Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low1.9A security vulnerability has been detected in YiFang CMS up to 2.0.5.EPSS 0.4%Feb 22, 2026
- Low1.9A weakness has been identified in YiFang CMS up to 2.0.5.EPSS 0.4%Feb 22, 2026
- Low1.9A security flaw has been discovered in YiFang CMS up to 2.0.5.EPSS 0.4%Feb 22, 2026
- Low1.9A security vulnerability has been detected in funadmin up to 7.1.0-rc4.EPSS 0.4%Feb 22, 2026
- Critical9.9OneUptime is a solution for monitoring and managing online services.EPSS 0.6%Feb 21, 2026
- Medium6.5Metabase is an open-source data analytics platform.EPSS 0.5%Feb 21, 2026
- High7.2A flaw was identified in Moodle’s backup restore functionality where specially crafted backup files were not properly validated during processing.EPSS 0.8%Feb 21, 2026
- Low2.0A weakness has been identified in detronetdip E-commerce 1.0.0.EPSS 0.3%Feb 20, 2026
- Critical9.9Improper Control of Generation of Code ('Code Injection') vulnerability in WesternDeal WPForms Google Sheet Connector gsheetconnector-wpforms allows Code Injection.Thi…EPSS 0.4%Feb 20, 2026
- High7.7Improper Control of Generation of Code ('Code Injection') vulnerability in inpersttion Inpersttion For Theme err-our-team allows Code Injection.This issue affects Inpe…EPSS 0.3%Feb 20, 2026
- Low2.0A vulnerability has been found in rachelos WeRSS we-mp-rss up to 1.4.8.EPSS 0.4%Feb 20, 2026
- Critical9.8Ivanti Endpoint Manager Mobile (EPMM) Code Injection VulnerabilityKEVEPSS 98.6%Jan 29, 2026
- Critical9.8Ivanti Endpoint Manager Mobile (EPMM) Code Injection VulnerabilityKEVEPSS 98.7%Jan 29, 2026
- Critical9.8Cisco Unified Communications Products Code Injection VulnerabilityKEVEPSS 4.5%Jan 21, 2026
- High7.8pnpm is a package manager.EPSS 1.0%Jan 7, 2026
- Critical9.8Hewlett Packard Enterprise (HPE) OneView Code Injection VulnerabilityKEVEPSS 90.2%Dec 16, 2025
- High8.8A Server-Side Template Injection (SSTI) vulnerability exists in the Frappe ERPNext through 15.89.0 Print Format rendering mechanism.EPSS 0.5%Dec 15, 2025
- High8.8An SSTI (Server-Side Template Injection) vulnerability exists in the get_address_display method of Frappe ERPNext through 15.89.0.EPSS 0.6%Dec 15, 2025
- Medium4.3An SSTI (Server-Side Template Injection) vulnerability exists in the get_terms_and_conditions method of Frappe ERPNext through 15.89.0.EPSS 0.3%Dec 15, 2025
- Medium4.3An SSTI (Server-Side Template Injection) vulnerability exists in the get_contract_template method of Frappe ERPNext through 15.89.0.EPSS 0.3%Dec 15, 2025
- High8.8An SSTI (Server-Side Template Injection) vulnerability exists in the get_dunning_letter_text method of Frappe ERPNext through 15.89.0.EPSS 0.6%Dec 15, 2025
- High8.4Lightning Flow Scanner provides a A CLI plugin, VS Code Extension and GitHub Action for analysis and optimization of Salesforce Flows.EPSS 0.2%Dec 12, 2025
- Low2.0A security vulnerability has been detected in Qualitor up to 8.24.73.EPSS 0.3%Dec 12, 2025
- Critical9.8Insecure permissions in the scheduled tasks feature of MineAdmin v3.x allows attackers to execute arbitrary commands and execute a full account takeover.EPSS 0.5%Dec 12, 2025
- Medium6.9Code Injection using Electron Fuses in waveterm on MacOS allows TCC Bypass.EPSS 0.2%Dec 12, 2025