Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium5.4Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacke…EPSS 0.3%Dec 10, 2025
- Medium5.4Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacke…EPSS 0.3%Dec 10, 2025
- Medium5.4Adobe Experience Manager versions 6.5.23 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low privileged attacke…EPSS 0.3%Dec 10, 2025
- Medium5.4Adobe Experience Manager versions 6.5.23 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability that could be exploited by a low privileged a…EPSS 0.3%Dec 10, 2025
- Medium5.4Adobe Experience Manager versions 6.5.23 and earlier are affected by a DOM-based Cross-Site Scripting (XSS) vulnerability that could be exploited by a low privileged a…EPSS 0.3%Dec 10, 2025
- Medium5.4Jenkins Coverage Plugin 2.3054.ve1ff7b_a_a_123b_ and earlier does not validate the configured coverage results ID when creating coverage results, only when submitting…EPSS 0.3%Dec 10, 2025
- Low3.5Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in TAC Information Services Internal and External Trade Inc.EPSS 0.2%Dec 10, 2025
- Medium5.4WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users.EPSS 0.2%Dec 9, 2025
- Medium6.1ZITADEL is an open-source identity infrastructure tool.EPSS 0.3%Dec 9, 2025
- Critical9.0Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing o…EPSS 1.0%Dec 9, 2025
- Medium5.3MailEnable versions prior to 10.54 contain a reflected cross-site scripting (XSS) vulnerability in the Failed parameter of /Mondo/lang/sys/Forms/MAI/AddRecipientsResult.aspx.EPSS 0.5%Dec 9, 2025
- Medium5.3MailEnable versions prior to 10.54 contain a reflected cross-site scripting (XSS) vulnerability in the Added parameter of /Mondo/lang/sys/Forms/MAI/AddRecipientsResult.aspx.EPSS 0.5%Dec 9, 2025
- Medium5.3MailEnable versions prior to 10.54 contain a reflected cross-site scripting (XSS) vulnerability in the theme parameter of /Mondo/lang/sys/Forms/Statistics.aspx.EPSS 0.5%Dec 9, 2025
- Medium5.3MailEnable versions prior to 10.54 contain a reflected cross-site scripting (XSS) vulnerability in the InstanceScope parameter of /Mondo/lang/sys/Forms/CAL/compose.aspx.EPSS 0.4%Dec 9, 2025
- Medium5.3MailEnable versions prior to 10.54 contain a reflected cross-site scripting (XSS) vulnerability in the FieldTo parameter of /Mondo/lang/sys/Forms/AddressBook.aspx.EPSS 0.4%Dec 9, 2025
- Medium5.3MailEnable versions prior to 10.54 contain a reflected cross-site scripting (XSS) vulnerability in the FieldBcc parameter of /Mondo/lang/sys/Forms/AddressBook.aspx.EPSS 0.4%Dec 9, 2025
- Medium5.3MailEnable versions prior to 10.54 contain a reflected cross-site scripting (XSS) vulnerability in the AddressesTo parameter of /Mondo/lang/sys/Forms/AddressBook.aspx.EPSS 0.4%Dec 9, 2025
- Medium5.3MailEnable versions prior to 10.54 contain a reflected cross-site scripting (XSS) vulnerability in the Message parameter of /Mobile/Compose.aspx.EPSS 0.4%Dec 9, 2025
- Medium4.8Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Portabilis i-Educar allows Stored Cross-Site Scripting (XSS) via…EPSS 0.2%Dec 9, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Wappointment team Wappointment wappointment allows Stored XSS.Thi…EPSS 0.2%Dec 9, 2025
- Low2.0Versions of the package @tiptap/extension-link before 2.10.4 are vulnerable to Cross-site Scripting (XSS) due to unsanitized user input allowed in setting or toggling links.EPSS 0.4%Dec 9, 2025
- Medium6.1Barix Instreamer v04.06 and earlier is vulnerable to Cross Site Scripting (XSS) in the Web UI I/O & Serial configuration page, specifically the CTS close command user-…EPSS 0.2%Dec 8, 2025
- High8.3In affected versions, vulnerability-lookup handled user-controlled content in comments and bundles in an unsafe way, which could lead to stored Cross-Site Scripting (XSS).EPSS 0.3%Dec 8, 2025
- Low1.9A vulnerability was found in code-projects Chamber of Commerce Membership Management System 1.0.EPSS 0.2%Dec 8, 2025
- Low1.9A vulnerability was found in alokjaiswal Hotel-Management-services-using-MYSQL-and-php up to 5f8b60a7aa6c06a5632de569d4e3f6a8cd82f76f.EPSS 0.3%Dec 7, 2025