Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3A vulnerability was detected in code-projects Simple Laundry System 1.0.Check if you run itEPSS 0.37%Apr 9, 2026
- Critical9.3Marimo Remote Code Execution VulnerabilityPatch nowKEVEPSS 99.74%Apr 9, 2026
- High8.8A Dynamic-link Library Injection vulnerability in GatewayGeo MapServer for Windows version 5 allows attackers to escalate privileges via a crafted executable.Check if you run itEPSS 0.18%Apr 9, 2026
- Medium6.1Cross Site Scripting vulnerability in Limesurvey v.6.15.20+251021 allows a remote attacker to execute arbitrary code via the Box[title] and box[url] parameters.Check if you run itEPSS 0.29%Apr 9, 2026
- Medium5.4A stored cross-site scripting (XSS) vulnerability exists in Kiamo before 8.4 due to improper output encoding of user-supplied input in administrative interfaces.Check if you run itEPSS 0.14%Apr 9, 2026
- High8.8An issue was discovered in Kiamo before 8.4 allowing authenticated administrative attackers to execute arbitrary PHP code on the server.Check if you run itEPSS 0.30%Apr 9, 2026
- Medium6.1A Reflected Cross-Site Scripting (XSS) affects LimeSurvey versions prior to 6.15.11+250909, due to the lack of validation of gid parameter in getInstance() function in application/Check if you run itEPSS 0.24%Apr 9, 2026
- Medium6.1A cross-site scripting (XSS) vulnerability in rrweb-snapshot before v2.0.0-alpha.18 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.Check if you run itEPSS 0.24%Apr 9, 2026
- UnknownImproper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Patch nowKEVEPSS 51.12%Apr 9, 2026
- Medium6.9A security vulnerability has been detected in code-projects Simple Laundry System 1.0.Check if you run itEPSS 0.33%Apr 8, 2026
- Medium5.3A weakness has been identified in itsourcecode Construction Management System 1.0.Check if you run itEPSS 0.20%Apr 8, 2026
- Medium5.4GitLab has remediated an issue in GitLab EE affecting all versions from 18.3 before 19.1.7, 19.2 before 19.2.5, and 19.3 before 19.3.1 that, under certain conditions,…Check if you run itEPSS 0.24%Apr 8, 2026
- High8.7A vulnerability was detected in D-Link DIR-645 1.01/1.02/1.03.Check if you run itEPSS 0.71%Apr 8, 2026
- Medium6.9A security vulnerability has been detected in PHPGurukul Online Course Registration 3.1.Check if you run itEPSS 0.26%Apr 8, 2026
- Medium6.9A weakness has been identified in PHPGurukul Online Course Registration 3.1.Check if you run itEPSS 0.26%Apr 8, 2026
- Medium5.3A security flaw has been discovered in SourceCodester Pharmacy Product Management System 1.0.Check if you run itEPSS 0.25%Apr 8, 2026
- Critical9.4A vulnerability in the task management component of Sonatype Nexus Repository versions 3.22.1 through 3.90.2 allows an authenticated attacker with task creation permissions to execCheck if you run itEPSS 0.58%Apr 8, 2026
- Medium6.5Insufficient validation of untrusted input in WebSockets in Google Chrome prior to 147.0.7727.55 allowed a remote attacker who had compromised the renderer process to…Check if you run itEPSS 0.20%Apr 8, 2026
- High8.1Insufficient validation of untrusted input in WebML in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to perform an out of bounds memory write via a cr…Check if you run itEPSS 0.20%Apr 8, 2026
- High8.8Type Confusion in CSS in Google Chrome prior to 147.0.7727.55 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap cor…Check if you run itEPSS 0.17%Apr 8, 2026
- High8.1Out of bounds read in Blink in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.Check if you run itEPSS 0.21%Apr 8, 2026
- High8.8Integer overflow in WebRTC in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page.Check if you run itEPSS 0.22%Apr 8, 2026
- High8.8Integer overflow in Media in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to potentially exploit heap corruption via a crafted video file.Check if you run itEPSS 0.20%Apr 8, 2026
- High8.8Integer overflow in Media in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to potentially exploit heap corruption via a crafted video file.Check if you run itEPSS 0.20%Apr 8, 2026
- High8.8Integer overflow in Media in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to potentially exploit heap corruption via a crafted video file.Check if you run itEPSS 0.20%Apr 8, 2026
Sort