Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.1MDwiki contains a cross-site scripting vulnerability that allows remote attackers to execute arbitrary JavaScript by injecting malicious code through the location hash parameter.Check if you run itEPSS 0.27%Apr 12, 2026
- Medium6.5Various stored XSS vulnerabilities in the maps- and icon rendering logic in Phoca Maps component 5.0.0-6.0.2 have been discovered.Check if you run itEPSS 0.25%Apr 11, 2026
- Medium5.4Vikunja is an open-source self-hosted task management platform.Check if you run itEPSS 0.31%Apr 10, 2026
- Low2.0A security vulnerability has been detected in Sanluan PublicCMS up to 6.202506.d.Check if you run itEPSS 0.41%Apr 9, 2026
- Medium6.1PraisonAI is a multi-agent teams system.Check if you run itEPSS 0.26%Apr 9, 2026
- Medium6.1Unhead is a document head and template manager.Check if you run itEPSS 0.34%Apr 9, 2026
- Medium5.3ChurchCRM is an open-source church management system.Check if you run itEPSS 0.39%Apr 9, 2026
- High7.1An out-of-bounds read vulnerability exists in the function of .Check if you run itEPSS 0.19%Apr 9, 2026
- Medium6.4The UsersWP plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to and including 1.2.60.Check if you run itEPSS 0.42%Apr 9, 2026
- Medium6.4The Ultimate FAQ Accordion plugin for WordPress is vulnerable to Stored Cross-Site Scripting via FAQ content in all versions up to, and including, 2.4.7.Check if you run itEPSS 0.38%Apr 9, 2026
- Medium6.5Insufficient validation of untrusted input in WebSockets in Google Chrome prior to 147.0.7727.55 allowed a remote attacker who had compromised the renderer process to…Check if you run itEPSS 0.30%Apr 8, 2026
- Medium4.3Inappropriate implementation in Navigation in Google Chrome prior to 147.0.7727.55 allowed a remote attacker who had compromised the renderer process to leak cross-ori…Check if you run itEPSS 0.21%Apr 8, 2026
- Critical9.8Race in Media in Google Chrome on Android prior to 147.0.7727.55 allowed a remote attacker who had compromised the renderer process to corrupt media stream metadata vi…Check if you run itEPSS 0.33%Apr 8, 2026
- Medium6.6Insufficient policy enforcement in PWAs in Google Chrome prior to 147.0.7727.55 allowed a remote attacker who had compromised the renderer process to install a PWA wit…Check if you run itEPSS 0.16%Apr 8, 2026
- Medium4.3Insufficient policy enforcement in browser UI in Google Chrome prior to 147.0.7727.55 allowed a remote attacker who had compromised the renderer process to perform UI…Check if you run itEPSS 0.26%Apr 8, 2026
- High8.8Insufficient validation of untrusted input in Media in Google Chrome prior to 147.0.7727.55 allowed a remote attacker who had compromised the renderer process to execu…Check if you run itEPSS 0.39%Apr 8, 2026
- Medium4.3Insufficient policy enforcement in browser UI in Google Chrome prior to 147.0.7727.55 allowed a remote attacker who had compromised the renderer process to spoof the c…Check if you run itEPSS 0.24%Apr 8, 2026
- High8.8PraisonAI is a multi-agent teams system.Check if you run itEPSS 0.56%Apr 8, 2026
- Medium6.3LiquidJS is a Shopify / GitHub Pages compatible template engine in pure JavaScript.Check if you run itEPSS 0.50%Apr 8, 2026
- High8.2LiquidJS is a Shopify / GitHub Pages compatible template engine in pure JavaScript.Check if you run itEPSS 0.52%Apr 8, 2026
- Critical9.9InvenTree is an Open Source Inventory Management System.Check if you run itEPSS 0.36%Apr 8, 2026
- Medium5.4immich is a high performance self-hosted photo and video management solution.Check if you run itEPSS 0.26%Apr 8, 2026
- Medium5.3Zammad is a web based open source helpdesk/customer support system.Check if you run itEPSS 0.25%Apr 8, 2026
- Critical9.1A Server-Side Request Forgery (SSRF) vulnerability exists in the Print Format functionality of ERPNext v16.0.1 and Frappe Framework v16.1.1, where user-supplied HTML i…Check if you run itEPSS 0.42%Apr 8, 2026
- Medium4.8CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support.Check if you run itEPSS 0.25%Apr 8, 2026