Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical10.0FlowiseAI Flowise Improper Control of Generation of Code ('Code Injection')Patch nowKEVEPSS 86.49%Sep 22, 2025
- High7.5Flowise is a drag & drop user interface to build a customized large language model flow.Check if you run itEPSS 5.46%Sep 22, 2025
- Critical9.6Flowise is a drag & drop user interface to build a customized large language model flow.Check if you run itEPSS 4.03%Sep 22, 2025
- Medium6.9A vulnerability has been found in code-projects Hostel Management System 1.0.Check if you run itEPSS 0.48%Sep 22, 2025
- Low2.7mailgen is a Node.js package that generates responsive HTML e-mails for sending transactional mail.Check if you run itEPSS 0.44%Sep 22, 2025
- Medium6.9A restriction bypass vulnerability in is-localhost-ip could allow attackers to perform Server-Side Request Forgery (SSRF).Check if you run itEPSS 0.38%Sep 22, 2025
- Medium5.3Conventional Changelog generates changelogs and release notes from a project's commit messages and metadata.Check if you run itEPSS 0.22%Sep 22, 2025
- Medium6.9A flaw has been found in code-projects Hostel Management System 1.0.Check if you run itEPSS 0.68%Sep 22, 2025
- High7.8A maliciously crafted PRT file, when parsed through certain Autodesk products, can force a Memory Corruption vulnerability.Check if you run itEPSS 0.18%Sep 22, 2025
- High8.2Mesh Connect JS SDK contains JS libraries for integrating with Mesh Connect.Check if you run itEPSS 0.43%Sep 22, 2025
- Medium6.9A vulnerability was detected in Campcodes Online Learning Management System 1.0.Check if you run itEPSS 0.68%Sep 22, 2025
- High7.1Cross-Site Request Forgery (CSRF) vulnerability in loopus WP Attractive Donations System wp-attractive-donations-system-easy-stripe-paypal-donations allows Stored XSS.This issue afCheck if you run itEPSS 0.13%Sep 22, 2025
- Medium4.3Missing Authorization vulnerability in Vikas Ratudi VPSUForm v-form allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects VPSUForm: from n/a thCheck if you run itEPSS 0.24%Sep 22, 2025
- Medium6.4Server-Side Request Forgery (SSRF) vulnerability in publitio Publitio publitio allows Server Side Request Forgery.This issue affects Publitio: from n/a through <= 2.2.1.Check if you run itEPSS 0.22%Sep 22, 2025
- Medium5.9Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in brijeshk89 IP Based Login ip-based-login allows Stored XSS.This issue affectsCheck if you run itEPSS 0.22%Sep 22, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Agency Dominion Inc.Check if you run itEPSS 0.21%Sep 22, 2025
- Medium5.0Missing Authorization vulnerability in Christiaan Pieterse MaxiBlocks maxi-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MaxiBloCheck if you run itEPSS 0.26%Sep 22, 2025
- High7.5Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in hashthemes Easy Elementor Addons easy-elementor-addons alloCheck if you run itEPSS 0.61%Sep 22, 2025
- Medium5.3Missing Authorization vulnerability in Greg Winiarski Custom Login URL custom-login-url allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CCheck if you run itEPSS 0.27%Sep 22, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in StellarWP WPComplete wpcomplete allows Stored XSS.This issue affects WPCompletCheck if you run itEPSS 0.21%Sep 22, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in impleCode Product Catalog Simple post-type-x allows Stored XSS.This issue affeCheck if you run itEPSS 0.21%Sep 22, 2025
- Medium4.3Missing Authorization vulnerability in WP Chill Revive.so revive-so allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Revive.so: from n/a tCheck if you run itEPSS 0.24%Sep 22, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in fatcatapps GetResponse Forms getresponse allows Stored XSS.This issue affectsCheck if you run itEPSS 0.21%Sep 22, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Pdfcrowd Dev Team Save as PDF save-as-pdf-by-pdfcrowd allows Stored XSS.This iCheck if you run itEPSS 0.21%Sep 22, 2025
- Medium4.3Missing Authorization vulnerability in payrexx Payrexx Payment Gateway for WooCommerce woo-payrexx-gateway allows Exploiting Incorrectly Configured Access Control Security Levels.TCheck if you run itEPSS 0.25%Sep 22, 2025
Sort