Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.9HP ENVY 5000 series printers VERBASPP1N003.2237A.00 do not properly manage concurrent TCP connections to port 9100 (JetDirect/RAW printing).Check if you run itEPSS 0.21%May 22, 2026
- High8.7Typebot is a chatbot builder tool.Check if you run itEPSS 0.44%May 22, 2026
- Medium6.1Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree.Check if you run itEPSS 0.33%May 22, 2026
- Medium6.1Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree.Check if you run itEPSS 0.22%May 22, 2026
- Medium6.1Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree.Check if you run itEPSS 0.22%May 22, 2026
- Medium6.1Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree.Check if you run itEPSS 0.22%May 22, 2026
- Medium6.1The WP Blockade plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'shortcode' parameter in all versions up to and including 0.9.14.Check if you run itEPSS 0.34%May 22, 2026
- Medium5.1Simple Hierarchical Select (SHS) for Drupal 7 contains cross-site scripting risk due to improper output escaping of term-derived text.Check if you run itEPSS 0.32%May 21, 2026
- Medium5.1In the Drupal 7 Term Reference Tree module, two stored XSS vectors exist in the widget/formatter rendering pipeline.Check if you run itEPSS 0.26%May 21, 2026
- Medium5.1Webmin before 2.641 contains a stored cross-site scripting vulnerability in the email template description field of the System and Server Status module that allows low…Check if you run itEPSS 0.22%May 21, 2026
- High7.5Concrete CMS 9.5.0 and below emits a CSRF token in the local_available_update.php view ($token->output('do_update')) but the corresponding do_update() method in concre…Check if you run itEPSS 0.19%May 21, 2026
- High7.3Concrete CMS 9.5.0 and below is vulnerable to Stored XSS via OAuth integration name.Check if you run itEPSS 0.25%May 21, 2026
- Medium5.1Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in ticketsmdb_import.php that allows authenticated attackers to inject arbitrar…Check if you run itEPSS 0.29%May 21, 2026
- Medium5.1Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in routes_i.php that allows authenticated attackers to inject arbitrary JavaScr…Check if you run itEPSS 0.29%May 21, 2026
- Medium5.1Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in patient_w.php that allows authenticated attackers to inject arbitrary JavaSc…Check if you run itEPSS 0.29%May 21, 2026
- Medium5.1Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in patient.php that allows authenticated attackers to inject arbitrary JavaScri…Check if you run itEPSS 0.29%May 21, 2026
- Medium5.1Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in os_watch.php that allows authenticated attackers to inject arbitrary JavaScr…Check if you run itEPSS 0.29%May 21, 2026
- Medium5.1Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in landb.php that allows authenticated attackers to inject arbitrary JavaScript…Check if you run itEPSS 0.29%May 21, 2026
- Medium5.1Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in ics214.php that allows authenticated attackers to inject arbitrary JavaScrip…Check if you run itEPSS 0.29%May 21, 2026
- Medium5.1Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in ics213rr.php that allows authenticated attackers to inject arbitrary JavaScr…Check if you run itEPSS 0.29%May 21, 2026
- Medium5.1Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in ics213.php that allows authenticated attackers to inject arbitrary JavaScrip…Check if you run itEPSS 0.29%May 21, 2026
- Medium5.1Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in ics205a.php that allows authenticated attackers to inject arbitrary JavaScri…Check if you run itEPSS 0.29%May 21, 2026
- Medium5.1Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in ics205.php that allows authenticated attackers to inject arbitrary JavaScrip…Check if you run itEPSS 0.29%May 21, 2026
- Medium5.1Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in ics202.php that allows authenticated attackers to inject arbitrary JavaScrip…Check if you run itEPSS 0.29%May 21, 2026
- Medium5.1Open ISES Tickets before 3.44.2 contains a reflected cross-site scripting vulnerability in icons/buttons/landb.php that allows authenticated attackers to inject arbitr…Check if you run itEPSS 0.29%May 21, 2026