Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- None0.0To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used.Check if you run itEPSS 0.00%Jan 1, 2026
- None0.0To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used.Check if you run itEPSS 0.00%Jan 1, 2026
- None0.0To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used.Check if you run itEPSS 0.00%Jan 1, 2026
- None0.0To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used.Check if you run itEPSS 0.00%Jan 1, 2026
- None0.0To maintain compliance with CNA rules, we have rejected this CVE record because it has not been used.Check if you run itEPSS 0.00%Jan 1, 2026
- Low3.4KDE messagelib before 25.11.90 ignores SSL errors for threatMatches:find in the Google Safe Browsing Lookup API (aka phishing API), which might allow spoofing of threat data.Check if you run itEPSS 0.22%Dec 31, 2025
- Medium6.1There is a stored cross site scripting issue in Esri ArcGIS Server 11.4 and earlier on Windows and Linux that in some configurations allows a remote unauthenticated attacker to stoCheck if you run itEPSS 0.24%Dec 31, 2025
- Medium6.1There is a stored cross site scripting issue in Esri ArcGIS Server 11.4 and earlier on Windows and Linux that in some configurations allows a remote unauthenticated attacker to stoCheck if you run itEPSS 0.24%Dec 31, 2025
- Medium6.1There is a stored cross site scripting issue in Esri ArcGIS Server 11.4 and earlier on Windows and Linux that in some configurations allows a remote unauthenticated attacker to stoCheck if you run itEPSS 0.24%Dec 31, 2025
- Medium6.1There is a stored cross site scripting issue in Esri ArcGIS Server 11.4 and earlier on Windows and Linux that in some configurations allows a remote unauthenticated attacker to stoCheck if you run itEPSS 0.24%Dec 31, 2025
- Medium5.6ArcGIS Server versions 11.5 and earlier on Windows and Linux do not sufficiently validate uploaded files, enabling a remote unauthenticated attacker to upload arbitrary files to thCheck if you run itEPSS 0.30%Dec 31, 2025
- Medium5.6ArcGIS Server versions 11.5 and earlier on Windows and Linux do not sufficiently validate uploaded files, enabling a remote unauthenticated attacker to upload arbitrary files to thCheck if you run itEPSS 0.35%Dec 31, 2025
- Medium6.1There is a stored cross site scripting issue in Esri ArcGIS Server 11.4 and earlier on Windows and Linux that in some configurations allows a remote unauthenticated attacker to stoCheck if you run itEPSS 0.24%Dec 31, 2025
- Medium6.1There is a stored cross site scripting issue in Esri ArcGIS Server 11.4 and earlier on Windows and Linux that in some configurations allows a remote unauthenticated attacker to stoCheck if you run itEPSS 0.25%Dec 31, 2025
- Medium6.1There is a stored cross site scripting issue in Esri ArcGIS Server 11.4 and earlier on Windows and Linux that in some configurations allows a remote unauthenticated attacker to stoCheck if you run itEPSS 0.24%Dec 31, 2025
- Medium6.3A security vulnerability has been detected in Uasoft badaso up to 2.9.7.Check if you run itEPSS 0.56%Dec 31, 2025
- Critical9.1Titra is open source project time tracking software.Check if you run itEPSS 0.85%Dec 31, 2025
- High8.9RAGFlow is an open-source RAG (Retrieval-Augmented Generation) engine.Check if you run itEPSS 0.80%Dec 31, 2025
- High7.1PocketMine-MP versions prior to 4.18.1 contain an improper input validation vulnerability in inventory transaction handling.Check if you run itEPSS 0.40%Dec 31, 2025
- High8.6RAGFlow is an open-source RAG (Retrieval-Augmented Generation) engine.Check if you run itEPSS 0.72%Dec 31, 2025
- Medium5.1A vulnerability was detected in PKrystian Full-Stack-Bank up to bf73a0179e3ff07c0d7dc35297cea0be0e5b1317.Check if you run itEPSS 0.24%Dec 31, 2025
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in osuthorpe Easy Social easy-social-media allows Reflected XSS.This issue affectCheck if you run itEPSS 0.22%Dec 31, 2025
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in uxper Sala allows Reflected XSS.This issue affects Sala: from n/a through 1.1.Check if you run itEPSS 0.18%Dec 31, 2025
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in nebelhorn Blappsta Mobile App Plugin – Your native, mobile iPhone App and AndrCheck if you run itEPSS 0.18%Dec 31, 2025
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ZoomSounds allows Reflected XSS.This issue affects ZoomSounds: from n/a througCheck if you run itEPSS 0.18%Dec 31, 2025
Sort