Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.6Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline.Check if you run itEPSS 0.30%May 15, 2026
- High8.1Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline.Check if you run itEPSS 0.29%May 15, 2026
- High8.1Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline.Check if you run itEPSS 0.28%May 15, 2026
- High8.7Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline.Check if you run itEPSS 0.30%May 15, 2026
- Critical9.1Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline.Check if you run itEPSS 1.46%May 15, 2026
- Medium5.0Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline.Check if you run itEPSS 0.29%May 15, 2026
- Medium6.3ORSEE (Online Recruitment System for Economic Experiments) 3.1.0 contains an authenticated Remote Code Execution vulnerability in the participant profile field process…Check if you run itEPSS 0.34%May 15, 2026
- High8.7Missing bounds validation in the MQTT v5.0 property parser in coreMQTT before 5.0.1 allows an MQTT broker to cause a denial of service by sending a crafted packet.Check if you run itEPSS 0.39%May 15, 2026
- Medium6.5Mattermost versions 11.5.x <= 11.5.1, 10.11.x <= 10.11.13, 11.4.x <= 11.4.3 Fail to validate the response body of proxied images, which allows a remote attacker to ena…Check if you run itEPSS 0.24%May 15, 2026
- Medium4.3Mattermost versions 11.5.x <= 11.5.1, 10.11.x <= 10.11.13 fail to enforce the PostEditTimeLimit on non-message post fields which allows an authenticated user to modify…Check if you run itEPSS 0.17%May 15, 2026
- High7.6Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores.Check if you run itEPSS 0.25%May 15, 2026
- High8.1Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores.Check if you run itEPSS 0.22%May 15, 2026
- High8.3phpMyFAQ before 4.1.2 contains a stored cross-site scripting vulnerability in Utils::parseUrl() that allows authenticated users to inject JavaScript via malformed URLs in comments.Check if you run itEPSS 0.25%May 15, 2026
- High8.7phpMyFAQ before 4.1.2 contains an information disclosure vulnerability in the getIdFromSolutionId() method that lacks permission filtering, allowing unauthenticated at…Check if you run itEPSS 0.34%May 15, 2026
- Medium5.3phpMyFAQ before 4.1.2 contains a missing authorization vulnerability in the DELETE /admin/api/content/tags/{tagId} endpoint that allows any authenticated user to delete tags.Check if you run itEPSS 0.22%May 15, 2026
- Critical9.3phpMyFAQ before 4.1.2 contains an unauthenticated SQL injection vulnerability in BuiltinCaptcha::garbageCollector() and BuiltinCaptcha::saveCaptcha() methods that inte…Check if you run itEPSS 1.71%May 15, 2026
- Medium5.1phpMyFAQ before 4.1.2 contains a stored cross-site scripting vulnerability in FAQ creation and update endpoints that bypass sanitization through encode-decode cycles.Check if you run itEPSS 0.19%May 15, 2026
- High7.1phpMyFAQ before 4.1.2 contains an authorization bypass vulnerability in AbstractAdministrationController::userHasPermission() that fails to terminate execution after s…Check if you run itEPSS 0.30%May 15, 2026
- High8.2phpMyFAQ before 4.1.2 contains a stored cross-site scripting vulnerability in search.twig where result.question and result.answerPreview are rendered with the raw filt…Check if you run itEPSS 0.29%May 15, 2026
- Medium5.1phpMyFAQ before 4.1.2 contains a stored cross-site scripting vulnerability in SvgSanitizer::decodeAllEntities() that limits recursive entity decoding to 5 iterations,…Check if you run itEPSS 0.19%May 15, 2026
- High7.7phpMyFAQ before 4.1.2 contains a sql injection vulnerability in CurrentUser::setTokenData that allows authenticated attackers to execute arbitrary SQL by injecting mal…Check if you run itEPSS 0.26%May 15, 2026
- High8.7Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores.Check if you run itEPSS 0.30%May 15, 2026
- Medium5.3Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores.Check if you run itEPSS 0.32%May 15, 2026
- Medium5.1Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores.Check if you run itEPSS 0.29%May 15, 2026
- Critical9.3phpMyFAQ before 4.1.2 contains an improper restriction of excessive authentication attempts vulnerability in the /admin/check endpoint, which accepts arbitrary user-id…Check if you run itEPSS 0.43%May 15, 2026
Sort