Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Critical9.3Trilium is an open-source hierarchical note-taking application.Aug 27, 2026
- Critical9.3Trilium is an open-source hierarchical note-taking application.Aug 27, 2026
- Medium6.1Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Johnson Controls Metasys 14 and Johnson Controls Metasys 15 allow…Aug 24, 2026
- High8.8RansomLook contains a stored cross-site scripting (XSS) vulnerability in the cryptocurrency wallet detail view.Aug 24, 2026
- Low1.3A vulnerability has been found in Piwigo 16.3.0.Aug 24, 2026
- Medium4.6Typemill is a flat-file, Markdown-based content management system designed for informational documentation websites.Aug 21, 2026
- Medium6.2Improper input validation in the dashboards-observability plugin in OpenSearch Dashboards allows a remote authenticated user with write permissions to OpenSearch Dashb…Aug 21, 2026
- High8.6Joomla Extension - j2commerce.com - Stored XSS in Guest checkout in J2Store 1.0.0-3.3.20, 4.0.0-4.0.20, 4.1.0-4.1.5 - J2Commerce 4.1.5 is vulnerable to Stored Cross-Si…Aug 21, 2026
- Medium5.3SpecifyJS is a declarative TypeScript user interface framework.Aug 21, 2026
- High7.3Combodo iTop is a web based IT service management tool.Aug 21, 2026
- Medium5.3Element Web is a Matrix web client built using the Matrix React SDK.Aug 21, 2026
- High8.2DiscordChatExporter saves Discord chat logs to a file.Aug 21, 2026
- Medium4.1DiscordChatExporter saves Discord chat logs to a file.Aug 21, 2026
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in W3 Eden WPDM – Premium Packages wpdm-premium-packages allows DOM-…Aug 18, 2026
- High7.2The Online Booking & Scheduling Calendar for WordPress by vcita plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'business_id' parameter in al…Aug 15, 2026
- High8.2OmniFaces is a utility library for Faces.Jul 24, 2026
- High8.2IBM Cognos Analytics 11.2.0, 11.2.4, 12.0, and 12.1.0 and IBM Cognos Transformer 11.2.4, 12.0, and 12.1.0 are vulnerable to cross-site scripting (XSS).May 27, 2026
- Medium5.1A Stored HTML Injection vulnerability was discovered in the Smart Polling functionality due to improper validation of an input parameter.May 19, 2026
- Medium4.8A Stored HTML Injection vulnerability was discovered in the Schedule Restore Archive functionality due to improper validation of an input parameter.May 19, 2026
- Medium4.8A Stored HTML Injection vulnerability was discovered in the Users functionality due to improper validation of an input parameter.May 19, 2026
- Medium4.8A Stored HTML Injection vulnerability was discovered in the Credentials Manager functionality due to improper validation of an input parameter.May 19, 2026
- Medium6.1Microsoft Exchange Server Cross-Site Scripting VulnerabilityKEVEPSS 0.5%May 14, 2026
- Medium5.1HTML injection vulnerability in PHP Point of Sale v19.4.Apr 21, 2026
- Medium5.1Cross-Site Scripting (XSS) vulnerability reflected in Semantic MediaWiki.Apr 21, 2026
- Medium6.1The authentication endpoint fails to encode user-supplied input before rendering it in the web page, allowing for script injection.Apr 16, 2026