Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.7Sticky Notes & Color Widgets 1.4.2 contains a denial of service vulnerability that allows attackers to crash the application by creating notes with excessively long ch…Check if you run itEPSS 0.28%May 16, 2026
- High8.7My Notes Safe 5.3 contains a denial of service vulnerability that allows attackers to crash the application by pasting excessively long character strings into note fields.Check if you run itEPSS 0.28%May 16, 2026
- High8.7Macaron Notes 5.5 contains a denial of service vulnerability that allows attackers to crash the application by creating notes with excessively long character strings.Check if you run itEPSS 0.28%May 16, 2026
- High8.7Color Notes 1.4 contains a denial of service vulnerability that allows attackers to crash the application by pasting excessively long character strings into note fields.Check if you run itEPSS 0.28%May 16, 2026
- Medium5.1Cookie Law Bar 1.2.1 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by submitting unsanitized inp…Check if you run itEPSS 0.20%May 16, 2026
- High8.8EgavilanMedia PHPCRUD 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through th…Check if you run itEPSS 0.28%May 16, 2026
- Medium5.1CouchCMS 2.2.1 contains a cross-site scripting vulnerability that allows authenticated attackers to execute arbitrary JavaScript by uploading malicious SVG files throu…Check if you run itEPSS 0.17%May 16, 2026
- High8.8LayerBB 1.1.4 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the search_query parameter.Check if you run itEPSS 0.24%May 16, 2026
- Critical9.3python jsonpickle 2.0.0 contains a remote code execution vulnerability that allows attackers to execute arbitrary Python commands by deserializing malicious JSON paylo…Check if you run itEPSS 0.70%May 16, 2026
- High8.7Home Assistant Community Store (HACS) prior to 1.10.0 contains a path traversal vulnerability that allows unauthenticated attackers to read sensitive files by traversi…Check if you run itEPSS 0.50%May 16, 2026
- Medium6.9MyBB Timeline Plugin 1.0 contains cross-site scripting vulnerabilities that allow attackers to inject malicious scripts through thread titles, post content, and user p…Check if you run itEPSS 0.23%May 16, 2026
- High8.5Kite 4.2.0.1 U1 contains an unquoted service path vulnerability in the KiteService Windows service that allows local attackers to escalate privileges by exploiting the…Check if you run itEPSS 0.11%May 16, 2026
- Medium6.9Supsystic Backup 2.3.9 contains a local file inclusion vulnerability that allows unauthenticated attackers to read and delete arbitrary files by manipulating the downl…Check if you run itEPSS 0.67%May 16, 2026
- High8.7Supsystic Digital Publications 1.6.9 contains a path traversal vulnerability in the Folder input field that allows attackers to access files outside the web root by in…Check if you run itEPSS 0.50%May 16, 2026
- High8.8Supsystic Membership 1.4.7 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code t…Check if you run itEPSS 0.28%May 16, 2026
- High8.8Supsystic Pricing Table 1.8.7 contains an SQL injection vulnerability in the 'sidx' GET parameter that allows unauthenticated attackers to execute arbitrary SQL querie…Check if you run itEPSS 0.28%May 16, 2026
- High8.8Supsystic Ultimate Maps 1.1.12 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious co…Check if you run itEPSS 0.28%May 16, 2026
- Medium6.9bloofoxCMS 0.5.2.1 contains a cross-site request forgery vulnerability that allows attackers to perform administrative actions by tricking logged-in users into visitin…Check if you run itEPSS 0.15%May 16, 2026
- Medium5.1Queue Management System 4.0.0 contains a stored cross-site scripting vulnerability that allows authenticated administrators to inject malicious scripts through user cr…Check if you run itEPSS 0.24%May 16, 2026
- Critical9.3libbabl 0.1.62 contains a broken double free detection vulnerability that allows attackers to bypass memory safety checks by exploiting signature overwriting in freed chunks.Check if you run itEPSS 0.46%May 16, 2026
- Medium5.1CMS Made Simple 2.2.15 contains a stored cross-site scripting vulnerability that allows authenticated users with Content Manager access to inject malicious scripts thr…Check if you run itEPSS 0.24%May 16, 2026
- Medium5.1Composr CMS 10.0.34 contains a persistent cross-site scripting vulnerability that allows authenticated administrators to inject malicious scripts through the banner ma…Check if you run itEPSS 0.24%May 16, 2026
- Medium5.1NewsLister contains an authenticated persistent cross-site scripting vulnerability that allows authenticated administrators to inject malicious scripts through the tit…Check if you run itEPSS 0.24%May 16, 2026
- Medium5.1WordPress Theme Wibar 1.1.8 contains a stored cross-site scripting vulnerability in the Brand component that allows authenticated users to inject malicious scripts by…Check if you run itEPSS 0.24%May 16, 2026
- Medium6.9Internet Download Manager 6.38.12 contains a buffer overflow vulnerability in the Scheduler component that allows local attackers to crash the application by supplying…Check if you run itEPSS 0.15%May 16, 2026
Sort