Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.7ha-mcp is a Home Assistant MCP Server.Check if you run itEPSS 0.25%Mar 11, 2026
- Medium4.4Copyparty is a portable file server.Check if you run itEPSS 0.20%Mar 11, 2026
- Low2.1A security flaw has been discovered in LockerProject Locker 0.0.0/0.0.1/0.1.0.Check if you run itEPSS 0.49%Mar 11, 2026
- Medium5.4Plunk is an open-source email platform built on top of AWS SES.Check if you run itEPSS 0.24%Mar 11, 2026
- Medium5.1Frappe is a full-stack web application framework.Check if you run itEPSS 0.24%Mar 11, 2026
- Medium5.4Notesnook is a note-taking app focused on user privacy & ease of use.Check if you run itEPSS 0.25%Mar 11, 2026
- Medium6.3Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js.Check if you run itEPSS 0.34%Mar 11, 2026
- Medium6.9Craft is a content management system (CMS).Check if you run itEPSS 0.26%Mar 11, 2026
- Medium6.5OpenProject is an open-source, web-based project management software.Check if you run itEPSS 0.59%Mar 11, 2026
- Medium6.3In Splunk Enterprise versions below 10.2.0, 10.0.3, 9.4.9, and 9.3.9, and Splunk Cloud Platform versions below 10.2.2510.4, 10.1.2507.15, 10.0.2503.11, and 9.3.2411.12…Check if you run itEPSS 0.21%Mar 11, 2026
- Medium6.1A vulnerability in the web-based management interface of Cisco Unified Contact Center Express (Unified CCX) could allow an unauthenticated, remote attacker to conduct…Check if you run itEPSS 0.22%Mar 11, 2026
- Medium6.1A vulnerability in the web-based management interface of Cisco Finesse, Cisco Packaged Contact Center Enterprise (Packaged CCE), Cisco Unified Contact Center Enterpris…Check if you run itEPSS 0.22%Mar 11, 2026
- Low2.0A vulnerability was detected in PHPEMS 11.0.Check if you run itEPSS 0.34%Mar 11, 2026
- High7.2The Name Directory plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'name_directory_name' parameter in all versions up to, and including, 1.32…Check if you run itEPSS 0.42%Mar 11, 2026
- Medium6.4The Gravity Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 2.9.28.1.Check if you run itEPSS 0.27%Mar 11, 2026
- High7.2The Checkout Field Editor (Checkout Manager) for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via custom radio and checkboxgroup field…Check if you run itEPSS 0.43%Mar 11, 2026
- High7.2The Responsive Contact Form Builder & Lead Generation Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 2.…Check if you run itEPSS 0.25%Mar 11, 2026
- Medium5.1IFTOP developed by WellChoose has a Reflected Cross-site Scripting vulnerability, allowing authenticated remote attackers to execute arbitrary JavaScript codes in user…Check if you run itEPSS 0.33%Mar 11, 2026
- Medium6.4The Astra theme for WordPress is vulnerable to Stored Cross-Site Scripting via the and post meta fields in all versions up to, and including, 4.12.3.Check if you run itEPSS 0.36%Mar 11, 2026
- Low2.0Versions of the package spin.js before 3.0.0 are vulnerable to Cross-site Scripting (XSS) via the spin() function that allows a creation of more than 1 alert for each…Check if you run itEPSS 0.28%Mar 11, 2026
- Medium6.4The weForms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the REST API entry submission endpoint in all versions up to, and including, 1.6.27.Check if you run itEPSS 0.39%Mar 11, 2026
- High7.1The DukaPress WordPress plugin through 3.2.4 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scriptin…Check if you run itEPSS 0.15%Mar 11, 2026
- Medium6.4The WP ULike plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the shortcode attribute in all versions up to, and including, 5.0.1.Check if you run itEPSS 0.21%Mar 11, 2026
- High8.1Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by a stored Cross-Site Scripting (XSS) vvulnerabilit…Check if you run itEPSS 0.45%Mar 11, 2026
- High8.0Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability…Check if you run itEPSS 0.31%Mar 11, 2026