Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.3A stored cross-site scripting (XSS) vulnerability exists in the notification panel of CTI Transmute in versions prior to the patched release.Check if you run itEPSS 0.44%May 28, 2026
- High7.2The SlimStat Analytics plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'User-Agent' header in all versions up to, and including, 5.4.11 due t…Check if you run itEPSS 0.53%May 28, 2026
- High7.2The HT Contact Form – Drag & Drop Form Builder for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'file_upload' parameter in all v…Check if you run itEPSS 0.51%May 28, 2026
- Critical9.8Velocity.js is a JavaScript implementation of the Apache Velocity template engine.Check if you run itEPSS 0.61%May 26, 2026
- Medium5.9Uncontrolled Resource Consumption vulnerability in oban-bg oban_web ('Elixir.Oban.Web.CronExpr' modules) allows memory exhaustion via unbounded cron range expansion.Check if you run itEPSS 0.47%May 26, 2026
- Medium6.1Mistune is a Python Markdown parser with renderers and plugins.Check if you run itEPSS 0.27%May 26, 2026
- Medium6.1Mistune is a Python Markdown parser with renderers and plugins.Check if you run itEPSS 0.27%May 26, 2026
- Medium6.1Mistune is a Python Markdown parser with renderers and plugins.Check if you run itEPSS 0.27%May 26, 2026
- Medium5.3Mistune is a Python Markdown parser with renderers and plugins.Check if you run itEPSS 0.27%May 26, 2026
- Medium6.5view_component is a framework for building reusable, testable, and encapsulated view components in Ruby on Rails.Check if you run itEPSS 0.37%May 26, 2026
- Medium6.1Mistune is a Python Markdown parser with renderers and plugins.Check if you run itEPSS 0.27%May 26, 2026
- Critical9.3Lumiverse is a full-featured AI chat application.Check if you run itEPSS 0.41%May 26, 2026
- High7.5Banks generates meaningful LLM prompts using a template language that makes sense.Check if you run itEPSS 0.74%May 26, 2026
- High8.7FACTION is a PenTesting Report Generation and Collaboration Framework.Check if you run itEPSS 0.37%May 26, 2026
- High8.7FACTION is a PenTesting Report Generation and Collaboration Framework.Check if you run itEPSS 0.37%May 26, 2026
- High7.5Algernon is a small self-contained pure-Go web server.Check if you run itEPSS 0.42%May 26, 2026
- High8.7Twenty is an open source CRM.Check if you run itEPSS 0.37%May 26, 2026
- Medium6.1A cross-site scripting (XSS) vulnerability exists in Apache ECharts in the Lines series tooltip rendering logic.Check if you run itEPSS 0.93%May 25, 2026
- Low2.0A security flaw has been discovered in SourceCodester Indian Invoicing System up to 0.x/1.0.Check if you run itEPSS 0.33%May 25, 2026
- Low2.9A security flaw has been discovered in Besen BS20 EV Charging Station up to 20260426.Check if you run itEPSS 0.40%May 24, 2026
- High8.8The WishList Member plugin for WordPress is vulnerable to Privilege Escalation via Missing Authorization in versions up to and including 3.30.1.Check if you run itEPSS 0.44%May 23, 2026
- Medium5.3Mermaid is a JavaScript tool that uses Markdown-inspired text to create and modify diagrams and charts.Check if you run itEPSS 0.52%May 22, 2026
- Medium5.3Mermaid is a JavaScript tool that uses Markdown-inspired text to create and modify diagrams and charts.Check if you run itEPSS 0.60%May 22, 2026
- High8.5TypeBot is a chatbot builder tool.Check if you run itEPSS 0.40%May 22, 2026
- Medium5.4TypeBot is a chatbot builder tool.Check if you run itEPSS 0.33%May 22, 2026