Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low2.0A security vulnerability has been detected in welovemedia FFmate up to 2.0.15.Check if you run itEPSS 0.33%Apr 1, 2026
- Low2.0A weakness has been identified in bufanyun HotGo 1.0/2.0.Check if you run itEPSS 0.33%Apr 1, 2026
- Low2.0A security flaw has been discovered in z-9527 admin 1.0/2.0.Check if you run itEPSS 0.33%Apr 1, 2026
- Low2.0A vulnerability was found in gougucms 4.08.18.Check if you run itEPSS 0.33%Apr 1, 2026
- Medium5.1XenForo before 2.3.10 and before 2.2.19 is vulnerable to stored cross-site scripting (XSS) in structured text mentions, primarily affecting legacy profile post content.Check if you run itEPSS 0.24%Apr 1, 2026
- Medium5.1XenForo before 2.3.9 and before 2.2.18 is vulnerable to cross-site scripting (XSS) related to lightbox usage in posts.Check if you run itEPSS 0.27%Apr 1, 2026
- Medium5.1XenForo before 2.3.9 is vulnerable to stored cross-site scripting (XSS) related to BB code rendering.Check if you run itEPSS 0.24%Apr 1, 2026
- Low2.1A security vulnerability has been detected in code-projects BloodBank Managing System 1.0.Check if you run itEPSS 0.45%Apr 1, 2026
- Medium6.4The WP Shortcodes Plugin — Shortcodes Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'max_width' attribute of the shortcode in all…Check if you run itEPSS 0.20%Mar 31, 2026
- High8.6SiYuan is a personal knowledge management system.Check if you run itEPSS 0.60%Mar 31, 2026
- High8.2SiYuan is a personal knowledge management system.Check if you run itEPSS 0.36%Mar 31, 2026
- Critical9.0SiYuan is a personal knowledge management system.Check if you run itEPSS 0.73%Mar 31, 2026
- Medium6.1Nuxt OG Image generates OG Images with Vue templates in Nuxt.Check if you run itEPSS 0.26%Mar 31, 2026
- Medium4.8A stored Cross-Site Scripting (XSS) vulnerability has been identified in the SonicWall Email Security appliance due to improper neutralization of user-supplied input d…Check if you run itEPSS 0.29%Mar 31, 2026
- Medium6.1WWBN AVideo is an open source video platform.Check if you run itEPSS 0.26%Mar 31, 2026
- Medium6.4WWBN AVideo is an open source video platform.Check if you run itEPSS 0.31%Mar 31, 2026
- Medium6.1WWBN AVideo is an open source video platform.Check if you run itEPSS 0.26%Mar 31, 2026
- Medium6.1Captcha Protect is a Traefik middleware to add an anti-bot challenge to individual IPs in a subnet when traffic spikes are detected from that subnet.Check if you run itEPSS 0.33%Mar 31, 2026
- Low1.9A security vulnerability has been detected in SourceCodester Leave Application System 1.0.Check if you run itEPSS 0.35%Mar 31, 2026
- Low2.1Discourse is an open-source discussion platform.Check if you run itEPSS 0.28%Mar 31, 2026
- Medium5.4Discourse is an open-source discussion platform.Check if you run itEPSS 0.28%Mar 31, 2026
- Medium5.3Discourse is an open-source discussion platform.Check if you run itEPSS 0.29%Mar 31, 2026
- Medium4.8Pega Platform versions 8.1.0 through 25.1.0 are affected by a Stored Cross-site Scripting vulnerability in a user interface component.Check if you run itEPSS 0.26%Mar 31, 2026
- Medium6.1Slippers is a UI component framework for Django.Check if you run itEPSS 0.34%Mar 31, 2026
- High8.6Stored cross-site scripting (XSS) in Checkmk 2.5.0 (beta) before 2.5.0b2 allows authenticated users with permission to create hosts or services to execute arbitrary Ja…Check if you run itEPSS 0.23%Mar 31, 2026