Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Critical9.3Trilium is an open-source hierarchical note-taking application.Aug 27, 2026
- Critical9.3Trilium is an open-source hierarchical note-taking application.Aug 27, 2026
- Medium6.1Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Johnson Controls Metasys 14 and Johnson Controls Metasys 15 allow…Aug 24, 2026
- High8.8RansomLook contains a stored cross-site scripting (XSS) vulnerability in the cryptocurrency wallet detail view.Aug 24, 2026
- Low1.3A vulnerability has been found in Piwigo 16.3.0.Aug 24, 2026
- High8.2OmniFaces is a utility library for Faces.Jul 24, 2026
- High8.2IBM Cognos Analytics 11.2.0, 11.2.4, 12.0, and 12.1.0 and IBM Cognos Transformer 11.2.4, 12.0, and 12.1.0 are vulnerable to cross-site scripting (XSS).May 27, 2026
- Medium5.1A Stored HTML Injection vulnerability was discovered in the Smart Polling functionality due to improper validation of an input parameter.May 19, 2026
- Medium4.8A Stored HTML Injection vulnerability was discovered in the Schedule Restore Archive functionality due to improper validation of an input parameter.May 19, 2026
- Medium4.8A Stored HTML Injection vulnerability was discovered in the Users functionality due to improper validation of an input parameter.May 19, 2026
- Medium4.8A Stored HTML Injection vulnerability was discovered in the Credentials Manager functionality due to improper validation of an input parameter.May 19, 2026
- Medium6.1Microsoft Exchange Server Cross-Site Scripting VulnerabilityKEVEPSS 0.5%May 14, 2026
- Medium5.1HTML injection vulnerability in PHP Point of Sale v19.4.Apr 21, 2026
- Medium5.1Cross-Site Scripting (XSS) vulnerability reflected in Semantic MediaWiki.Apr 21, 2026
- Medium6.1The authentication endpoint fails to encode user-supplied input before rendering it in the web page, allowing for script injection.Apr 16, 2026
- High7.1A Stored Cross-Site Scripting vulnerability was discovered in the Assets and Nodes functionality due to improper validation of an input parameter.Apr 15, 2026
- Medium5.4An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability [CWE-79] vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0…Apr 14, 2026
- Medium6.1Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting VulnerabilityKEVEPSS 20.2%Jan 5, 2026
- Low2.2A cross-site scripting (XSS) vulnerability has been reported to affect QuMagie.Jan 2, 2026
- Medium6.1RoundCube Webmail Cross-site Scripting VulnerabilityKEVEPSS 26.8%Dec 17, 2025
- Medium5.4grav before v1.7.49.5 has a Stored Cross-Site Scripting (Stored XSS) vulnerability in the page editing functionality.Dec 15, 2025
- High8.1An issue was discovered in Wekan The Open Source kanban board system up to version 18.15, fixed in 18.16.Dec 15, 2025
- Critical9.0In MISP before 2.5.28, app/View/Elements/Workflows/executionPath.ctp allows XSS in the workflow execution path.Dec 15, 2025
- Low2.0A security vulnerability has been detected in Qualitor up to 8.24.73.Dec 12, 2025
- Medium4.6jshERP v3.5 and earlier is affected by a stored Cross Site Scripting (XSS) vulnerability via the /msg/add endpoint.Dec 12, 2025