Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.4Cross-Site Request Forgery (CSRF) vulnerability in Dimitri Grassi Salon booking system salon-booking-system allows Cross Site Request Forgery.This issue affects Salon booking systeCheck if you run itEPSS 0.15%May 19, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in templateinvaders TI WooCommerce Wishlist ti-woocommerce-wishlist allows StoredCheck if you run itEPSS 0.25%May 19, 2025
- Medium6.0ConnectWise-Password-Encryption-Utility.exe in ConnectWise Risk Assessment allows an attacker to extract a hardcoded AES decryption key via reverse engineering.Check if you run itEPSS 0.11%May 19, 2025
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bruno Cavalcante Ghostwriter allows Reflected XSS.This issue affects GhostwritCheck if you run itEPSS 0.23%May 19, 2025
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in fyrewurks Tiki Time allows Reflected XSS.This issue affects Tiki Time: from n/Check if you run itEPSS 0.23%May 19, 2025
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in tijaji Tijaji tijaji allows Reflected XSS.This issue affects Tijaji: from n/aCheck if you run itEPSS 0.23%May 19, 2025
- High7.6OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables.Check if you run itEPSS 0.42%May 19, 2025
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Takimi Themes CarZine allows Reflected XSS.This issue affects CarZine: from n/Check if you run itEPSS 0.23%May 19, 2025
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in duwasai Flashy allows Reflected XSS.This issue affects Flashy: from n/a througCheck if you run itEPSS 0.23%May 19, 2025
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in jinwen Js O3 Lite allows Reflected XSS.This issue affects Js O3 Lite: from n/aCheck if you run itEPSS 0.23%May 19, 2025
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in twh offset writing allows Reflected XSS.This issue affects offset writing: froCheck if you run itEPSS 0.23%May 19, 2025
- Medium5.5The issue was addressed with improved memory handling.Check if you run itEPSS 0.19%May 19, 2025
- High8.8The issue was addressed with improved checks.Check if you run itEPSS 0.74%May 19, 2025
- Medium5.5The issue was addressed with improved checks.Check if you run itEPSS 0.16%May 19, 2025
- Medium5.5A permissions issue was addressed with additional restrictions.Check if you run itEPSS 0.17%May 19, 2025
- Low3.3A logic issue was addressed with improved checks.Check if you run itEPSS 0.18%May 19, 2025
- Medium5.3A vulnerability classified as problematic was found in PHPGurukul Credit Card Application Management System 1.0.Check if you run itEPSS 0.53%May 19, 2025
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in asmedia allows Reflected XSS.This issue affects moseter: from n/a through 1.3.Check if you run itEPSS 0.23%May 19, 2025
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in fyrewurks polka dots allows Reflected XSS.This issue affects polka dots: fromCheck if you run itEPSS 0.23%May 19, 2025
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Asmedia Tuaug4 allows Reflected XSS.This issue affects Tuaug4: from n/a througCheck if you run itEPSS 0.23%May 19, 2025
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in mythemes my white allows Reflected XSS.This issue affects my white: from n/a tCheck if you run itEPSS 0.23%May 19, 2025
- High7.5A flaw was found in the soup_multipart_new_from_message() function of the libsoup HTTP library, which is commonly used by GNOME and other applications to handle web communications.Check if you run itEPSS 0.81%May 19, 2025
- Medium5.3A vulnerability was found in PHPGurukul Employee Record Management System 1.3.Check if you run itEPSS 0.48%May 19, 2025
- Medium6.9A vulnerability was found in SourceCodester Apartment Visitor Management System 1.0.Check if you run itEPSS 0.63%May 19, 2025
- Medium5.3Missing Authorization vulnerability in Embed360 Embed and Integrate Etsy Shop embed-and-integrate-etsy-shop allows Accessing Functionality Not Properly Constrained by ACLs.This issCheck if you run itEPSS 0.27%May 19, 2025
Sort