Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.1CWE-79 vulnerability in MolotovCherry Android-ImageMagick7.This issue affects Android-ImageMagick7: before 7.1.2-11.Check if you run itEPSS 0.24%Mar 24, 2026
- Low2.0A vulnerability has been found in projectworlds Lawyer Management System 1.0.Check if you run itEPSS 0.33%Mar 24, 2026
- Low1.9A security flaw has been discovered in bolo-blog up to 2.6.4.Check if you run itEPSS 0.35%Mar 24, 2026
- Medium5.3Active Support is a toolkit of support libraries and Ruby core extensions extracted from the Rails framework.Check if you run itEPSS 0.33%Mar 24, 2026
- Low2.3Action View provides conventions and helpers for building web pages with the Rails framework.Check if you run itEPSS 0.71%Mar 23, 2026
- Low1.3Action Pack is a Rubygem for building web applications on the Rails framework.Check if you run itEPSS 0.33%Mar 23, 2026
- Medium4.8Connect-CMS is a content management system.Check if you run itEPSS 0.35%Mar 23, 2026
- High8.7Connect-CMS is a content management system.Check if you run itEPSS 0.44%Mar 23, 2026
- Medium5.1Census CSWeb 8.0.1 allows stored cross-site scripting in user supplied fields.Check if you run itEPSS 0.21%Mar 23, 2026
- Low2.0A vulnerability was identified in projectworlds Lawyer Management System 1.0.Check if you run itEPSS 0.33%Mar 23, 2026
- High8.6Mantis Bug Tracker (MantisBT) is an open source issue tracker.Check if you run itEPSS 0.29%Mar 23, 2026
- High8.6Mantis Bug Tracker (MantisBT) is an open source issue tracker.Check if you run itEPSS 0.35%Mar 23, 2026
- Medium5.1MailEnable versions prior to 10.55 contain a reflected cross-site scripting vulnerability in the webmail interface that allows remote attackers to execute arbitrary Ja…Check if you run itEPSS 0.46%Mar 23, 2026
- Medium5.1MailEnable versions prior to 10.55 contain a reflected cross-site scripting vulnerability in the webmail interface that allows remote attackers to execute arbitrary Ja…Check if you run itEPSS 0.46%Mar 23, 2026
- Medium5.1MailEnable versions prior to 10.55 contain a reflected cross-site scripting vulnerability in the webmail interface that allows remote attackers to execute arbitrary Ja…Check if you run itEPSS 0.46%Mar 23, 2026
- Medium6.1A Cross-Site Scripting (XSS) vulnerability exists in Znuny::ITSM 6.5.x in the customer.pl endpoint via the OTRSCustomerInterface parameterCheck if you run itEPSS 0.24%Mar 23, 2026
- Medium5.4A Reflected Cross-Site Scripting (XSS) vulnerability exists in the POST request data zipPath of tiki-admin_system.php in Tiki version 21.2.Check if you run itEPSS 0.19%Mar 23, 2026
- Medium5.4A Cross-Site Scripting (XSS) vulnerability exists in the page parameter of tiki-editpage.php in Tiki version 26.3 and earlier.Check if you run itEPSS 0.19%Mar 23, 2026
- Low1.9A vulnerability was determined in code-projects Exam Form Submission 1.0.Check if you run itEPSS 0.35%Mar 23, 2026
- Medium5.4WWBN AVideo is an open source video platform.Check if you run itEPSS 0.25%Mar 23, 2026
- Medium5.4WWBN AVideo is an open source video platform.Check if you run itEPSS 0.26%Mar 23, 2026
- Medium6.1WWBN AVideo is an open source video platform.Check if you run itEPSS 0.27%Mar 23, 2026
- Medium6.1A stored cross-site scripting (XSS) vulnerability in the component /admin/search-vehicle.php of Phpgurukul Vehicle Record Management System v1.0 allows attackers to ex…Check if you run itEPSS 0.19%Mar 23, 2026
- Medium4.8A stored cross-site scripting (XSS) vulnerability in the component /admin/add-brand.php of Phpgurukul Vehicle Record Management System v1.0 allows attackers to execute…Check if you run itEPSS 0.18%Mar 23, 2026
- Medium4.8Multiple cross-site scripting (XSS) vulnerabilities in the component /admin/edit-vehicle.php of Phpgurukul Vehicle Record Management System v1.0 allows attackers to ex…Check if you run itEPSS 0.18%Mar 23, 2026