Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3NocoDB is software for building databases as spreadsheets.Check if you run itEPSS 0.26%Mar 2, 2026
- Medium5.3NocoDB is software for building databases as spreadsheets.Check if you run itEPSS 0.25%Mar 2, 2026
- Medium6.1Cross Site Scripting vulnerability in Wethink Technology Inc 720yun pano-sdk 0.5.877 allows a remote attacker to execute arbitrary code via the LoginComp (Module 2093)…Check if you run itEPSS 0.29%Mar 2, 2026
- Medium5.1Chamilo is a learning management system.Check if you run itEPSS 0.16%Mar 2, 2026
- Medium5.1Chamilo is a learning management system.Check if you run itEPSS 0.19%Mar 2, 2026
- Medium5.1Chamilo is a learning management system.Check if you run itEPSS 0.19%Mar 2, 2026
- Medium4.8Chamilo is a learning management system.Check if you run itEPSS 0.22%Mar 2, 2026
- Medium6.1Chamilo is a learning management system.Check if you run itEPSS 0.36%Mar 2, 2026
- Medium6.1A reflected Cross-Site Scripting (XSS) vulnerability in the RaiseError function of Skrol29 TbsZip version 2.17 and earlier allows remote attackers to execute arbitrary…Check if you run itEPSS 0.40%Mar 2, 2026
- High8.3Chamilo is a learning management system.Check if you run itEPSS 0.38%Mar 2, 2026
- Medium4.8Chamilo is a learning management system.Check if you run itEPSS 0.31%Mar 2, 2026
- Low2.1A vulnerability was detected in itsourcecode University Management System 1.0.Check if you run itEPSS 0.48%Mar 2, 2026
- Low1.9A vulnerability was detected in PHPGurukul Student Record Management System 1.0.Check if you run itEPSS 0.36%Mar 2, 2026
- Low1.9A security vulnerability has been detected in PHPGurukul Student Record Management System up to 1.0.Check if you run itEPSS 0.36%Mar 2, 2026
- Medium4.8wpForo Forum 2.4.14 contains a stored cross-site scripting vulnerability that allows administrators to inject persistent JavaScript via forum description fields echoed…Check if you run itEPSS 0.33%Feb 28, 2026
- Medium4.8wpForo Forum 2.4.14 contains a stored cross-site scripting vulnerability that allows script injection via forum URL data output into an inline script block using json_…Check if you run itEPSS 0.33%Feb 28, 2026
- Medium5.1wpForo Forum 2.4.14 contains a stored cross-site scripting vulnerability that allows authenticated subscribers to upload SVG files as profile avatars through the avata…Check if you run itEPSS 0.31%Feb 28, 2026
- Critical9.3Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Microchip TimePictra allows Query System for Information.T…Check if you run itEPSS 0.27%Feb 28, 2026
- Medium5.4Statmatic is a Laravel and Git powered content management system (CMS).Check if you run itEPSS 0.37%Feb 27, 2026
- Low1.3Canarytokens help track activity and actions on a network.Check if you run itEPSS 0.46%Feb 27, 2026
- Medium6.1PMD is an extensible multilanguage static code analyzer.Check if you run itEPSS 0.38%Feb 27, 2026
- Medium4.8Kiteworks is a private data network (PDN).Check if you run itEPSS 0.44%Feb 27, 2026
- Low2.0ClipBucket v5 is an open source video sharing platform.Check if you run itEPSS 0.26%Feb 27, 2026
- Medium5.1SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 contain a reflected cross-site scripting vulnerability in the management interface where user input is not p…Check if you run itEPSS 0.28%Feb 27, 2026
- High8.3CleverTap Web SDK version 1.15.2 and earlier is vulnerable to DOM-based Cross-Site Scripting (XSS) via window.postMessage in the Visual Builder module.Check if you run itEPSS 0.55%Feb 27, 2026