Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.4Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Islandora allows Cross-Site Scripting (XSS).This issue aff…Check if you run itEPSS 0.23%Mar 25, 2026
- Medium4.7Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Anti-Spam by CleanTalk allows Cross-Site Scripting (XSS).T…Check if you run itEPSS 0.21%Mar 25, 2026
- Medium5.4Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Tagify allows Cross-Site Scripting (XSS).This issue affect…Check if you run itEPSS 0.23%Mar 25, 2026
- Medium6.1Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal UI Icons allows Cross-Site Scripting (XSS).This issue affe…Check if you run itEPSS 0.15%Mar 25, 2026
- Medium5.4Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Quick Edit allows Cross-Site Scripting (XSS).This issue af…Check if you run itEPSS 0.14%Mar 25, 2026
- Medium5.4Kiteworks is a private data network (PDN).Check if you run itEPSS 0.24%Mar 25, 2026
- Medium4.8A vulnerability in the web-based Cisco IOx application hosting environment management interface of Cisco IOS XE Software could allow an authenticated, remote attacker…Check if you run itEPSS 0.19%Mar 25, 2026
- Medium5.4A vulnerability in the web-based management interface of Cisco Catalyst SD-WAN Manager could allow an authenticated, remote attacker to conduct a cross-site scripting…Check if you run itEPSS 0.16%Mar 25, 2026
- Medium4.8A Reflected Cross Site Scripting (XSS) vulnerability has been found in Support Board v3.7.7.Check if you run itEPSS 0.23%Mar 25, 2026
- High8.5Ericsson Indoor Connect 8855 versions prior to 2025.Q3 contains a Cross-Site Scripting (XSS) vulnerability which, if exploited, can lead to unauthorized disclosure and…Check if you run itEPSS 0.15%Mar 25, 2026
- Medium6.1Cross-Site Scripting vulnerability in Hitachi Infrastructure Analytics Advisor (Analytics probe component), Hitachi Ops Center Analyzer.This issue affects Hitachi Infr…Check if you run itEPSS 0.16%Mar 25, 2026
- Medium6.4The Easy Image Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Gallery shortcode post meta field in all versions up to, and including, 1.5.3.Check if you run itEPSS 0.32%Mar 25, 2026
- Medium4.3A logic issue was addressed with improved checks.Check if you run itEPSS 0.29%Mar 25, 2026
- Medium4.3A logic issue was addressed with improved state management.Check if you run itEPSS 0.20%Mar 25, 2026
- Medium5.4GitLab has remediated an issue in GitLab EE affecting all versions from 15.4 before 18.8.7, 18.9 before 18.9.3, and 18.10 before 18.10.1 that could have allowed an aut…Check if you run itEPSS 0.33%Mar 25, 2026
- Medium5.4GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.7 before 18.8.7, 18.9 before 18.9.3, and 18.10 before 18.10.1 that could have allowed an…Check if you run itEPSS 0.29%Mar 25, 2026
- Medium6.3league/commonmark is a PHP Markdown parser.Check if you run itEPSS 0.32%Mar 24, 2026
- Medium5.4oRPC is an tool that helps build APIs that are end-to-end type-safe and adhere to OpenAPI standards.Check if you run itEPSS 0.34%Mar 24, 2026
- Medium5.4Wallos is an open-source, self-hostable personal subscription tracker.Check if you run itEPSS 0.29%Mar 24, 2026
- Medium6.5Vikunja is an open-source self-hosted task management platform.Check if you run itEPSS 0.70%Mar 24, 2026
- Medium5.4JiZhiCMS v2.5.6 and before contains a Stored Cross-Site Scripting (XSS) vulnerability in the release function within app/home/c/UserController.php.Check if you run itEPSS 0.28%Mar 24, 2026
- Medium6.1iCMS v8.0.0 contains a Cross-Site Scripting (XSS) vulnerability in the User Management component, specifically within the index.html file.Check if you run itEPSS 0.31%Mar 24, 2026
- Medium4.7DiceBear is an avatar library for designers and developers.Check if you run itEPSS 0.21%Mar 24, 2026
- Medium6.1CWE-79 vulnerability in MolotovCherry Android-ImageMagick7.This issue affects Android-ImageMagick7: before 7.1.2-11.Check if you run itEPSS 0.24%Mar 24, 2026
- Low2.0A vulnerability has been found in projectworlds Lawyer Management System 1.0.Check if you run itEPSS 0.33%Mar 24, 2026