft a malicious URL, that…Check if you run itEPSS 0.26%Apr 1, 2026
- Medium5.9Lack of output escaping for article titles leads to XSS vectors in various locations.Check if you run itEPSS 0.19%Apr 1, 2026
- Medium5.9Lack of output escaping leads to a XSS vector in the multilingual associations component.Check if you run itEPSS 0.22%Apr 1, 2026
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force Ultimate Addons for WPBakery Page Builder allows…Check if you run itEPSS 0.22%Apr 1, 2026
- Low2.1A vulnerability was detected in code-projects Simple Laundry System 1.0.Check if you run itEPSS 0.46%Apr 1, 2026
- Low2.0A security vulnerability has been detected in welovemedia FFmate up to 2.0.15.Check if you run itEPSS 0.33%Apr 1, 2026
- Low2.0A weakness has been identified in bufanyun HotGo 1.0/2.0.Check if you run itEPSS 0.33%Apr 1, 2026