Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.9Next.js is a React framework for building full-stack web applications.Check if you run itEPSS 0.87%Mar 18, 2026
- Medium6.1Chamilo LMS is a learning management system.Check if you run itEPSS 0.27%Mar 16, 2026
- High8.5Webhooks for Craft CMS plugin adds the ability to manage “webhooks” in Craft CMS, which will send GET or POST requests when certain events occur.Check if you run itEPSS 0.46%Mar 16, 2026
- Medium6.1Cross Site scripting vulnerability (XSS) in NetBox 4.3.5 "comment" field on object forms.Check if you run itEPSS 0.18%Mar 16, 2026
- Medium6.5SiYuan is a personal knowledge management system.Check if you run itEPSS 0.36%Mar 16, 2026
- Critical9.6AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting.Check if you run itEPSS 0.76%Mar 16, 2026
- Medium5.3Raytha CMS is vulnerable to Stored XSS via FirstName and LastName parameters in profile editing functionality.Check if you run itEPSS 0.25%Mar 16, 2026
- Medium5.1Raytha CMS is vulnerable to Stored XSS via FieldValues[0].Value parameter in page creation functionality.Check if you run itEPSS 0.18%Mar 16, 2026
- Medium5.1Raytha CMS is vulnerable to Stored XSS via FieldValues[1].Value parameter in post editing functionality.Check if you run itEPSS 0.22%Mar 16, 2026
- High7.6OneUptime is a solution for monitoring and managing online services.Check if you run itEPSS 0.31%Mar 13, 2026
- Medium6.8JumpServer is an open source bastion host and an operation and maintenance security audit system.Check if you run itEPSS 0.54%Mar 13, 2026
- Medium5.1Beghelli Sicuro24 SicuroWeb contains a template injection vulnerability that allows attackers to inject arbitrary AngularJS expressions by exploiting improper renderin…Check if you run itEPSS 0.38%Mar 13, 2026
- Medium5.3wpDiscuz before 7.6.47 contains a stored cross-site scripting vulnerability in the inline comment preview functionality that allows authenticated users to inject malic…Check if you run itEPSS 0.18%Mar 13, 2026
- Medium5.3Unhead is a document head and template manager.Check if you run itEPSS 0.28%Mar 12, 2026
- Low2.1A vulnerability was identified in Jcharis Machine-Learning-Web-Apps up to a6996b634d98ccec4701ac8934016e8175b60eb5.Check if you run itEPSS 0.49%Mar 11, 2026
- Medium4.3Insufficient policy enforcement in Clipboard in Google Chrome prior to 146.0.7680.71 allowed a remote attacker who had compromised the renderer process to leak cross-o…Check if you run itEPSS 0.26%Mar 11, 2026
- High7.5use after free in WindowDialog in Google Chrome prior to 146.0.7680.71 allowed a remote attacker who had compromised the renderer process to potentially perform a sand…Check if you run itEPSS 0.32%Mar 11, 2026
- Medium5.4OpenEMR is a free and open source electronic health records and medical practice management application.Check if you run itEPSS 0.65%Mar 11, 2026
- Medium5.4OpenEMR is a free and open source electronic health records and medical practice management application.Check if you run itEPSS 0.65%Mar 11, 2026
- Medium5.4OpenEMR is a free and open source electronic health records and medical practice management application.Check if you run itEPSS 0.67%Mar 11, 2026
- Medium4.7ha-mcp is a Home Assistant MCP Server.Check if you run itEPSS 0.25%Mar 11, 2026
- High7.2StudioCMS is a server-side-rendered, Astro native, headless content management system.Check if you run itEPSS 0.38%Mar 11, 2026
- Medium5.4StudioCMS is a server-side-rendered, Astro native, headless content management system.Check if you run itEPSS 0.31%Mar 11, 2026
- High7.2StudioCMS is a server-side-rendered, Astro native, headless content management system.Check if you run itEPSS 0.45%Mar 11, 2026
- Medium6.3StudioCMS is a server-side-rendered, Astro native, headless content management system.Check if you run itEPSS 0.29%Mar 11, 2026