Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.2Squidex is an open source headless content management system and content management hub.Check if you run itEPSS 0.24%Apr 22, 2026
- High8.4radare2 prior to 6.1.4 contains a command injection vulnerability in the PDB parser's print_gvars() function that allows attackers to execute arbitrary commands by cra…Check if you run itEPSS 1.05%Apr 22, 2026
- Medium6.9pypdf is a free and open-source pure-python PDF library.Check if you run itEPSS 0.30%Apr 22, 2026
- Critical9.1Jellystat is a free and open source Statistics App for Jellyfin.Check if you run itEPSS 0.64%Apr 22, 2026
- High7.0OpenRemote is an open-source internet-of-things platform.Check if you run itEPSS 0.29%Apr 22, 2026
- High7.3Kiota is an OpenAPI based HTTP Client code generator.Check if you run itEPSS 0.42%Apr 22, 2026
- High8.3RustFS is a distributed object storage system built in Rust.Check if you run itEPSS 0.29%Apr 22, 2026
- High7.6OpenRemote is an open-source internet-of-things platform.Check if you run itEPSS 0.26%Apr 22, 2026
- Medium4.6An authenticated attacker can persist crafted values in multiple field types and trigger client-side script execution when another user opens the affected document in Desk.Check if you run itEPSS 0.19%Apr 22, 2026
- Medium6.8nimiq-transaction provides the transaction primitive to be used in Nimiq's Rust implementation.Check if you run itEPSS 0.20%Apr 22, 2026
- Medium6.5nimiq-transaction provides the transaction primitive to be used in Nimiq's Rust implementation.Check if you run itEPSS 0.32%Apr 22, 2026
- High7.2EspoCRM is an open source customer relationship management application.Check if you run itEPSS 0.45%Apr 22, 2026
- Critical9.1EspoCRM is an open source customer relationship management application.Check if you run itEPSS 0.50%Apr 22, 2026
- Low2.1http.cookies.Morsel.js_output() returns an inline snippet and only escapes " for JavaScript string context.Check if you run itEPSS 0.21%Apr 22, 2026
- Medium4.6An authenticated attacker can store a crafted tag value in _user_tags and trigger JavaScript execution when a victim opens the list/report view where tags are rendered.Check if you run itEPSS 0.20%Apr 22, 2026
- Medium5.3nimiq-blockchain provides persistent block storage for Nimiq's Rust implementation.Check if you run itEPSS 0.24%Apr 22, 2026
- High7.5nimiq-primitives contains primitives (e.g., block, account, transaction) to be used in Nimiq's Rust implementation.Check if you run itEPSS 0.37%Apr 22, 2026
- High8.2nimiq-account contains account primitives to be used in Nimiq's Rust implementation.Check if you run itEPSS 0.27%Apr 22, 2026
- High7.5Nimiq's network-libp2p is a Nimiq network implementation based on libp2p.Check if you run itEPSS 0.35%Apr 22, 2026
- Medium5.3nimiq-libp2p is a Nimiq network implementation based on libp2p.Check if you run itEPSS 0.30%Apr 22, 2026
- Critical9.6nimiq-block contains block primitives to be used in Nimiq's Rust implementation.Check if you run itEPSS 0.22%Apr 22, 2026
- Medium5.1Beghelli Sicuro24 SicuroWeb does not enforce a Content Security Policy, allowing unrestricted loading of external JavaScript resources from attacker-controlled origins.Check if you run itEPSS 0.20%Apr 22, 2026
- Critical9.3Beghelli Sicuro24 SicuroWeb embeds AngularJS 1.5.2, an end-of-life component containing known sandbox escape primitives.Check if you run itEPSS 0.39%Apr 22, 2026
- Medium6.9Xerte Online Toolkits versions 3.15 and earlier contain an information disclosure vulnerability that allows unauthenticated attackers to retrieve the full server-side…Check if you run itEPSS 0.80%Apr 22, 2026
- Critical9.3Xerte Online Toolkits versions 3.15 and earlier contain an incomplete input validation vulnerability in the elFinder connector endpoint that fails to block PHP-executa…Check if you run itEPSS 3.57%Apr 22, 2026
Sort