Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5The Breaking News WP plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.3.Check if you run itEPSS 0.85%Apr 22, 2026
- Medium4.3The Table Manager plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.0.0 via the 'table_manager' shortcode.Check if you run itEPSS 0.41%Apr 22, 2026
- Medium4.3The Call To Action Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.1.3.Check if you run itEPSS 0.23%Apr 22, 2026
- Medium6.4The Quran Live Multilanguage plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'cheikh' and 'lang' shortcode attributes in all versions up to,…Check if you run itEPSS 0.43%Apr 22, 2026
- Medium4.4The Short Comment Filter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Minimum Count' settings field in all versions up to and including 2.2.Check if you run itEPSS 0.39%Apr 22, 2026
- High7.5Vulnerability in Spring Spring Security.Check if you run itEPSS 0.25%Apr 22, 2026
- Medium4.3GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.11 before 18.11.1 that could have allowed an authenticated user to access titles of confi…Check if you run itEPSS 0.39%Apr 22, 2026
- High8.9A server-side request forgery (SSRF) vulnerability was identified in GitHub Enterprise Server that allowed an attacker to extract sensitive environment variables from…Check if you run itEPSS 0.65%Apr 21, 2026
- Medium5.4WWBN AVideo is an open source video platform.Check if you run itEPSS 0.25%Apr 21, 2026
- High7.5The package is a Go library for parsing Markdown text and rendering as HTML.Check if you run itEPSS 0.52%Apr 21, 2026
- Low2.1mailcow: dockerized is an open source groupware/email suite based on docker.Check if you run itEPSS 0.98%Apr 21, 2026
- High7.0mailcow: dockerized is an open source groupware/email suite based on docker.Check if you run itEPSS 0.29%Apr 21, 2026
- Critical9.3mailcow: dockerized is an open source groupware/email suite based on docker.Check if you run itEPSS 0.44%Apr 21, 2026
- High7.2mailcow: dockerized is an open source groupware/email suite based on docker.Check if you run itEPSS 0.45%Apr 21, 2026
- Medium5.6The Home Assistant Command-line interface (hass-cli) is a command-line tool for Home Assistant.Check if you run itEPSS 0.14%Apr 21, 2026
- High8.5FreeScout is a free self-hosted help desk and shared mailbox.Check if you run itEPSS 0.41%Apr 21, 2026
- Medium5.8FreeScout is a free self-hosted help desk and shared mailbox.Check if you run itEPSS 0.42%Apr 21, 2026
- Low3.1October is a Content Management System (CMS) and web platform.Check if you run itEPSS 0.23%Apr 21, 2026
- Medium5.1HTML injection vulnerability in PHP Point of Sale v19.4.Check if you run itEPSS 0.16%Apr 21, 2026
- High8.8Privilege escalation in the Graphics: WebRender component.Check if you run itEPSS 0.59%Apr 21, 2026
- Medium5.1Reflected Cross-Site Scripting (XSS) vulnerability in Navigate Content Management System.Check if you run itEPSS 0.53%Apr 21, 2026
- High8.1FreeScout is a free self-hosted help desk and shared mailbox.Check if you run itEPSS 0.43%Apr 21, 2026
- Medium6.5The nbconvert tool, jupyter nbconvert, converts Jupyter notebooks to various other formats via Jinja templates.Check if you run itEPSS 0.46%Apr 21, 2026
- Medium5.1GFI HelpDesk before 4.99.9 contains a stored cross-site scripting vulnerability in the Troubleshooter module where the subject POST parameter is not sanitized in Contr…Check if you run itEPSS 0.14%Apr 20, 2026
- Medium4.8GFI HelpDesk before 4.99.9 contains a stored cross-site scripting vulnerability in the language management functionality where the charset POST parameter is passed dir…Check if you run itEPSS 0.15%Apr 20, 2026