Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.8A Stored HTML Injection vulnerability was discovered in the Credentials Manager functionality due to improper validation of an input parameter.Check if you run itEPSS 0.19%May 19, 2026
- High7.5AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents.Check if you run itEPSS 0.51%May 19, 2026
- Low3.9FacturaScripts is an open source accounting and invoicing software.Check if you run itEPSS 0.15%May 18, 2026
- Medium5.3DumbAssets through 1.0.11 contains a stored cross-site scripting vulnerability in asset fields including name, description, modelNumber, serialNumber, and tags that ar…Check if you run itEPSS 0.31%May 18, 2026
- High7.3Offline Hospital Management System 5.3.0 allows remote code execution due to an improper Electron renderer configuration.Check if you run itEPSS 0.53%May 18, 2026
- Low3.5Mattermost Desktop App versions <=6.1 6.0.1 5.4.13.0 fail to prevent server-rendered content from closing an underlying application view in the Mattermost Desktop App…Check if you run itEPSS 0.29%May 18, 2026
- Low2.0Versions of the package jsondiffpatch before 0.7.6 are vulnerable to Cross-site Scripting (XSS) via the annotated formatter due to improper sanitization of JSON values…Check if you run itEPSS 0.33%May 16, 2026
- High8.1Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline.Check if you run itEPSS 0.38%May 15, 2026
- Medium5.1Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline.Check if you run itEPSS 0.24%May 15, 2026
- Medium5.4Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline.Check if you run itEPSS 0.24%May 15, 2026
- High7.7Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline.Check if you run itEPSS 0.30%May 15, 2026
- Medium4.8Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline.Check if you run itEPSS 0.25%May 15, 2026
- Medium5.1phpMyFAQ before 4.1.2 contains a stored cross-site scripting vulnerability in FAQ creation and update endpoints that bypass sanitization through encode-decode cycles.Check if you run itEPSS 0.26%May 15, 2026
- High8.2phpMyFAQ before 4.1.2 contains a stored cross-site scripting vulnerability in search.twig where result.question and result.answerPreview are rendered with the raw filt…Check if you run itEPSS 0.34%May 15, 2026
- Medium5.3Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores.Check if you run itEPSS 0.44%May 15, 2026
- Medium6.1Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores.Check if you run itEPSS 0.27%May 15, 2026
- High7.1Tabby (formerly Terminus) is a highly configurable terminal emulator.Check if you run itEPSS 0.24%May 15, 2026
- Medium6.9Traefik is an HTTP reverse proxy and load balancer.Check if you run itEPSS 0.50%May 15, 2026
- Medium5.1Cockpit CMS through version 2.14.0, patched in commit 72a83fc, contains a stored cross-site scripting vulnerability in the Set field type's Display template option, wh…Check if you run itEPSS 0.14%May 15, 2026
- High7.5Inappropriate implementation in Media in Google Chrome on iOS prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to perform an…Check if you run itEPSS 0.28%May 14, 2026
- Medium4.2Inappropriate implementation in Views in Google Chrome on iOS prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to perform UI…Check if you run itEPSS 0.21%May 14, 2026
- Medium5.3Insufficient policy enforcement in WebXR in Google Chrome on Android prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to obta…Check if you run itEPSS 0.28%May 14, 2026
- Low3.1Insufficient validation of untrusted input in Skia in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to perfo…Check if you run itEPSS 0.14%May 14, 2026
- Low3.1Out of bounds read in GPU in Google Chrome on Linux prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to leak cross-origin dat…Check if you run itEPSS 0.21%May 14, 2026
- High8.3Use after free in UI in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escap…Check if you run itEPSS 0.28%May 14, 2026