Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.3DumbAssets through 1.0.11 contains a stored cross-site scripting vulnerability in asset fields including name, description, modelNumber, serialNumber, and tags that ar…EPSS 0.3%May 18, 2026
- High7.3Offline Hospital Management System 5.3.0 allows remote code execution due to an improper Electron renderer configuration.EPSS 0.5%May 18, 2026
- Low3.5Mattermost Desktop App versions <=6.1 6.0.1 5.4.13.0 fail to prevent server-rendered content from closing an underlying application view in the Mattermost Desktop App…EPSS 0.3%May 18, 2026
- Low2.0Versions of the package jsondiffpatch before 0.7.6 are vulnerable to Cross-site Scripting (XSS) via the annotated formatter due to improper sanitization of JSON values…EPSS 0.3%May 16, 2026
- High8.1Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline.EPSS 0.4%May 15, 2026
- Medium5.1Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline.EPSS 0.2%May 15, 2026
- Medium5.4Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline.EPSS 0.2%May 15, 2026
- High7.7Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline.EPSS 0.3%May 15, 2026
- Medium4.8Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline.EPSS 0.3%May 15, 2026
- Medium5.1phpMyFAQ before 4.1.2 contains a stored cross-site scripting vulnerability in FAQ creation and update endpoints that bypass sanitization through encode-decode cycles.EPSS 0.3%May 15, 2026
- High8.2phpMyFAQ before 4.1.2 contains a stored cross-site scripting vulnerability in search.twig where result.question and result.answerPreview are rendered with the raw filt…EPSS 0.3%May 15, 2026
- Medium5.3Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores.EPSS 0.4%May 15, 2026
- Medium6.1Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores.EPSS 0.3%May 15, 2026
- High7.1Tabby (formerly Terminus) is a highly configurable terminal emulator.EPSS 0.2%May 15, 2026
- Medium6.9Traefik is an HTTP reverse proxy and load balancer.EPSS 0.5%May 15, 2026
- Medium5.1Cockpit CMS through version 2.14.0, patched in commit 72a83fc, contains a stored cross-site scripting vulnerability in the Set field type's Display template option, wh…EPSS 0.1%May 15, 2026
- High7.5Inappropriate implementation in Media in Google Chrome on iOS prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to perform an…EPSS 0.3%May 14, 2026
- Medium4.2Inappropriate implementation in Views in Google Chrome on iOS prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to perform UI…EPSS 0.2%May 14, 2026
- Medium5.3Insufficient policy enforcement in WebXR in Google Chrome on Android prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to obta…EPSS 0.3%May 14, 2026
- Low3.1Insufficient validation of untrusted input in Skia in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to perfo…EPSS 0.1%May 14, 2026
- Low3.1Out of bounds read in GPU in Google Chrome on Linux prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to leak cross-origin dat…EPSS 0.2%May 14, 2026
- High8.3Use after free in UI in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escap…EPSS 0.3%May 14, 2026
- High8.3Use after free in Core in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to potentially perform a…EPSS 0.3%May 14, 2026
- Low3.1Insufficient policy enforcement in Network in Google Chrome on Android prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to le…EPSS 0.2%May 14, 2026
- High8.3Insufficient policy enforcement in GPU in Google Chrome on Android prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to potent…EPSS 0.3%May 14, 2026