Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Low3.5Gitea's Jupyter notebook renderer inserts the notebook's language_info.name metadata into a CSS class attribute while disabling sanitization and rendering directly in…EPSS 0.4%Oct 14, 2026
- Medium5.4Clickjacking in EVP in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page.EPSS 0.2%Oct 6, 2026
- Low2.9A security flaw has been discovered in Besen BS20 EV Charging Station up to 20260426.May 24, 2026
- High7.3An issue in ClipBucket v5 v.5.5.2 allows an attacker to execute arbitrary code via the Authentication interface, login page endpoint and HTTP response security headers componentsMay 22, 2026
- Medium6.1Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree.May 22, 2026
- Medium6.1Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree.May 22, 2026
- Medium6.1Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree.May 22, 2026
- Low2.3HCL AION is affected by a vulnerability where certain security-related HTTP response headers are not properly configured.EPSS 0.1%May 14, 2026
- Medium4.3The issue was addressed with improved UI handling.May 11, 2026
- Low3.1Inappropriate implementation in MHTML in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak…May 6, 2026
- Low3.5GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.11 before 18.11.1 that under certain conditions could have allowed an authenticated user…Apr 22, 2026
- Medium6.5ArcSearch for Android versions prior to 1.12.7 could display a different domain in the address bar than the content being shown, enabling address bar spoofing after us…Mar 20, 2026
- Low3.7HCL Nomad server on Domino did not configure the frame-ancestors directive in the Content-Security-Policy header by default which could allow an attacker to obtain sen…EPSS 0.3%Mar 11, 2026
- High8.6In writeToParcel of WindowInfo.cpp, there is a possible way to trick a user into accepting a permission due to a tapjacking/overlay attack.EPSS 0.1%Mar 2, 2026
- Medium5.3The CGM CLININET application does not implement any mechanisms that prevent clickjacking attacks, neither HTTP security headers nor HTML-based frame‑busting protection…EPSS 0.2%Mar 2, 2026
- Medium5.1Shenzhen Tenda F3 Wireless Router firmware V12.01.01.55_multi contains a clickjacking vulnerability in the web-based administrative interface.Feb 23, 2026
16 records · page 1 of 1
PreviousNext