Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.3Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline.Check if you run itEPSS 0.23%Feb 19, 2026
- High7.3Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline.Check if you run itEPSS 0.23%Feb 19, 2026
- Medium5.9Trivy Action runs Trivy as GitHub action to scan a Docker container image for vulnerabilities.Check if you run itEPSS 1.51%Feb 19, 2026
- High8.8CediPay is a crypto-to-fiat app for the Ghanaian market.Check if you run itEPSS 0.31%Feb 19, 2026
- Low2.1ChurchCRM is an open-source church management system.Check if you run itEPSS 0.23%Feb 19, 2026
- Medium6.5Skill Scanner is a security scanner for AI Agent Skills that detects prompt injection, data exfiltration, and malicious code patterns.Check if you run itEPSS 0.38%Feb 19, 2026
- Medium5.3GFI MailEssentials AI versions prior to 22.4 contain an arbitrary directory existence enumeration vulnerability in the ListServer.IsPathExist() web method exposed at /MailEssentialCheck if you run itEPSS 0.28%Feb 19, 2026
- Medium5.3GFI MailEssentials AI versions prior to 22.4 contain an arbitrary file existence enumeration vulnerability in the ListServer.IsDBExist() web method exposed at /MailEssentials/pagesCheck if you run itEPSS 0.21%Feb 19, 2026
- Medium5.1GFI MailEssentials AI versions prior to 22.4 contain a stored cross-site scripting vulnerability in the Local Domains settings page.Check if you run itEPSS 0.21%Feb 19, 2026
- Medium5.1GFI MailEssentials AI versions prior to 22.4 contain a stored cross-site scripting vulnerability in the Spam Keyword Checking (Subject) conditions interface.Check if you run itEPSS 0.21%Feb 19, 2026
- Medium5.1GFI MailEssentials AI versions prior to 22.4 contain a stored cross-site scripting vulnerability in the Spam Keyword Checking (Body) conditions interface.Check if you run itEPSS 0.21%Feb 19, 2026
- Medium5.1GFI MailEssentials AI versions prior to 22.4 contain a stored cross-site scripting vulnerability in the Anti-Spoofing configuration page.Check if you run itEPSS 0.21%Feb 19, 2026
- Medium5.1GFI MailEssentials AI versions prior to 22.4 contain a stored cross-site scripting vulnerability in the Sender Policy Framework Email Exceptions interface.Check if you run itEPSS 0.19%Feb 19, 2026
- Medium5.1GFI MailEssentials AI versions prior to 22.4 contain a stored cross-site scripting vulnerability in the Sender Policy Framework IP Exceptions interface.Check if you run itEPSS 0.21%Feb 19, 2026
- Medium5.1GFI MailEssentials AI versions prior to 22.4 contain a stored cross-site scripting vulnerability in the URI DNS Blocklist configuration page.Check if you run itEPSS 0.19%Feb 19, 2026
- Medium5.1GFI MailEssentials AI versions prior to 22.4 contain a stored cross-site scripting vulnerability in the IP DNS Blocklist configuration page.Check if you run itEPSS 0.21%Feb 19, 2026
- Medium5.1GFI MailEssentials AI versions prior to 22.4 contain a stored cross-site scripting vulnerability in the IP Blocklist management page.Check if you run itEPSS 0.21%Feb 19, 2026
- Medium5.1GFI MailEssentials AI versions prior to 22.4 contain a stored cross-site scripting vulnerability in the POP2Exchange configuration endpoint.Check if you run itEPSS 0.21%Feb 19, 2026
- Medium5.1GFI MailEssentials AI versions prior to 22.4 contain a stored cross-site scripting vulnerability in the Perimeter SMTP Servers configuration page.Check if you run itEPSS 0.21%Feb 19, 2026
- Medium5.1GFI MailEssentials AI versions prior to 22.4 contain a stored cross-site scripting vulnerability in the Mail Monitoring rule creation endpoint.Check if you run itEPSS 0.21%Feb 19, 2026
- Medium5.1GFI MailEssentials AI versions prior to 22.4 contain a stored cross-site scripting vulnerability in the Anti-Spam Whitelist management interface.Check if you run itEPSS 0.21%Feb 19, 2026
- Medium5.1GFI MailEssentials AI versions prior to 22.4 contain a stored cross-site scripting vulnerability in the Advanced Content Filtering rule creation workflow.Check if you run itEPSS 0.21%Feb 19, 2026
- Critical9.3Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Delinea Cloud Suite allows Argument Injection.This issue affects Cloud Suite:Check if you run itEPSS 0.25%Feb 19, 2026
- Medium5.1GFI MailEssentials AI versions prior to 22.4 contain a stored cross-site scripting vulnerability in the Attachment Filtering rule creation workflow.Check if you run itEPSS 0.21%Feb 19, 2026
- Medium5.1GFI MailEssentials AI versions prior to 22.4 contain a stored cross-site scripting vulnerability in the Keyword Filtering rule creation workflow.Check if you run itEPSS 0.21%Feb 19, 2026
Sort