Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.1A vulnerability has been discovered in appRain CMF version 4.0.5, consisting of a stored authenticated XSS due to a lack of proper validation of user input, through the 'data[AppReCheck if you run itEPSS 0.18%Sep 4, 2025
- Medium5.1A vulnerability has been discovered in appRain CMF version 4.0.5, consisting of a stored authenticated XSS due to a lack of proper validation of user input, through the 'data[OptioCheck if you run itEPSS 0.18%Sep 4, 2025
- Medium5.1A vulnerability has been discovered in appRain CMF version 4.0.5, consisting of a stored authenticated XSS due to a lack of proper validation of user input, through the 'data[code]Check if you run itEPSS 0.18%Sep 4, 2025
- Medium5.1A vulnerability has been discovered in appRain CMF version 4.0.5, consisting of a stored authenticated XSS due to a lack of proper validation of user input, through the 'data[code]Check if you run itEPSS 0.18%Sep 4, 2025
- Medium5.1A vulnerability has been discovered in appRain CMF version 4.0.5, consisting of a stored authenticated XSS due to a lack of proper validation of user input, through the 'data[sconfCheck if you run itEPSS 0.18%Sep 4, 2025
- Medium5.1A vulnerability has been discovered in appRain CMF version 4.0.5, consisting of a stored authenticated XSS due to a lack of proper validation of user input, through the 'data[GroupCheck if you run itEPSS 0.22%Sep 4, 2025
- Medium5.1A vulnerability has been discovered in appRain CMF version 4.0.5, consisting of a stored authenticated XSS due to a lack of proper validation of user input, through the 'data[FileMCheck if you run itEPSS 0.22%Sep 4, 2025
- Medium5.1A vulnerability has been discovered in appRain CMF version 4.0.5, consisting of a stored authenticated XSS due to a lack of proper validation of user input, through the 'data[AdminCheck if you run itEPSS 0.22%Sep 4, 2025
- High7.1A problem has been discovered in appRain CMF 4.0.5.Check if you run itEPSS 0.67%Sep 4, 2025
- High8.7An SQL injection vulnerability has been found in appRain CMF 4.0.5.Check if you run itEPSS 0.39%Sep 4, 2025
- High8.7An SQL injection vulnerability has been found in appRain CMF 4.0.5.Check if you run itEPSS 0.39%Sep 4, 2025
- High8.7An SQL injection vulnerability has been found in appRain CMF 4.0.5.Check if you run itEPSS 0.39%Sep 4, 2025
- High7.7Improper export of component in GoodLock prior to version 2.2.04.95 allows local attackers to install arbitrary applications from Galaxy Store.Check if you run itEPSS 0.12%Sep 4, 2025
- Medium4.3Improper access control vulnerability in retrieveExternalProxy in MiscPolicy prior to SMR Nov-2022 Release 1 allows local attacker to access to Proxy information.Check if you run itEPSS 0.15%Sep 4, 2025
- Medium5.3The PopAd plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.4.Check if you run itEPSS 0.16%Sep 4, 2025
- High7.2The Make Connector plugin for WordPress is vulnerable to arbitrary file uploads due to misconfigured file type validation in the 'upload_media' function in all versions up to, andCheck if you run itEPSS 1.24%Sep 4, 2025
- High8.6Improper Restriction of Excessive Authentication Attempts vulnerability in Akinsoft TaskPano allows Authentication Bypass.Check if you run itEPSS 0.44%Sep 4, 2025
- Medium4.7Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Akinsoft TaskPano allows Cross-Site Scripting (XSS).Check if you run itEPSS 0.30%Sep 4, 2025
- High7.5The langchain-ai/langchain project, specifically the EverNoteLoader component, is vulnerable to XML External Entity (XXE) attacks due to insecure XML parsing.Check if you run itEPSS 1.65%Sep 4, 2025
- High8.6Improper Restriction of Excessive Authentication Attempts vulnerability in Akinsoft e-Mutabakat allows Authentication Bypass.Check if you run itEPSS 0.44%Sep 4, 2025
- Medium5.3When the Vaadin Upload's start listener is used to validate metadata about an incoming upload, it is possible to bypass the upload validation.Check if you run itEPSS 0.39%Sep 4, 2025
- Medium5.3Information disclosureCheck if you run itEPSS 0.14%Sep 4, 2025
- High7.5Information disclosureCheck if you run itEPSS 0.17%Sep 4, 2025
- High7.5In TBD of TBD, there is a possible DoS due to a missing null check.Check if you run itEPSS 0.27%Sep 4, 2025
- Medium5.5In ReadTachyonCommands of gxp_main_actor.cc, there is a possible information leak due to uninitialized data.Check if you run itEPSS 0.08%Sep 4, 2025
Sort