Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.2ProjectSend r1605 contains a CSV injection vulnerability that allows authenticated users to inject malicious formulas into user profile names.Check if you run itEPSS 0.50%Dec 17, 2025
- Medium5.1Xenforo 2.2.13 contains a stored cross-site scripting vulnerability that allows authenticated administrators to inject malicious scripts through the smilie category title parameterCheck if you run itEPSS 0.27%Dec 17, 2025
- High7.6Open OnDemand provides remote web access to supercomputers.Check if you run itEPSS 0.20%Dec 17, 2025
- Medium6.9A security flaw has been discovered in code-projects Online Appointment Booking System 1.0.Check if you run itEPSS 0.36%Dec 17, 2025
- High7.3Storybook is a frontend workshop for building user interface components and pages in isolation.Check if you run itEPSS 0.26%Dec 17, 2025
- High8.8Open Source Point of Sale (opensourcepos) is a web based point of sale application written in PHP using CodeIgniter framework.Check if you run itEPSS 0.28%Dec 17, 2025
- High8.1Open Source Point of Sale (opensourcepos) is a web based point of sale application written in PHP using CodeIgniter framework.Check if you run itEPSS 0.38%Dec 17, 2025
- High7.2RoundCube Webmail Cross-site Scripting VulnerabilityPatch nowKEVEPSS 27.41%Dec 17, 2025
- Medium6.4In mcp-server-git versions prior to 2025.12.17, when the server is started with the --repository flag to restrict operations to a specific repository path, it did not validate thatCheck if you run itEPSS 7.03%Dec 17, 2025
- Medium6.3In mcp-server-git versions prior to 2025.12.17, the git_diff and git_checkout functions passed user-controlled arguments directly to git CLI commands without sanitization.Check if you run itEPSS 7.21%Dec 17, 2025
- Medium6.5Model Context Protocol Servers is a collection of reference implementations for the model context protocol (MCP).Check if you run itEPSS 8.13%Dec 17, 2025
- Medium6.8Auth0-PHP is a PHP SDK for Auth0 Authentication and Management APIs.Check if you run itEPSS 0.43%Dec 17, 2025
- Medium6.9A vulnerability was identified in itsourcecode Online Cake Ordering System 1.0.Check if you run itEPSS 0.39%Dec 17, 2025
- Medium6.6FreeRDP is a free implementation of the Remote Desktop Protocol.Check if you run itEPSS 0.24%Dec 17, 2025
- Critical9.2ChurchCRM is an open-source church management system.Check if you run itEPSS 0.21%Dec 17, 2025
- Medium6.2ChurchCRM is an open-source church management system.Check if you run itEPSS 0.21%Dec 17, 2025
- Critical9.3ChurchCRM is an open-source church management system.Check if you run itEPSS 0.38%Dec 17, 2025
- Low2.0ChurchCRM is an open-source church management system.Check if you run itEPSS 0.20%Dec 17, 2025
- Critical9.6ChurchCRM is an open-source church management system.Check if you run itEPSS 0.43%Dec 17, 2025
- High7.2ChurchCRM is an open-source church management system.Check if you run itEPSS 0.38%Dec 17, 2025
- Critical10.0ChurchCRM is an open-source church management system.Check if you run itEPSS 0.42%Dec 17, 2025
- Critical9.1ChurchCRM is an open-source church management system.Check if you run itEPSS 1.53%Dec 17, 2025
- High7.4ChurchCRM is an open-source church management system.Check if you run itEPSS 0.37%Dec 17, 2025
- Critical9.3ChurchCRM is an open-source church management system.Check if you run itEPSS 0.20%Dec 17, 2025
- High8.5ChurchCRM is an open-source church management system.Check if you run itEPSS 0.20%Dec 17, 2025
Sort