Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.6Stored cross-site scripting (XSS) in Checkmk 2.5.0 (beta) before 2.5.0b2 allows authenticated users with permission to create hosts or services to execute arbitrary Ja…Check if you run itEPSS 0.23%Mar 31, 2026
- High8.5Stored cross-site scripting (XSS) in Checkmk version 2.5.0 (beta) before 2.5.0b2 allows authenticated users with permission to create pending changes to inject malicio…Check if you run itEPSS 0.15%Mar 31, 2026
- High7.2The Query Monitor – The developer tools panel for WordPress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘$_SERVER['REQUEST_URI']’ para…Check if you run itEPSS 0.40%Mar 31, 2026
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Extend Themes Kubio AI Page Builder allows Stored XSS.This issue…Check if you run itEPSS 0.22%Mar 31, 2026
- Critical9.3Stored Cross-Site Scripting (XSS) in Teampass versions prior to 3.1.5.16, affecting the password manager's password import functionality at the endpoint 'redacted/inde…Check if you run itEPSS 0.23%Mar 31, 2026
- Critical9.3Blind Cross-Site Scripting (XSS) in Teampass, versions prior to 3.1.5.16, within the password manager login functionality in the 'contraseña' parameter of the login fo…Check if you run itEPSS 0.27%Mar 31, 2026
- Medium5.1Reflected Cross-Site Scripting (XSS) vulnerability in Anon Proxy Server v0.104.Check if you run itEPSS 0.19%Mar 31, 2026
- Medium5.1Reflected Cross-Site Scripting (XSS) vulnerability in Anon Proxy Server v0.104.Check if you run itEPSS 0.19%Mar 31, 2026
- Medium5.1Reflected Cross-Site Scripting (XSS) vulnerability in Anon Proxy Server v0.104.Check if you run itEPSS 0.19%Mar 31, 2026
- Medium5.4A Stored Cross-site Scripting (XSS) vulnerability affecting Factory Resource Management in DELMIA Factory Resource Manager from Release 3DEXPERIENCE R2023x through Rel…Check if you run itEPSS 0.17%Mar 31, 2026
- Medium5.4A Stored Cross-site Scripting (XSS) vulnerability affecting Document Management in ENOVIA Collaborative Industry Innovator from Release 3DEXPERIENCE R2023x through Rel…Check if you run itEPSS 0.17%Mar 31, 2026
- Medium6.1The Auto Post Scheduler plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.84.Check if you run itEPSS 0.20%Mar 31, 2026
- Medium6.1The Loco Translate plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘update_href’ parameter in all versions up to, and including, 2.8.2 due…Check if you run itEPSS 0.37%Mar 31, 2026
- Low2.1Multiple cross-site scripting (XSS) vulnerabilities in PaperCut NG/MF before 25.0.10 allow authenticated administrator users to inject arbitrary web script or HTML cod…Check if you run itEPSS 0.23%Mar 31, 2026
- Medium6.1baserCMS is a website development framework.Check if you run itEPSS 0.33%Mar 31, 2026
- Medium6.9baserCMS is a website development framework.Check if you run itEPSS 0.32%Mar 31, 2026
- Low2.1A vulnerability was identified in code-projects Online Food Ordering System 1.0.Check if you run itEPSS 0.45%Mar 31, 2026
- Critical9.0CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support.Check if you run itEPSS 0.38%Mar 30, 2026
- Critical9.0CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support.Check if you run itEPSS 0.38%Mar 30, 2026
- High7.2CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support.Check if you run itEPSS 0.42%Mar 30, 2026
- High7.4Tautulli is a Python based monitoring and tracking tool for Plex Media Server.Check if you run itEPSS 0.41%Mar 30, 2026
- Medium5.1Smoothwall Express versions prior to 3.1 Update 13 contain a reflected cross-site scripting vulnerability in the /redirect.cgi endpoint due to improper sanitation of t…Check if you run itEPSS 0.27%Mar 30, 2026
- Medium5.1Smoothwall Express versions prior to 3.1 Update 13 contain a stored cross-site scripting vulnerability in the /cgi-bin/vpnmain.cgi script due to improper sanitation of…Check if you run itEPSS 0.24%Mar 30, 2026
- Critical9.3A Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory System 1.0.Check if you run itEPSS 0.47%Mar 30, 2026
- Medium6.1A Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory System 1.0.Check if you run itEPSS 0.31%Mar 30, 2026