Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8SGLang's reranking endpoint (/v1/rerank) achieves Remote Code Execution (RCE) when a model file containing a malcious tokenizer.chat_template is loaded, as the Jinja2…Check if you run itEPSS 1.14%Apr 20, 2026
- Low2.0A flaw has been found in langflow-ai langflow up to 1.8.3.Check if you run itEPSS 0.33%Apr 20, 2026
- Medium5.4The Categories Images plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 3.3.1, via the 'z_taxonomy_image' shortcode.Check if you run itEPSS 0.25%Apr 18, 2026
- Medium6.4The Page Builder Gutenberg Blocks – CoBlocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via external iCal feed data in all versions up to, and i…Check if you run itEPSS 0.43%Apr 18, 2026
- Medium4.8ChurchCRM is an open-source church management system.Check if you run itEPSS 0.24%Apr 18, 2026
- Medium5.4ChurchCRM is an open-source church management system.Check if you run itEPSS 0.29%Apr 18, 2026
- Medium5.4Kimai is an open-source time tracking application.Check if you run itEPSS 0.25%Apr 17, 2026
- Medium5.1wger is a free, open-source workout and fitness manager.Check if you run itEPSS 0.25%Apr 17, 2026
- Medium6.1zrok is software for sharing web services, files, and network resources.Check if you run itEPSS 0.26%Apr 17, 2026
- Medium4.7DOMSanitizer is a DOM/SVG/MathML Sanitizer for PHP 7.3+.Check if you run itEPSS 0.44%Apr 17, 2026
- Medium6.1Stirling-PDF is a locally hosted web application that facilitates various operations on PDF files.Check if you run itEPSS 0.24%Apr 17, 2026
- Medium5.4Giskard is an open-source testing framework for AI models.Check if you run itEPSS 0.21%Apr 17, 2026
- Medium5.3SiYuan is an open-source personal knowledge management system.Check if you run itEPSS 0.38%Apr 17, 2026
- High8.7Note Mark is an open-source note-taking application.Check if you run itEPSS 0.42%Apr 17, 2026
- High7.2The WP Statistics plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'utm_source' parameter in all versions up to, and including, 14.16.4.Patch nowKEVEPSS 0.42%Apr 17, 2026
- Critical9.0SiYuan is an open-source personal knowledge management system.Check if you run itEPSS 0.53%Apr 16, 2026
- High8.1SiYuan is an open-source personal knowledge management system.Check if you run itEPSS 0.54%Apr 16, 2026
- High8.7DataEase is an open-source data visualization and analytics platform.Check if you run itEPSS 0.49%Apr 16, 2026
- Medium5.3The Silverstripe Assets Module is a required component of Silverstripe Framework.Check if you run itEPSS 0.40%Apr 16, 2026
- Medium6.1The authentication endpoint fails to encode user-supplied input before rendering it in the web page, allowing for script injection.Check if you run itEPSS 0.23%Apr 16, 2026
- Medium5.3Prometheus is an open-source monitoring system and time series database.Check if you run itEPSS 0.26%Apr 15, 2026
- High8.8Use after free in Video in Google Chrome on Windows prior to 147.0.7727.101 allowed a remote attacker who had compromised the renderer process to perform out of bounds…Check if you run itEPSS 0.32%Apr 15, 2026
- Low3.1Insufficient policy enforcement in CORS in Google Chrome prior to 147.0.7727.101 allowed a remote attacker who had compromised the renderer process to leak cross-origi…Check if you run itEPSS 0.22%Apr 15, 2026
- Low3.1Insufficient policy enforcement in Passwords in Google Chrome prior to 147.0.7727.101 allowed a remote attacker who had compromised the renderer process to leak cross-…Check if you run itEPSS 0.22%Apr 15, 2026
- High8.3Uninitialized Use in Accessibility in Google Chrome on Windows prior to 147.0.7727.101 allowed a remote attacker who had compromised the renderer process to potentiall…Check if you run itEPSS 0.33%Apr 15, 2026