Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.3The SPIP tickets plugin versions prior to 4.3.3 contain an unauthenticated remote code execution vulnerability in the forum preview handling for public ticket pages.Check if you run itEPSS 1.38%Feb 25, 2026
- High8.5tfplan2md is software for converting Terraform plan JSON files into human-readable Markdown reports.Check if you run itEPSS 0.42%Feb 25, 2026
- Medium6.1Repostat is a React component to fetch and display GitHub repository info.Check if you run itEPSS 0.29%Feb 25, 2026
- Medium4.8GetSimpleCMS Community Edition (CE) versions prior to 3.3.22 (3.3.16 tested) contains a stored cross-site scripting (XSS) vulnerability in the Theme to Components func…Check if you run itEPSS 0.40%Feb 24, 2026
- Medium5.1WWBN AVideo is an open source video platform.Check if you run itEPSS 0.32%Feb 24, 2026
- Critical10.0Sandbox escape in the Graphics: WebRender component.Check if you run itEPSS 0.63%Feb 24, 2026
- Critical10.0Sandbox escape due to incorrect boundary conditions in the Graphics: WebRender component.Check if you run itEPSS 0.63%Feb 24, 2026
- High7.5Astro is a web framework.Check if you run itEPSS 0.80%Feb 24, 2026
- Medium6.9Astro is a web framework.Check if you run itEPSS 1.98%Feb 24, 2026
- Medium5.1Bludit version 3.16.2 contains a stored cross-site scripting (XSS) vulnerability in the post content functionality.Check if you run itEPSS 0.25%Feb 23, 2026
- High8.7LinkAce is a self-hosted archive to collect website links.Check if you run itEPSS 0.26%Feb 21, 2026
- Medium6.5A denial-of-service vulnerability was identified in Moodle’s TeX formula editor.Check if you run itEPSS 0.60%Feb 21, 2026
- High8.9OpenSift is an AI study tool that sifts through large datasets using semantic search and generative AI.Check if you run itEPSS 0.48%Feb 21, 2026
- Medium5.3svelte performance oriented web framework.Check if you run itEPSS 0.51%Feb 20, 2026
- Medium5.1svelte performance oriented web framework.Check if you run itEPSS 0.22%Feb 20, 2026
- Medium5.1svelte performance oriented web framework.Check if you run itEPSS 0.22%Feb 20, 2026
- Medium5.1svelte performance oriented web framework.Check if you run itEPSS 0.22%Feb 20, 2026
- Medium6.3Liquid Prompt is an adaptive prompt for Bash and Zsh.Check if you run itEPSS 0.77%Feb 20, 2026
- Critical9.3fast-xml-parser allows users to validate XML, parse XML to JS object, or build XML from JS object without C/C++ based libraries and no callback.Check if you run itEPSS 0.51%Feb 20, 2026
- Medium5.1SVXportal version 2.5 and prior contain a stored cross-site scripting vulnerability in the user profile update workflow (user_settings.php submitting to admin/update_user.php).Check if you run itEPSS 0.30%Feb 20, 2026
- Medium5.1SVXportal version 2.5 and prior contain a stored cross-site scripting vulnerability in the user registration workflow (index.php submitting to admin/user_action.php).Check if you run itEPSS 0.33%Feb 20, 2026
- Medium5.7The web management interface of the device renders the passwords in a plaintext input field.Check if you run itEPSS 0.37%Feb 20, 2026
- Medium5.4LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring tool.Check if you run itEPSS 0.32%Feb 20, 2026
- Medium5.8OpenClaw is a personal AI assistant.Check if you run itEPSS 0.26%Feb 20, 2026
- Unknownastro astro Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')Patch nowKEVEPSS 0.64%Feb 12, 2026