Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low2.0A flaw has been found in SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System 1.0.Check if you run itEPSS 0.36%Feb 25, 2026
- Low1.9A vulnerability was detected in SourceCodester/Patrick Mvuma Patients Waiting Area Queue Management System 1.0.Check if you run itEPSS 0.38%Feb 25, 2026
- Medium6.4The Rise Blocks – A Complete Gutenberg Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘logoTag’ Site Identity block attribute i…Check if you run itEPSS 0.17%Feb 25, 2026
- Medium6.1changedetection.io is a free open source web page change detection tool.Check if you run itEPSS 0.50%Feb 25, 2026
- Medium5.1The SPIP jeux plugin versions prior to 4.1.1 contain a reflected cross-site scripting (XSS) vulnerability in the pre_propre pipeline.Check if you run itEPSS 0.38%Feb 25, 2026
- High8.5Mercator is an open source web application designed to enable mapping of information systems.Check if you run itEPSS 0.32%Feb 25, 2026
- Medium6.1Karakeep is a elf-hostable bookmark-everything app.Check if you run itEPSS 0.39%Feb 25, 2026
- Medium5.4RustFS is a distributed object storage system built in Rust.Check if you run itEPSS 0.38%Feb 25, 2026
- Medium6.8TypiCMS is a multilingual content management system based on the Laravel framework.Check if you run itEPSS 0.28%Feb 25, 2026
- Medium6.1Bugsink is a self-hosted error tracking tool.Check if you run itEPSS 0.44%Feb 25, 2026
- Medium6.1Repostat is a React component to fetch and display GitHub repository info.Check if you run itEPSS 0.29%Feb 25, 2026
- Medium5.4OpenEMR is a free and open source electronic health records and medical practice management application.Check if you run itEPSS 3.75%Feb 25, 2026
- High8.5OpenEMR is a free and open source electronic health records and medical practice management application.Check if you run itEPSS 0.26%Feb 25, 2026
- Medium6.1GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.2 before 18.7.5, 18.8 before 18.8.5, and 18.9 before 18.9.1 that under certain circumstances, could haCheck if you run itEPSS 0.32%Feb 25, 2026
- Medium4.8GetSimpleCMS Community Edition (CE) versions prior to 3.3.22 (3.3.16 tested) contains a stored cross-site scripting (XSS) vulnerability in the Theme to Components func…Check if you run itEPSS 0.40%Feb 24, 2026
- Medium6.1A cross-site scripting (XSS) vulnerability in a FileMaker WebDirect custom homepage could lead to unauthorized access and remote code execution.Check if you run itEPSS 0.23%Feb 24, 2026
- Medium5.4Dell Wyse Management Suite, versions prior to WMS 5.5, contain an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability.Check if you run itEPSS 0.19%Feb 24, 2026
- Medium6.1NiceGUI is a Python-based UI framework.Check if you run itEPSS 0.28%Feb 24, 2026
- Medium5.1Binardat 10G08-0800GSM network switch firmware version V300SP10260209 and prior reflect unsanitized user input in the web interface, allowing an attacker to inject and…Check if you run itEPSS 0.26%Feb 24, 2026
- Medium5.1WWBN AVideo is an open source video platform.Check if you run itEPSS 0.32%Feb 24, 2026
- Low2.1A vulnerability was detected in SourceCodester Modern Image Gallery App 1.0.Check if you run itEPSS 0.49%Feb 24, 2026
- Low2.1A vulnerability was identified in Alinto SOGo 5.12.3/5.12.4.Check if you run itEPSS 0.48%Feb 24, 2026
- Medium5.9Craft is a content management system (CMS).Check if you run itEPSS 0.26%Feb 24, 2026
- Low2.0A flaw has been found in horilla-opensource horilla up to 1.0.2.Check if you run itEPSS 0.37%Feb 24, 2026
- Medium5.4New API is a large language mode (LLM) gateway and artificial intelligence (AI) asset management system.Check if you run itEPSS 0.28%Feb 24, 2026