Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High8.3Use after free in Dawn in Google Chrome prior to 147.0.7727.101 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox esc…Check if you run itEPSS 0.30%Apr 15, 2026
- High8.3Use after free in Viz in Google Chrome prior to 147.0.7727.101 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox esca…Check if you run itEPSS 0.30%Apr 15, 2026
- High8.3Use after free in Graphite in Google Chrome prior to 147.0.7727.101 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox…Check if you run itEPSS 0.30%Apr 15, 2026
- High8.8Use after free in Prerender in Google Chrome prior to 147.0.7727.101 allowed a remote attacker to execute arbitrary code via a crafted HTML page.Check if you run itEPSS 0.41%Apr 15, 2026
- High8.7ApostropheCMS is an open-source Node.js content management system.Check if you run itEPSS 0.44%Apr 15, 2026
- Medium5.4ApostropheCMS is an open-source Node.js content management system.Check if you run itEPSS 0.26%Apr 15, 2026
- High7.2The Accessibly plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the REST API in all versions up to, and including, 3.0.3.Check if you run itEPSS 0.54%Apr 15, 2026
- Medium4.3The Inquiry Form to Posts or Pages plugin for WordPress is vulnerable to Cross-Site Request Forgery leading to Stored Cross-Site Scripting in version 1.0.Check if you run itEPSS 0.23%Apr 15, 2026
- Medium5.1Versions of the package github.com/yuin/goldmark/renderer/html before 1.7.17 are vulnerable to Cross-site Scripting (XSS) due to improper ordering of URL validation an…Check if you run itEPSS 0.34%Apr 15, 2026
- Medium5.1immich is a high performance self-hosted photo and video management solution.Check if you run itEPSS 0.24%Apr 15, 2026
- Critical9.9OpenRemote is an open-source IoT platform.Check if you run itEPSS 0.91%Apr 15, 2026
- Critical9.3Jellyfin is an open source self hosted media server.Check if you run itEPSS 0.52%Apr 14, 2026
- Low3.5OAuth2 Proxy is a reverse proxy that provides authentication using OAuth2 providers.Check if you run itEPSS 0.22%Apr 14, 2026
- Medium6.5Chamilo LMS is an open-source learning management system.Check if you run itEPSS 0.39%Apr 14, 2026
- Medium5.1October is a Content Management System (CMS) and web platform.Check if you run itEPSS 0.20%Apr 14, 2026
- Medium5.1October is a Content Management System (CMS) and web platform.Check if you run itEPSS 0.25%Apr 14, 2026
- Medium6.1Leaflet versions up to and including 1.9.4 are vulnerable to Cross-Site Scripting (XSS) via the bindPopup() method.Check if you run itEPSS 0.19%Apr 14, 2026
- High7.2The Form Maker by 10Web plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Matrix field (Text Box input type) in form submissions in all version…Check if you run itEPSS 0.40%Apr 14, 2026
- Medium5.1MaxKB is an open-source AI assistant for enterprise.Check if you run itEPSS 0.25%Apr 14, 2026
- Medium5.1MaxKB is an open-source AI assistant for enterprise.Check if you run itEPSS 0.28%Apr 14, 2026
- Medium6.9MaxKB is an open-source AI assistant for enterprise.Check if you run itEPSS 0.29%Apr 14, 2026
- Medium6.1A HTML Injection vulnerability exists in the Dashboard module of Vtiger CRM 8.4.0.Check if you run itEPSS 0.26%Apr 13, 2026
- Medium5.4EspoCRM is an open source customer relationship management application.Check if you run itEPSS 0.25%Apr 13, 2026
- Medium5.4Stored Cross-Site Scripting (XSS) via Unsanitized Topology Metadata in Apache Storm UI Versions Affected: before 2.8.6 Description: The Storm UI visualization componen…Check if you run itEPSS 0.59%Apr 13, 2026
- Medium5.1MDwiki contains a cross-site scripting vulnerability that allows remote attackers to execute arbitrary JavaScript by injecting malicious code through the location hash parameter.Check if you run itEPSS 0.27%Apr 12, 2026