Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low1.9A weakness has been identified in code-projects Exam Form Submission 1.0.Check if you run itEPSS 0.35%Mar 27, 2026
- Low1.9A security flaw has been discovered in code-projects Online Food Ordering System 1.0.Check if you run itEPSS 0.35%Mar 26, 2026
- Low2.1A vulnerability was identified in code-projects Online Food Ordering System 1.0.Check if you run itEPSS 0.45%Mar 26, 2026
- Medium5.4PrestaShop is an open source e-commerce web application.Check if you run itEPSS 0.40%Mar 26, 2026
- Medium5.4Kestra is an open-source, event-driven orchestration platform Versions up to and including 1.3.3 render user-supplied flow YAML metadata fields — description, inputs[]…Check if you run itEPSS 0.34%Mar 26, 2026
- Medium5.4Ulloady is a file uploader script with multi-file upload support.Check if you run itEPSS 0.30%Mar 26, 2026
- Medium6.1Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Google Analytics GA4 allows Cross-Site Scripting (XSS).Thi…Check if you run itEPSS 0.25%Mar 26, 2026
- Medium6.1Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Calculation Fields allows Cross-Site Scripting (XSS).This…Check if you run itEPSS 0.25%Mar 26, 2026
- Medium5.4Invoice Ninja is a source-available invoice, quote, project and time-tracking app built with Laravel.Check if you run itEPSS 0.25%Mar 26, 2026
- Medium4.8Lychee is a free, open-source photo-management tool.Check if you run itEPSS 0.36%Mar 26, 2026
- Medium5.4Invoice Ninja is a source-available invoice, quote, project and time-tracking app built with Laravel.Check if you run itEPSS 0.30%Mar 26, 2026
- Low0.5Authelia is an open-source authentication and authorization server providing two-factor authentication and single sign-on (SSO) for applications via a web portal.Check if you run itEPSS 0.32%Mar 26, 2026
- Medium6.1A cross-site scripting (XSS) vulnerability in the wff_cols_pref.css.aspx endpoint of staffwiki v7.0.1.19219 allows attackers to execute arbitrary Javascript in the con…Check if you run itEPSS 0.37%Mar 26, 2026
- Medium6.1Stirling-PDF is a locally hosted web application that allows you to perform various operations on PDF files.Check if you run itEPSS 0.31%Mar 26, 2026
- Low1.3Sakai is a Collaboration and Learning Environment (CLE).Check if you run itEPSS 0.26%Mar 26, 2026
- Medium6.1Cross Site Scripting (xss) vulnerability in Timo 2.0.3 via crafted links in the title field.Check if you run itEPSS 0.25%Mar 26, 2026
- Medium6.1A reflected cross-site scripting (XSS) vulnerability in the /admin/menus component of Lightcms v2.0 allows attackers to execute arbitrary Javascript in the context of…Check if you run itEPSS 0.25%Mar 26, 2026
- Medium6.1A reflected cross-site scripting (XSS) vulnerability in the /index/login.html component of YZMCMS v7.4 allows attackers to execute arbitrary Javascript in the context…Check if you run itEPSS 0.25%Mar 26, 2026
- High8.1SolarWinds Observability Self-Hosted was found to be affected by a stored cross-site scripting vulnerability, which when exploited, can lead to unintended script execution.Check if you run itEPSS 0.42%Mar 26, 2026
- High8.7SolarWinds Observability Self-Hosted was found to be affected by a stored cross-site scripting vulnerability, which when exploited, can lead to unintended script execution.Check if you run itEPSS 0.45%Mar 26, 2026
- Low2.1A security flaw has been discovered in itsourcecode Payroll Management System up to 1.0.Check if you run itEPSS 0.45%Mar 26, 2026
- Medium4.9The Complianz – GDPR/CCPA Cookie Consent plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 7.4.4.2.Check if you run itEPSS 0.22%Mar 26, 2026
- High7.2The Fluent Booking plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple parameters in all versions up to, and including, 2.0.01 due to insuff…Check if you run itEPSS 0.30%Mar 26, 2026
- Medium5.1Reflected Cross Site Scripting (XSS) vulnerabilities in GDTaller.Check if you run itEPSS 0.19%Mar 26, 2026
- Medium5.1Reflected Cross Site Scripting (XSS) vulnerabilities in GDTaller.Check if you run itEPSS 0.20%Mar 26, 2026