Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.3Stored XSS in Knowledge Base articles letting run JS code on link clickOpen the advisoryOct 27, 2026
- High8.0SVG attachment opened in browser turns one click into authenticated API POST callOpen the advisoryOct 27, 2026
- Medium4.3EspoCRM is an open source customer relationship management application.Check if you run itEPSS 0.19%Oct 15, 2026
- Medium6.5EspoCRM is an open source customer relationship management application.Check if you run itEPSS 0.23%Oct 15, 2026
- Medium6.5EspoCRM is an open source customer relationship management application.Check if you run itEPSS 0.23%Oct 15, 2026
- Critical9.1EspoCRM is an open source customer relationship management application.Check if you run itEPSS 0.42%Oct 15, 2026
- High7.5Unauthenticated long body request loads CPU in the password-redaction regex, denying serviceOpen the advisoryOct 13, 2026
- Medium4.3PDF rendering allows users with edit access to PDF template scope to view image attachments with known ID they don't have access toCheck if you run itEPSS 0.38%Oct 13, 2026
- Medium4.3IDOR allowing users with access to Import scope to extract data from attachments with known IDCheck if you run itEPSS 0.20%Sep 29, 2026
- Medium4.3Address-book search does not check field-level access to emailAddress fieldCheck if you run itEPSS 0.22%Sep 29, 2026
- Medium4.3Note read does not run ACL output filter against audit data exposing values of fields that are restricted with field-level securityCheck if you run itEPSS 0.22%Sep 29, 2026
- High7.7IDOR allowing user with access to Email Account scope to steal another user's stored IMAP password from Email Account with known IDCheck if you run itEPSS 0.22%Sep 21, 2026
- Medium4.3A login that stopped at the second factor is accepted on routes that do not require authenticationCheck if you run itEPSS 0.27%Sep 21, 2026
- Medium4.3Unauthenticated stored HTML injection via Lead Capture formCheck if you run itEPSS 0.27%Sep 21, 2026
- LowField-level security bypass for email address field via meeting's attendees endpointOpen the advisoryAug 29, 2026
- LowSSRF via IPv6 transition address bypass of internal-host validationCheck if you run itEPSS 0.37%Aug 13, 2026
- Medium6.5EspoCRM is an open source customer relationship management application.Check if you run itEPSS 0.23%Aug 13, 2026
- Medium6.0EspoCRM is an open source customer relationship management application.Check if you run itEPSS 0.29%Aug 13, 2026
- Medium5.5EspoCRM is an open source customer relationship management application.Check if you run itEPSS 0.34%Jul 28, 2026
- Low3.5EspoCRM is an open source customer relationship management application.Check if you run itEPSS 0.20%Jul 14, 2026
- Medium5.4EspoCRM is an open source customer relationship management application.Check if you run itEPSS 0.21%Jul 14, 2026
- Low2.7EspoCRM is an open source customer relationship management application.Check if you run itEPSS 0.22%Jul 14, 2026
- Medium4.3EspoCRM is an open source customer relationship management application.Check if you run itEPSS 0.34%Jul 14, 2026
- High7.6EspoCRM is an open source customer relationship management application.Check if you run itEPSS 0.21%Jul 13, 2026
- Medium4.3EspoCRM is an open source customer relationship management application.Check if you run itEPSS 0.29%May 28, 2026
Sort