Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.4Notesnook is a note-taking app focused on user privacy & ease of use.Check if you run itEPSS 0.25%Mar 11, 2026
- Medium6.3Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js.Check if you run itEPSS 0.34%Mar 11, 2026
- Medium6.9Craft is a content management system (CMS).Check if you run itEPSS 0.26%Mar 11, 2026
- High8.1Craft is a content management system (CMS).Check if you run itEPSS 0.92%Mar 11, 2026
- Medium6.5OpenProject is an open-source, web-based project management software.Check if you run itEPSS 0.59%Mar 11, 2026
- Medium6.4The Gravity Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 2.9.28.1.Check if you run itEPSS 0.27%Mar 11, 2026
- Medium6.4The Happy Addons for Elementor plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 3.21.0 via the AJAX action.Check if you run itEPSS 0.33%Mar 11, 2026
- Medium6.4The weForms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the REST API entry submission endpoint in all versions up to, and including, 1.6.27.Check if you run itEPSS 0.39%Mar 11, 2026
- Medium6.4The WP ULike plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the shortcode attribute in all versions up to, and including, 5.0.1.Check if you run itEPSS 0.21%Mar 11, 2026
- Medium4.3GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.6 before 18.7.6, 18.8 before 18.8.6, and 18.9 before 18.9.2 that could have allowed an au…Check if you run itEPSS 0.25%Mar 11, 2026
- Medium4.8Sylius is an Open Source eCommerce Framework on Symfony.Check if you run itEPSS 0.25%Mar 10, 2026
- Medium5.3Sylius is an Open Source eCommerce Framework on Symfony.Check if you run itEPSS 0.30%Mar 10, 2026
- High8.7liquidjs is a Shopify / GitHub Pages compatible template engine in pure JavaScript.Check if you run itEPSS 0.56%Mar 10, 2026
- High7.4An improper neutralization of input vulnerability was identified in GitHub Enterprise Server that allowed DOM-based cross-site scripting via task list content.Check if you run itEPSS 0.18%Mar 10, 2026
- Medium4.8Craft Commerce is an ecommerce platform for Craft CMS.Check if you run itEPSS 0.26%Mar 10, 2026
- High8.6Craft Commerce is an ecommerce platform for Craft CMS.Check if you run itEPSS 0.26%Mar 10, 2026
- Low1.9Craft Commerce is an ecommerce platform for Craft CMS.Check if you run itEPSS 0.39%Mar 10, 2026
- Medium6.1A Stored Cross-Site Scripting (XSS) vulnerability exists in the PluXml article comments feature for PluXml versions 5.8.22 and earlier.Check if you run itEPSS 0.23%Mar 10, 2026
- Low2.0RenderBlocking is a MediaWiki extension that allows interface administrators to specify render-blocking CSS and JavaScript.Check if you run itEPSS 0.51%Mar 10, 2026
- High7.1StudioCMS is a server-side-rendered, Astro native, headless content management system.Check if you run itEPSS 0.46%Mar 10, 2026
- High8.8StudioCMS is a server-side-rendered, Astro native, headless content management system.Check if you run itEPSS 0.56%Mar 10, 2026
- Medium5.4FileBrowser Quantum is a free, self-hosted, web-based file manager.Check if you run itEPSS 0.38%Mar 10, 2026
- Critical9.0Appsmith is a platform to build admin panels, internal tools, and dashboards.Check if you run itEPSS 0.46%Mar 10, 2026
- High7.7Due to an uncontrolled resource consumption (Denial of Service) vulnerability, an authenticated attacker with regular user privileges and network access can repeatedly…Check if you run itEPSS 0.55%Mar 10, 2026
- Medium5.1league/commonmark is a PHP Markdown parser.Check if you run itEPSS 0.25%Mar 7, 2026