Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.0Budibase is a low code platform for creating internal tools, workflows, and admin panels.Check if you run itEPSS 0.40%Mar 9, 2026
- High8.8An issue pertaining to CWE-79: Improper Neutralization of Input During Web Page Generation was discovered in linagora Twake v2023.Q1.1223.Check if you run itEPSS 0.36%Mar 9, 2026
- Medium5.4An issue pertaining to CWE-79: Improper Neutralization of Input During Web Page Generation was discovered in Sunbird-Ed SunbirdEd-portal v1.13.4.Check if you run itEPSS 0.24%Mar 9, 2026
- Medium5.4An issue pertaining to CWE-79: Improper Neutralization of Input During Web Page Generation was discovered in YMFE yapi v1.12.0.Check if you run itEPSS 0.19%Mar 9, 2026
- Low2.0A vulnerability has been found in SourceCodester Resort Reservation System 1.0.Check if you run itEPSS 0.35%Mar 9, 2026
- Medium5.1A reflected Cross-Site Scripting (XSS) vulnerability has been found in Eventobot.Check if you run itEPSS 0.21%Mar 9, 2026
- Low2.1A vulnerability was determined in itsourcecode Payroll Management System 1.0.Check if you run itEPSS 0.48%Mar 9, 2026
- Low2.0A security flaw has been discovered in SourceCodester Web-based Pharmacy Product Management System 1.0.Check if you run itEPSS 0.35%Mar 8, 2026
- Low2.1A vulnerability was found in code-projects Simple Flight Ticket Booking System 1.0.Check if you run itEPSS 0.49%Mar 8, 2026
- Low2.0A flaw has been found in YiFang CMS 2.0.5.Check if you run itEPSS 0.35%Mar 8, 2026
- Low2.0A vulnerability was detected in YiFang CMS 2.0.5.Check if you run itEPSS 0.35%Mar 8, 2026
- Low2.0A security vulnerability has been detected in YiFang CMS 2.0.5.Check if you run itEPSS 0.35%Mar 8, 2026
- Low2.0A weakness has been identified in 1024-lab/lab1024 SmartAdmin up to 3.29.Check if you run itEPSS 0.36%Mar 8, 2026
- Low2.0A security flaw has been discovered in 1024-lab/lab1024 SmartAdmin up to 3.29.Check if you run itEPSS 0.36%Mar 8, 2026
- Low1.9A vulnerability was determined in Wavlink WL-WN579X3-C 231124.Check if you run itEPSS 0.37%Mar 8, 2026
- Low2.1A vulnerability was detected in SourceCodester Loan Management System 1.0.Check if you run itEPSS 0.49%Mar 8, 2026
- Medium5.1league/commonmark is a PHP Markdown parser.Check if you run itEPSS 0.25%Mar 7, 2026
- High7.7ZITADEL is an open source identity management platform.Check if you run itEPSS 0.34%Mar 7, 2026
- Critical9.3ZITADEL is an open source identity management platform.Check if you run itEPSS 0.40%Mar 7, 2026
- Medium6.1The RSS Aggregator – RSS Import, News Feeds, Feed to Post, and Autoblogging plugin for WordPress is vulnerable to DOM-Based Cross-Site Scripting via postMessage in all…Check if you run itEPSS 0.21%Mar 7, 2026
- Medium4.4The LotekMedia Popup Form plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin settings in all versions up to, and including, 1.0.6 due to…Check if you run itEPSS 0.20%Mar 7, 2026
- Medium6.4The Show YouTube video plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'syv' shortcode in all versions up to, and including, 1.1 due…Check if you run itEPSS 0.19%Mar 7, 2026
- Medium6.4The Infomaniak Connect for OpenID plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'endpoint_login' parameter of the infomaniak_connect_generi…Check if you run itEPSS 0.19%Mar 7, 2026
- Medium6.4The Consensus Embed plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's consensus shortcode in all versions up to, and including, 1.6 du…Check if you run itEPSS 0.20%Mar 7, 2026
- Medium6.4The Media Library Alt Text Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'bvmalt_sc_div_update_alt_text' shortcode in all v…Check if you run itEPSS 0.16%Mar 7, 2026