Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.1Isso is a lightweight commenting server written in Python and JavaScript.Check if you run itEPSS 0.38%Feb 21, 2026
- Medium5.3Pannellum is a lightweight, free, and open source panorama viewer for the web.Check if you run itEPSS 0.39%Feb 21, 2026
- Medium4.8Statmatic is a Laravel and Git powered content management system (CMS).Check if you run itEPSS 0.37%Feb 21, 2026
- High8.9OpenSift is an AI study tool that sifts through large datasets using semantic search and generative AI.Check if you run itEPSS 0.48%Feb 21, 2026
- Medium6.9GetSimple CMS is a content management system.Check if you run itEPSS 0.25%Feb 21, 2026
- Medium5.1svelte performance oriented web framework.Check if you run itEPSS 0.22%Feb 20, 2026
- Medium5.1svelte performance oriented web framework.Check if you run itEPSS 0.22%Feb 20, 2026
- Medium5.1svelte performance oriented web framework.Check if you run itEPSS 0.22%Feb 20, 2026
- Medium5.3phpMoAdmin 1.1.5 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating the collection parameter.Check if you run itEPSS 0.26%Feb 20, 2026
- Medium5.1phpMoAdmin 1.1.5 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating the newdb parameter.Check if you run itEPSS 0.30%Feb 20, 2026
- Medium5.1OrientDB 3.0.17 contains a reflected cross-site scripting vulnerability that allows attackers to inject malicious scripts by submitting crafted JSON payloads to the do…Check if you run itEPSS 0.24%Feb 20, 2026
- Medium5.1OrientDB 3.0.17 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by creating users with script payl…Check if you run itEPSS 0.27%Feb 20, 2026
- Medium6.1Leafkit is a templating language with Swift-inspired syntax.Check if you run itEPSS 0.30%Feb 20, 2026
- Medium5.3Photobooth prior to 1.0.1 has a cross-site scripting (XSS) vulnerability in user input fields.Check if you run itEPSS 0.46%Feb 20, 2026
- Critical9.3fast-xml-parser allows users to validate XML, parse XML to JS object, or build XML from JS object without C/C++ based libraries and no callback.Check if you run itEPSS 0.51%Feb 20, 2026
- High8.6Stored Cross-Site Scripting (XSS) in the _genai/_evals_visualization component of Google Cloud Vertex AI SDK (google-cloud-aiplatform) versions from 1.98.0 up to (but…Check if you run itEPSS 0.55%Feb 20, 2026
- Medium4.8HCL Digital Experience is susceptible to stored cross-site scripting (XSS) in the administrative user interface which would require elevated privileges to exploit.Check if you run itEPSS 0.16%Feb 20, 2026
- Medium5.1Fiverr Clone Script 1.2.2 contains a cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating the keyword parameter.Check if you run itEPSS 0.22%Feb 20, 2026
- Medium5.1SVXportal version 2.5 and prior contain a stored cross-site scripting vulnerability in the user profile update workflow (user_settings.php submitting to admin/update_user.php).Check if you run itEPSS 0.30%Feb 20, 2026
- Medium5.1SVXportal version 2.5 and prior contain a stored cross-site scripting vulnerability in the user registration workflow (index.php submitting to admin/user_action.php).Check if you run itEPSS 0.33%Feb 20, 2026
- Medium5.1SVXportal version 2.5 and prior contain a reflected cross-site scripting vulnerability in radiomobile_front.php via the stationid query parameter.Check if you run itEPSS 0.33%Feb 20, 2026
- Medium5.1SVXportal version 2.5 and prior contain a reflected cross-site scripting vulnerability in admin/log.php via the search query parameter.Check if you run itEPSS 0.28%Feb 20, 2026
- Medium5.1SVXportal version 2.5 and prior contain a reflected cross-site scripting vulnerability in log.php via the search query parameter.Check if you run itEPSS 0.37%Feb 20, 2026
- High7.6Cross Site Scripting vulnerability in Key Systems Inc Global Facilities Management Software v.Check if you run itEPSS 0.44%Feb 20, 2026
- High8.2Cross Site Scripting vulnerability in Key Systems Inc Global Facilities Management Software v.Check if you run itEPSS 0.50%Feb 20, 2026