Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low2.0A vulnerability was found in Wavlink WL-NU516U1 240425.Check if you run itEPSS 0.36%Mar 16, 2026
- Low1.9A vulnerability has been found in Worksuite HR, CRM and Project Management up to 5.5.25.Check if you run itEPSS 0.35%Mar 16, 2026
- Medium4.8Stored Cross-Site Scripting (XSS) vulnerability in the Wakyma web application, specifically in the endpoint 'vets.wakyma.com/configuracion/agenda/modelo-formulario-evento'.Check if you run itEPSS 0.24%Mar 16, 2026
- Medium5.3Vulnogram 1.0.0 contains a stored cross-site scripting vulnerability in comment hypertext handling that allows attackers to inject malicious scripts.Check if you run itEPSS 0.28%Mar 16, 2026
- High8.6Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages.Check if you run itEPSS 0.50%Mar 16, 2026
- Critical9.6AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting.Check if you run itEPSS 0.76%Mar 16, 2026
- Medium5.1Raytha CMS is vulnerable to Reflected XSS via returnUrl parameter in logon functionality.Check if you run itEPSS 0.28%Mar 16, 2026
- Medium5.1Raytha CMS is vulnerable to reflected XSS via the backToListUrl parameter.Check if you run itEPSS 0.24%Mar 16, 2026
- Medium5.3Raytha CMS is vulnerable to Stored XSS via FirstName and LastName parameters in profile editing functionality.Check if you run itEPSS 0.25%Mar 16, 2026
- Medium5.1Raytha CMS is vulnerable to Stored XSS via FieldValues[0].Value parameter in page creation functionality.Check if you run itEPSS 0.18%Mar 16, 2026
- Medium5.1Raytha CMS is vulnerable to Stored XSS via FieldValues[1].Value parameter in post editing functionality.Check if you run itEPSS 0.22%Mar 16, 2026
- Medium5.1Serviio PRO 1.8 DLNA Media Streaming Server contains a DOM-based cross-site scripting vulnerability that allows attackers to execute arbitrary HTML and script code by…Check if you run itEPSS 0.24%Mar 16, 2026
- Medium5.1Wowza Streaming Engine 4.5.0 contains multiple reflected cross-site scripting vulnerabilities in the enginemanager interface where input passed through various paramet…Check if you run itEPSS 0.24%Mar 16, 2026
- Medium5.1ZKTeco ZKAccess Security System 5.3.1 contains a stored cross-site scripting vulnerability that allows attackers to execute arbitrary HTML and script code by injecting…Check if you run itEPSS 0.26%Mar 16, 2026
- Medium5.1ZKTeco ZKBioSecurity 3.0 contains multiple reflected cross-site scripting vulnerabilities that allow attackers to execute arbitrary HTML and script code by injecting m…Check if you run itEPSS 0.25%Mar 16, 2026
- Medium5.1RealtyScript 4.0.2 Stored Cross-Site Scripting via text Parameter in pages.phpCheck if you run itEPSS 0.21%Mar 15, 2026
- Medium5.1Next Click Ventures RealtyScript 4.0.2 contains a stored cross-site scripting vulnerability in the location_name parameter of the admin locations interface.Check if you run itEPSS 0.33%Mar 15, 2026
- Medium5.1RealtyScript 4.0.2 Stored Cross-Site Scripting via CSV File Upload FilenameCheck if you run itEPSS 0.24%Mar 15, 2026
- Medium5.1Next Click Ventures RealtyScript 4.0.2 fails to properly sanitize file uploads, allowing attackers to store malicious scripts through the file POST parameter in admin/tools.php.Check if you run itEPSS 0.27%Mar 15, 2026
- Medium5.1RealtyScript 4.0.2 Cross-Site Scripting via Multiple ParametersCheck if you run itEPSS 0.29%Mar 15, 2026
- High8.7Qool CMS Multiple Persistent Cross-Site Scripting VulnerabilitiesCheck if you run itEPSS 0.37%Mar 15, 2026
- Medium6.9Qool CMS 2.0 RC2 Cross-Site Request Forgery via adduserCheck if you run itEPSS 0.24%Mar 15, 2026
- Medium6.4The Calculated Fields Form plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the form settings in all versions up to, and including, 5.4.5.0.Check if you run itEPSS 0.34%Mar 13, 2026
- Medium5.4Statamic is a Laravel and Git powered content management system (CMS).Check if you run itEPSS 0.26%Mar 13, 2026
- Medium5.9Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Liton Arefin Master Addons for Elementor master-addons allows DOM…Check if you run itEPSS 0.25%Mar 13, 2026