Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.5USB Flash Drives Control 4.1.0.0 contains an unquoted service path vulnerability in its service configuration that allows local attackers to potentially execute arbitrary code.Check if you run itEPSS 0.14%Dec 17, 2025
- Medium5.1Textpattern CMS 4.8.8 contains a stored cross-site scripting vulnerability in the article excerpt field that allows authenticated users to inject malicious scripts.Check if you run itEPSS 0.31%Dec 17, 2025
- Medium5.1WBCE CMS 1.6.1 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious JavaScript by inserting script tags into page content thCheck if you run itEPSS 0.33%Dec 17, 2025
- Medium5.1WBCE CMS 1.6.1 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious JavaScript by uploading crafted SVG files through the meCheck if you run itEPSS 0.33%Dec 17, 2025
- High8.7HiSecOS 04.0.01 contains a privilege escalation vulnerability that allows authenticated users to modify their access role through XML-based NETCONF configuration.Check if you run itEPSS 0.34%Dec 17, 2025
- Medium5.1projectSend r1605 contains a stored cross-site scripting vulnerability that allows authenticated administrators to inject malicious JavaScript through the custom assets configuratiCheck if you run itEPSS 0.31%Dec 17, 2025
- Medium6.2ProjectSend r1605 contains a CSV injection vulnerability that allows authenticated users to inject malicious formulas into user profile names.Check if you run itEPSS 0.50%Dec 17, 2025
- Medium5.1Xenforo 2.2.13 contains a stored cross-site scripting vulnerability that allows authenticated administrators to inject malicious scripts through the smilie category title parameterCheck if you run itEPSS 0.27%Dec 17, 2025
- High7.6Open OnDemand provides remote web access to supercomputers.Check if you run itEPSS 0.20%Dec 17, 2025
- Medium6.9A security flaw has been discovered in code-projects Online Appointment Booking System 1.0.Check if you run itEPSS 0.36%Dec 17, 2025
- High7.3Storybook is a frontend workshop for building user interface components and pages in isolation.Check if you run itEPSS 0.26%Dec 17, 2025
- High8.8Open Source Point of Sale (opensourcepos) is a web based point of sale application written in PHP using CodeIgniter framework.Check if you run itEPSS 0.28%Dec 17, 2025
- High8.1Open Source Point of Sale (opensourcepos) is a web based point of sale application written in PHP using CodeIgniter framework.Check if you run itEPSS 0.38%Dec 17, 2025
- High7.2RoundCube Webmail Cross-site Scripting VulnerabilityPatch nowKEVEPSS 27.41%Dec 17, 2025
- Medium6.4In mcp-server-git versions prior to 2025.12.17, when the server is started with the --repository flag to restrict operations to a specific repository path, it did not validate thatCheck if you run itEPSS 7.03%Dec 17, 2025
- Medium6.3In mcp-server-git versions prior to 2025.12.17, the git_diff and git_checkout functions passed user-controlled arguments directly to git CLI commands without sanitization.Check if you run itEPSS 7.21%Dec 17, 2025
- Medium6.5Model Context Protocol Servers is a collection of reference implementations for the model context protocol (MCP).Check if you run itEPSS 8.13%Dec 17, 2025
- Medium6.8Auth0-PHP is a PHP SDK for Auth0 Authentication and Management APIs.Check if you run itEPSS 0.43%Dec 17, 2025
- Medium6.9A vulnerability was identified in itsourcecode Online Cake Ordering System 1.0.Check if you run itEPSS 0.39%Dec 17, 2025
- Medium6.6FreeRDP is a free implementation of the Remote Desktop Protocol.Check if you run itEPSS 0.24%Dec 17, 2025
- Critical9.2ChurchCRM is an open-source church management system.Check if you run itEPSS 0.21%Dec 17, 2025
- Medium6.2ChurchCRM is an open-source church management system.Check if you run itEPSS 0.21%Dec 17, 2025
- Critical9.3ChurchCRM is an open-source church management system.Check if you run itEPSS 0.38%Dec 17, 2025
- Low2.0ChurchCRM is an open-source church management system.Check if you run itEPSS 0.20%Dec 17, 2025
- Critical9.6ChurchCRM is an open-source church management system.Check if you run itEPSS 0.43%Dec 17, 2025
Sort