Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.1Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Orejime allows Cross-Site Scripting (XSS).Check if you run itEPSS 0.20%May 19, 2026
- Medium5.3Mantis Bug Tracker (MantisBT) is an open source issue tracker.Check if you run itEPSS 0.36%May 19, 2026
- Medium5.7Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks.Check if you run itEPSS 0.27%May 19, 2026
- Medium5.3Mantis Bug Tracker (MantisBT) is an open source issue tracker.Check if you run itEPSS 0.36%May 19, 2026
- Medium6.1Template::Plugin::HTML versions before 3.103 for Perl allows HTML and JavaScript to be injected.Check if you run itEPSS 0.29%May 19, 2026
- High8.6Mantis Bug Tracker (MantisBT) is an open source issue tracker.Check if you run itEPSS 0.44%May 19, 2026
- Medium5.1Mantis Bug Tracker (MantisBT) is an open source issue tracker.Check if you run itEPSS 0.43%May 19, 2026
- High8.1CtrlPanel is open-source billing software for hosting providers.Check if you run itEPSS 0.30%May 19, 2026
- Medium4.8CtrlPanel is open-source billing software for hosting providers.Check if you run itEPSS 0.22%May 19, 2026
- High8.7CtrlPanel is open-source billing software for hosting providers.Check if you run itEPSS 0.35%May 19, 2026
- Medium5.1Ledger Nano X, Flex, and Stax devices contain a denial of service vulnerability in the MCU firmware update process due to missing validation of the reset_handler param…Check if you run itEPSS 0.21%May 19, 2026
- Medium4.6Improper input validation in the System Management Mode (SMM) communications buffer could allow a privileged attacker to perform an out of bounds read or write to a li…Check if you run itEPSS 0.19%May 19, 2026
- Medium6.9Ledger Live with vulnerable versions of ledgerhq/hw-app-eth prior to 6.34.7 contains an integer parsing vulnerability that allows attackers to manipulate EIP-712 typed…Check if you run itEPSS 0.26%May 19, 2026
- High7.3An authorization vulnerability exists in Innoshop 0.6.0.Check if you run itEPSS 0.25%May 19, 2026
- Medium6.5CtrlPanel is open-source billing software for hosting providers.Check if you run itEPSS 0.28%May 19, 2026
- Medium6.6CtrlPanel is open-source billing software for hosting providers.Check if you run itEPSS 0.53%May 19, 2026
- High7.1libheif is a HEIF and AVIF file format decoder and encoder.Check if you run itEPSS 0.71%May 19, 2026
- Medium6.5libheif is a HEIF and AVIF file format decoder and encoder.Check if you run itEPSS 0.31%May 19, 2026
- High7.1libheif is a HEIF and AVIF file format decoder and encoder.Check if you run itEPSS 0.34%May 19, 2026
- Medium5.5Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks.Check if you run itEPSS 0.16%May 19, 2026
- Medium5.3In the AWS Secrets Manager and SSM Parameter Store secrets backends of prior to 9.28.0, the team-scoping logic could resolve a containing a (e.g.Check if you run itEPSS 0.41%May 19, 2026
- High8.8libheif is a HEIF and AVIF file format decoder and encoder.Check if you run itEPSS 0.68%May 19, 2026
- Medium6.5libheif is a HEIF and AVIF file format decoder and encoder.Check if you run itEPSS 0.32%May 19, 2026
- High8.7JWT tokens that were used by workers in Kubernetes Executors have been exposed to users who had read only access to Kuberentes Pods.Check if you run itEPSS 0.16%May 19, 2026
- High8.5Execution with unnecessary privileges vulnerability in Broadcom Automic Automation Agent Unix on Linux x64, Linux Power 64 BE, Linux Power 64 LE, zLinux (zSeries), AIX…Check if you run itEPSS 0.15%May 19, 2026
Sort