Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.6Notesnook is a note-taking app.Check if you run itEPSS 0.26%Mar 27, 2026
- High8.2Handlebars provides the power necessary to let users build semantic templates.Check if you run itEPSS 0.22%Mar 27, 2026
- Medium4.7Handlebars provides the power necessary to let users build semantic templates.Check if you run itEPSS 0.38%Mar 27, 2026
- Medium6.1Statamic is a Laravel and Git powered content management system (CMS).Check if you run itEPSS 0.25%Mar 27, 2026
- Low2.0A vulnerability was detected in SourceCodester Online Quiz System up to 1.0.Check if you run itEPSS 0.33%Mar 27, 2026
- Low1.9A security vulnerability has been detected in code-projects Online Reviewer System up to 1.0.Check if you run itEPSS 0.35%Mar 27, 2026
- Medium4.8FOG is a free open-source cloning/imaging/rescue suite/inventory management system.Check if you run itEPSS 0.27%Mar 27, 2026
- High7.3Home Assistant is open source home automation software that puts local control and privacy first.Check if you run itEPSS 0.25%Mar 27, 2026
- High7.3Home Assistant is open source home automation software that puts local control and privacy first.Check if you run itEPSS 0.28%Mar 27, 2026
- Low2.0A vulnerability was identified in code-projects Social Networking Site 1.0.Check if you run itEPSS 0.33%Mar 27, 2026
- High8.2WWBN AVideo is an open source video platform.Check if you run itEPSS 0.34%Mar 27, 2026
- Medium4.8A Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory System 1.0 in in the view_purchase.php file via the "limit" parameter.Check if you run itEPSS 0.30%Mar 27, 2026
- Medium6.1A Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory System 1.0 in the view_product.php file via the "limit" parameter.Check if you run itEPSS 0.31%Mar 27, 2026
- Medium6.1A Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory System 1.0 in the view_category.php file via the "limit" parameter.Check if you run itEPSS 0.31%Mar 27, 2026
- Medium6.1A Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory System 1.0 in the view_sales.php file via the "limit" parameter.Check if you run itEPSS 0.31%Mar 27, 2026
- Medium6.1A Reflected Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Sales and Inventory System 1.0.Check if you run itEPSS 0.31%Mar 27, 2026
- Medium5.4A Stored Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Online Food Ordering System v1.0 in the Category management module within the admin panel.Check if you run itEPSS 0.24%Mar 27, 2026
- High7.0The '/api/v1/files/images/{flow_id}/{file_name}' endpoint serves SVG files with the 'image/svg+xml' content type without sanitizing their content.Check if you run itEPSS 0.27%Mar 27, 2026
- Medium5.1A reflected Cross-Site Scripting (XSS) vulnerability has been discovered in Clickedu.Check if you run itEPSS 0.44%Mar 27, 2026
- Critical9.4OpenBao is an open source identity-based secrets management system.Check if you run itEPSS 0.45%Mar 27, 2026
- Medium6.1A Reflected Cross-Site Scripting (XSS) vulnerability has been identified in DSpace JSPUI 6.5 within the search/discover filtering functionality.Check if you run itEPSS 0.21%Mar 27, 2026
- Medium5.1ByteDance DeerFlow versions prior to commit 5dbb362 contain a stored cross-site scripting vulnerability in the artifacts API that allows attackers to execute arbitrary…Check if you run itEPSS 0.34%Mar 27, 2026
- Medium4.8Bludit is vulnerable to Stored Cross-Site Scripting (XSS) in its image upload functionality.Check if you run itEPSS 0.19%Mar 27, 2026
- High7.0Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Thales Sentinel LDK Runtime on Windows allows Stored XSS.Check if you run itEPSS 0.18%Mar 27, 2026
- Medium5.1WordPress Plugin "OpenStreetMap" provided by MiKa contains a cross-site scripting vulnerability.Check if you run itEPSS 0.29%Mar 27, 2026