Catalog

Vulnerability catalog

Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.

SearchRecord typeSeveritySourceStackWeaknessSort

Known exploited only

Medium6.1A reflected cross-site scripting (XSS) vulnerability was discovered in Output Messenger before 2.0.63, where unsanitized input could be injected into the web application’s responseVuln · CVE-2025-27921 · n/a · n/a · CVE.org · EUVDCheck this weekEPSS 38.00%May 5, 2025
High8.8Srimax Output Messenger Directory Traversal VulnerabilityVuln · CVE-2025-27920 · Srimax · Output Messenger · CISA KEV · CVE.org · FIRST EPSSPatch nowKEVEPSS 1.86%May 5, 2025