Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.1A vulnerability has been discovered in appRain CMF version 4.0.5, consisting of a stored authenticated XSS due to a lack of proper validation of user input, through the 'data[AddonCheck if you run itEPSS 0.18%Sep 4, 2025
- Medium5.1A vulnerability has been discovered in appRain CMF version 4.0.5, consisting of a stored authenticated XSS due to a lack of proper validation of user input, through the 'data[sconfCheck if you run itEPSS 0.18%Sep 4, 2025
- Medium5.1A vulnerability has been discovered in appRain CMF version 4.0.5, consisting of a stored authenticated XSS due to a lack of proper validation of user input, through the 'data[Page]Check if you run itEPSS 0.18%Sep 4, 2025
- Medium5.1A vulnerability has been discovered in appRain CMF version 4.0.5, consisting of a stored authenticated XSS due to a lack of proper validation of user input, through the 'data[AppReCheck if you run itEPSS 0.18%Sep 4, 2025
- Medium5.1A vulnerability has been discovered in appRain CMF version 4.0.5, consisting of a stored authenticated XSS due to a lack of proper validation of user input, through the 'data[OptioCheck if you run itEPSS 0.18%Sep 4, 2025
- Medium5.1A vulnerability has been discovered in appRain CMF version 4.0.5, consisting of a stored authenticated XSS due to a lack of proper validation of user input, through the 'data[code]Check if you run itEPSS 0.18%Sep 4, 2025
- Medium5.1A vulnerability has been discovered in appRain CMF version 4.0.5, consisting of a stored authenticated XSS due to a lack of proper validation of user input, through the 'data[code]Check if you run itEPSS 0.18%Sep 4, 2025
- Medium5.1A vulnerability has been discovered in appRain CMF version 4.0.5, consisting of a stored authenticated XSS due to a lack of proper validation of user input, through the 'data[sconfCheck if you run itEPSS 0.18%Sep 4, 2025
- Medium5.1A vulnerability has been discovered in appRain CMF version 4.0.5, consisting of a stored authenticated XSS due to a lack of proper validation of user input, through the 'data[GroupCheck if you run itEPSS 0.22%Sep 4, 2025
- Medium5.1A vulnerability has been discovered in appRain CMF version 4.0.5, consisting of a stored authenticated XSS due to a lack of proper validation of user input, through the 'data[FileMCheck if you run itEPSS 0.22%Sep 4, 2025
- Medium5.1A vulnerability has been discovered in appRain CMF version 4.0.5, consisting of a stored authenticated XSS due to a lack of proper validation of user input, through the 'data[AdminCheck if you run itEPSS 0.22%Sep 4, 2025
- High7.1A problem has been discovered in appRain CMF 4.0.5.Check if you run itEPSS 0.67%Sep 4, 2025
- High8.7An SQL injection vulnerability has been found in appRain CMF 4.0.5.Check if you run itEPSS 0.39%Sep 4, 2025
- High8.7An SQL injection vulnerability has been found in appRain CMF 4.0.5.Check if you run itEPSS 0.39%Sep 4, 2025
- High8.7An SQL injection vulnerability has been found in appRain CMF 4.0.5.Check if you run itEPSS 0.39%Sep 4, 2025
- Medium5.3The PopAd plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.4.Check if you run itEPSS 0.16%Sep 4, 2025
- High7.5The langchain-ai/langchain project, specifically the EverNoteLoader component, is vulnerable to XML External Entity (XXE) attacks due to insecure XML parsing.Check if you run itEPSS 1.65%Sep 4, 2025
- Medium5.5In ReadTachyonCommands of gxp_main_actor.cc, there is a possible information leak due to uninitialized data.Check if you run itEPSS 0.08%Sep 4, 2025
- High7.5Markdownify is a Model Context Protocol server for converting almost anything to Markdown.Check if you run itEPSS 0.97%Sep 4, 2025
- Critical9.75ire is a cross-platform desktop artificial intelligence assistant and model context protocol client.Check if you run itEPSS 0.64%Sep 4, 2025
- UnknownXWiki xwiki Transmission of Private Resources into a New Sphere ('Resource Leak')Patch nowKEVEPSS 0.95%Sep 4, 2025
- High8.7A weakness has been identified in D-Link DI-8400 16.07.26A1.Check if you run itEPSS 1.60%Sep 3, 2025
- Medium5.3A vulnerability was identified in fuyang_lipengjun platform 1.0.0.Check if you run itEPSS 0.38%Sep 3, 2025
- Low2.3CKEditor 5 is a modern JavaScript rich-text editor with an MVC architecture.Check if you run itEPSS 0.42%Sep 3, 2025
- Medium6.9Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients.Check if you run itEPSS 0.63%Sep 3, 2025
Sort