Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.7Prompt injection vulnerability in 1millionbot Millie chatbot that occurs when a user manages to evade chat restrictions using Boolean prompt injection techniques (form…Check if you run itEPSS 0.27%Mar 31, 2026
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Extend Themes Kubio AI Page Builder allows Stored XSS.This issue…Check if you run itEPSS 0.14%Mar 31, 2026
- High7.5A flaw was found in the gdk-pixbuf library.Check if you run itEPSS 1.09%Mar 31, 2026
- Critical9.3Stored Cross-Site Scripting (XSS) in Teampass versions prior to 3.1.5.16, affecting the password manager's password import functionality at the endpoint 'redacted/inde…Check if you run itEPSS 0.14%Mar 31, 2026
- Critical9.3Blind Cross-Site Scripting (XSS) in Teampass, versions prior to 3.1.5.16, within the password manager login functionality in the 'contraseña' parameter of the login fo…Check if you run itEPSS 0.16%Mar 31, 2026
- Low1.9A weakness has been identified in Nothings stb up to 2.30.Check if you run itEPSS 0.11%Mar 31, 2026
- Low2.1A vulnerability was identified in TRENDnet TEW-713RE up to 1.02.Check if you run itEPSS 9.63%Mar 31, 2026
- Medium5.5A flaw has been found in SourceCodester Simple Doctors Appointment System 1.0.Check if you run itEPSS 0.33%Mar 31, 2026
- Medium5.3The Appointment Booking and Scheduler Plugin – Truebooker plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.…Check if you run itEPSS 0.21%Mar 31, 2026
- Low2.1A weakness has been identified in Totolink A3300R 17.0.0cu.557_b20221024.Check if you run itEPSS 2.74%Mar 31, 2026
- Low1.7cryptography is a package designed to expose cryptographic primitives and recipes to Python developers.Check if you run itEPSS 0.23%Mar 31, 2026
- High7.5LangChain is a framework for building agents and LLM-powered applications.Check if you run itEPSS 1.44%Mar 31, 2026
- High7.1Ruby LSP is an implementation of the language server protocol for Ruby.Check if you run itEPSS 0.50%Mar 31, 2026
- High8.2act is a project which allows for local running of github actions.Check if you run itEPSS 0.47%Mar 31, 2026
- High7.8Moby is an open source container framework.Check if you run itEPSS 9.27%Mar 31, 2026
- High8.1Moby is an open source container framework.Check if you run itEPSS 0.40%Mar 31, 2026
- Medium6.5SciTokens is a reference library for generating and using SciTokens.Check if you run itEPSS 0.53%Mar 31, 2026
- Critical9.8SciTokens is a reference library for generating and using SciTokens.Check if you run itEPSS 0.50%Mar 31, 2026
- Critical9.8The Everest Forms Pro plugin for WordPress is vulnerable to Remote Code Execution via PHP Code Injection in all versions up to, and including, 1.9.12.Patch nowKEVEPSS 39.16%Mar 31, 2026
- Medium5.3baserCMS is a website development framework.Check if you run itEPSS 0.40%Mar 31, 2026
- High7.2baserCMS is a website development framework.Check if you run itEPSS 2.32%Mar 31, 2026
- Low2.1A vulnerability was identified in code-projects Online Food Ordering System 1.0.Check if you run itEPSS 0.34%Mar 31, 2026
- High8.8Google Dawn Use-After-Free VulnerabilityPatch nowKEVEPSS 13.74%Mar 31, 2026
- High7.5The Gravity SMTP plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.1.4.Patch nowKEVEPSS 73.80%Mar 31, 2026
- Unknownthimpress learnpress Improper Access ControlPatch nowKEVEPSS 1.16%Mar 31, 2026
Sort