Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.1Reflected Cross Site Scripting (XSS) vulnerabilities in GDTaller.Check if you run itEPSS 0.20%Mar 26, 2026
- High8.8WebOfisi E-Ticaret 4.0 contains an SQL injection vulnerability in the 'urun' GET parameter of the endpoint that allows unauthenticated attackers to manipulate database queries.Check if you run itEPSS 0.27%Mar 26, 2026
- Low2.1A vulnerability was identified in code-projects Simple Laundry System 1.0.Check if you run itEPSS 0.46%Mar 26, 2026
- Low2.1A vulnerability was determined in dameng100 muucmf 1.9.5.20260309.Check if you run itEPSS 0.45%Mar 26, 2026
- Low2.1A vulnerability was found in dameng100 muucmf 1.9.5.20260309.Check if you run itEPSS 0.45%Mar 26, 2026
- Low2.1A vulnerability has been found in dameng100 muucmf 1.9.5.20260309.Check if you run itEPSS 0.45%Mar 26, 2026
- Low2.1A flaw has been found in dameng100 muucmf 1.9.5.20260309.Check if you run itEPSS 0.45%Mar 26, 2026
- Medium6.4The DSGVO snippet for Leaflet Map and its Extensions plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the and shortcodes in all versions up to, an…Check if you run itEPSS 0.33%Mar 26, 2026
- High7.2The Blackhole for Bad Bots plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the User-Agent HTTP header in all versions up to and including 3.8.Check if you run itEPSS 0.51%Mar 26, 2026
- Medium6.4The Simple Download Counter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'sdc_menu' shortcode in all versions up to, and including, 2.3.Check if you run itEPSS 0.42%Mar 26, 2026
- Medium5.4The ShortPixel Image Optimizer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the attachment post_title in all versions up to, and including, 6.4.3.Check if you run itEPSS 0.31%Mar 26, 2026
- Medium6.4The BWL Advanced FAQ Manager Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'baf_sbox' shortcode in all versions up to and including 1.1.1.Check if you run itEPSS 0.36%Mar 26, 2026
- Medium6.1The FloristPress for Woo – Customize your eCommerce store for your Florist plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'noresults' par…Check if you run itEPSS 0.27%Mar 26, 2026
- Low2.0A security vulnerability has been detected in code-projects Accounting System 1.0.Check if you run itEPSS 0.33%Mar 26, 2026
- Medium6.1OpenEMR is a free and open source electronic health records and medical practice management application.Check if you run itEPSS 0.92%Mar 26, 2026
- Medium5.4OpenEMR is a free and open source electronic health records and medical practice management application.Check if you run itEPSS 0.32%Mar 26, 2026
- Medium5.4OpenEMR is a free and open source electronic health records and medical practice management application.Check if you run itEPSS 0.30%Mar 25, 2026
- Medium5.4OpenEMR is a free and open source electronic health records and medical practice management application.Check if you run itEPSS 0.29%Mar 25, 2026
- Medium5.4OpenEMR is a free and open source electronic health records and medical practice management application.Check if you run itEPSS 0.95%Mar 25, 2026
- Medium4.8IBM Infosphere Information Server 11.7.0.0 through 11.7.1.6 is vulnerable to stored cross-site scripting.Check if you run itEPSS 0.19%Mar 25, 2026
- Medium5.4IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 is vulnerable to cross-site scripting.Check if you run itEPSS 0.21%Mar 25, 2026
- Medium6.3n8n is an open source workflow automation platform.Check if you run itEPSS 0.42%Mar 25, 2026
- Medium4.8Domoticz versions prior to 2026.1 contain a stored cross-site scripting vulnerability in the Add Hardware and rename device functionality of the web interface that all…Check if you run itEPSS 0.19%Mar 25, 2026
- High8.7Multiple Stored XSS vulnerabilities exist in Seafile Server version 13.0.15,13.0.16-pro,12.0.14 and prior and fixed in 13.0.17, 13.0.17-pro, and 12.0.20-pro, via the S…Check if you run itEPSS 0.46%Mar 25, 2026
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Taboola Taboola Pixel taboola-pixel allows Reflected XSS.This iss…Check if you run itEPSS 0.25%Mar 25, 2026