Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.8A security vulnerability has been detected in awwaiid mcp-server-taskwarrior up to 1.0.1.Check if you run itEPSS 0.74%Apr 9, 2026
- Medium6.9A weakness has been identified in atototo api-lab-mcp up to 0.2.1.Check if you run itEPSS 0.30%Apr 9, 2026
- Medium5.3A security flaw has been discovered in Agions taskflow-ai up to 2.1.8.Check if you run itEPSS 1.24%Apr 9, 2026
- High8.7A vulnerability was identified in Tenda AC15 15.03.05.18.Check if you run itEPSS 0.64%Apr 9, 2026
- High8.8The Vertex Addons for Elementor plugin for WordPress is vulnerable to Missing Authorization in all versions up to and including 1.6.4.Check if you run itEPSS 0.59%Apr 9, 2026
- Medium6.9A vulnerability was determined in code-projects Simple IT Discussion Forum 1.0.Check if you run itEPSS 0.26%Apr 9, 2026
- Medium6.9A vulnerability was found in code-projects Simple IT Discussion Forum 1.0.Check if you run itEPSS 0.33%Apr 9, 2026
- Medium6.9A vulnerability has been found in code-projects Simple IT Discussion Forum 1.0.Check if you run itEPSS 0.35%Apr 9, 2026
- Medium5.3A flaw has been found in code-projects Simple IT Discussion Forum 1.0.Check if you run itEPSS 0.37%Apr 9, 2026
- Medium5.3A vulnerability was detected in code-projects Simple Laundry System 1.0.Check if you run itEPSS 0.37%Apr 9, 2026
- Critical9.3Marimo Remote Code Execution VulnerabilityPatch nowKEVEPSS 99.74%Apr 9, 2026
- High8.8A Dynamic-link Library Injection vulnerability in GatewayGeo MapServer for Windows version 5 allows attackers to escalate privileges via a crafted executable.Check if you run itEPSS 0.18%Apr 9, 2026
- Medium6.1Cross Site Scripting vulnerability in Limesurvey v.6.15.20+251021 allows a remote attacker to execute arbitrary code via the Box[title] and box[url] parameters.Check if you run itEPSS 0.29%Apr 9, 2026
- Medium5.4A stored cross-site scripting (XSS) vulnerability exists in Kiamo before 8.4 due to improper output encoding of user-supplied input in administrative interfaces.Check if you run itEPSS 0.14%Apr 9, 2026
- High8.8An issue was discovered in Kiamo before 8.4 allowing authenticated administrative attackers to execute arbitrary PHP code on the server.Check if you run itEPSS 0.30%Apr 9, 2026
- Medium6.1A Reflected Cross-Site Scripting (XSS) affects LimeSurvey versions prior to 6.15.11+250909, due to the lack of validation of gid parameter in getInstance() function in application/Check if you run itEPSS 0.24%Apr 9, 2026
- Medium6.1A cross-site scripting (XSS) vulnerability in rrweb-snapshot before v2.0.0-alpha.18 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.Check if you run itEPSS 0.24%Apr 9, 2026
- UnknownImproper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Patch nowKEVEPSS 51.12%Apr 9, 2026
- Medium6.9A security vulnerability has been detected in code-projects Simple Laundry System 1.0.Check if you run itEPSS 0.33%Apr 8, 2026
- Medium5.3A weakness has been identified in itsourcecode Construction Management System 1.0.Check if you run itEPSS 0.20%Apr 8, 2026
- Medium5.4GitLab has remediated an issue in GitLab EE affecting all versions from 18.3 before 19.1.7, 19.2 before 19.2.5, and 19.3 before 19.3.1 that, under certain conditions,…Check if you run itEPSS 0.24%Apr 8, 2026
- High8.7A vulnerability was detected in D-Link DIR-645 1.01/1.02/1.03.Check if you run itEPSS 0.71%Apr 8, 2026
- Medium6.9A security vulnerability has been detected in PHPGurukul Online Course Registration 3.1.Check if you run itEPSS 0.26%Apr 8, 2026
- Medium6.9A weakness has been identified in PHPGurukul Online Course Registration 3.1.Check if you run itEPSS 0.26%Apr 8, 2026
- UnknownExploit:Python/CVE-2021-16855!dha threat description - Microsoft Security IntelligenceOpen the advisoryApr 8, 2026
Sort