Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.9Vvveb before version 1.0.8.2 contains an information disclosure vulnerability that allows unauthenticated attackers to obtain sensitive server information by triggerin…Check if you run itEPSS 0.42%May 6, 2026
- Medium4.3HCL BigFix Service Management (SM) does not adequately sanitize or safely render spreadsheet files (CSV, XLS, XLSX) before processing or distributing them.Check if you run itEPSS 0.14%May 6, 2026
- High8.7A type confusion vulnerability in Qt SVG allows an attacker to cause an application crash via a crafted SVG image.Check if you run itEPSS 0.47%May 6, 2026
- Medium6.1HCL DFXAnalytics is affected by an Insecure Security Header Configuration vulnerability where the application utilizes the outdated X-XSS-Protection header, which coul…Check if you run itEPSS 0.12%May 6, 2026
- High8.2OpenMRS Core is an open source electronic medical record system platform.Check if you run itEPSS 0.72%May 5, 2026
- Critical9.8ERPNext v15.103.1 and before is vulnerable to Server-Side Template Injection (SSTI).Check if you run itEPSS 0.60%May 5, 2026
- Medium5.4Traccar is an open source GPS tracking system.Check if you run itEPSS 0.24%May 5, 2026
- Medium6.4The WP Carousel Free plugin for WordPress is vulnerable to Stored Cross-Site Scripting via crafted fancybox attributes in all versions up to, and including, 2.7.10.Check if you run itEPSS 0.33%May 5, 2026
- High8.7n8n is an open source workflow automation platform.Check if you run itEPSS 0.65%May 4, 2026
- High8.8n8n is an open source workflow automation platform.Check if you run itEPSS 0.51%May 4, 2026
- Medium4.4PlantUML Macro is a macro for rendering UML diagrams from simple textual schemes.Check if you run itEPSS 0.27%May 4, 2026
- Medium6.0Beets is the media library management system.Check if you run itEPSS 0.53%May 4, 2026
- Critical9.6Notesnook is a note-taking app focused on user privacy & ease of use.Check if you run itEPSS 0.85%May 4, 2026
- High8.7NetBox versions 4.3.5 through 4.5.4 contain a remote code execution vulnerability in the RenderTemplateMixin.get_environment_params() method that allows authenticated…Check if you run itEPSS 1.10%May 4, 2026
- Medium5.4The Total theme for WordPress is vulnerable to Stored Cross-Site Scripting via post titles in versions up to, and including, 2.2.1 due to insufficient output escaping…Check if you run itEPSS 0.24%May 2, 2026
- Medium5.3The Royal Addons for Elementor plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the AJAX action in all vers…Check if you run itEPSS 0.46%May 2, 2026
- High7.2The Royal Elementor Addons plugin for WordPress is vulnerable to Server-Side Request Forgery in versions up to, and including, 1.7.1057.Check if you run itEPSS 0.48%May 2, 2026
- High7.2The Gravity Forms plugin for WordPress is vulnerable to Unauthenticated Stored Cross-Site Scripting in versions up to and including 2.10.0.Check if you run itEPSS 0.30%May 2, 2026
- Medium6.4The Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the className, classHo…Check if you run itEPSS 0.42%May 2, 2026
- Medium4.8Cross-Site Scripting (XSS) in V2Board thru 1.7.4.Check if you run itEPSS 0.29%May 1, 2026
- High8.1A web page that contains unusual WebGPU content loaded into the GPU GLES render process and can trigger write UAF crash in the GPU GLES user-space shared library.Check if you run itEPSS 0.39%May 1, 2026
- High8.1A web page that contains unusual WebGPU content loaded into the GPU GLES render process and can trigger a write UAF crash in the GPU GLES user-space shared library.Check if you run itEPSS 0.35%May 1, 2026
- Medium4.8Helpy contains a stored cross-site scripting vulnerability in the knowledge base Doc rendering logic.Check if you run itEPSS 0.26%Apr 29, 2026
- Medium5.1Helpy contains a stored cross-site scripting vulnerability in the post author display logic.Check if you run itEPSS 0.26%Apr 29, 2026
- Low3.1Insufficient validation of untrusted input.Check if you run itEPSS 0.24%Apr 28, 2026