Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.1A Reflected Cross-Site Scripting (XSS) affects LimeSurvey versions prior to 6.15.11+250909, due to the lack of validation of gid parameter in getInstance() function in…Check if you run itEPSS 0.23%Apr 9, 2026
- Medium5.5A vulnerability was detected in Tenda CH22 1.0.0.6(468).Check if you run itEPSS 0.54%Apr 9, 2026
- Medium5.5A security vulnerability has been detected in code-projects Simple IT Discussion Forum 1.0.Check if you run itEPSS 0.26%Apr 9, 2026
- High7.5Integer Overflow or Wraparound vulnerability in Apache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ MQTT.Check if you run itEPSS 0.38%Apr 9, 2026
- High7.1Laravel Passport provides OAuth2 server support to Laravel.Check if you run itEPSS 0.29%Apr 9, 2026
- High8.5n8n-MCP is a Model Context Protocol (MCP) server that provides AI assistants with comprehensive access to n8n node documentation, properties, and operations.Check if you run itEPSS 0.32%Apr 9, 2026
- High7.1Mercure is a protocol for pushing data updates to web browsers and other HTTP clients in a battery-efficient way.Check if you run itEPSS 0.34%Apr 9, 2026
- High8.8MISP is an open source threat intelligence and sharing platform.Check if you run itEPSS 0.34%Apr 9, 2026
- High7.1Tmds.DBus provides .NET libraries for working with D-Bus from .NET.Check if you run itEPSS 0.12%Apr 9, 2026
- Medium5.2oma is a package manager for AOSC OS.Check if you run itEPSS 0.36%Apr 9, 2026
- Low2.3Lychee is a free, open-source photo-management tool.Check if you run itEPSS 0.21%Apr 9, 2026
- Medium6.5Directus is a real-time API and App dashboard for managing SQL database content.Check if you run itEPSS 0.17%Apr 9, 2026
- High8.8Directus is a real-time API and App dashboard for managing SQL database content.Check if you run itEPSS 0.20%Apr 9, 2026
- Medium5.5osslsigncode is a tool that implements Authenticode signing and timestamping.Check if you run itEPSS 0.14%Apr 9, 2026
- Medium5.5osslsigncode is a tool that implements Authenticode signing and timestamping.Check if you run itEPSS 0.14%Apr 9, 2026
- Critical9.1A Dynamic-link Library Injection vulnerability in OSGeo Project MapServer before v8.0 allows attackers to execute arbitrary code via a crafted executable.Check if you run itEPSS 0.32%Apr 9, 2026
- Low2.1A weakness has been identified in code-projects Patient Record Management System 1.0.Check if you run itEPSS 0.26%Apr 9, 2026
- Medium5.3ChurchCRM is an open-source church management system.Check if you run itEPSS 0.26%Apr 9, 2026
- High7.8osslsigncode is a tool that implements Authenticode signing and timestamping.Check if you run itEPSS 0.16%Apr 9, 2026
- High7.7Plane is an an open-source project management tool.Check if you run itEPSS 0.25%Apr 9, 2026
- High8.4Helm is a package manager for Charts for Kubernetes.Check if you run itEPSS 0.22%Apr 9, 2026
- High8.4Helm is a package manager for Charts for Kubernetes.Check if you run itEPSS 0.20%Apr 9, 2026
- Medium6.5fast-jwt provides fast JSON Web Token (JWT) implementation.Check if you run itEPSS 0.26%Apr 9, 2026
- Medium5.3fast-jwt provides fast JSON Web Token (JWT) implementation.Check if you run itEPSS 0.38%Apr 9, 2026
- High7.5Use of GET Request Method With Sensitive Query Strings vulnerability in Apache OpenMeetings.Check if you run itEPSS 0.51%Apr 9, 2026
Sort