Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- High7.5Integer overflow in Skia in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a…EPSS 0.2%May 28, 2026
- High8.3Use after free in PerformanceManager in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform…EPSS 0.2%May 28, 2026
- High8.3Use after free in Passwords in Google Chrome on Windows prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perfo…EPSS 0.2%May 28, 2026
- Medium5.4Improper Neutralization of Input During Web Page Generation (CWE-79) in Kibana can lead to stored HTML injection.EPSS 0.1%May 28, 2026
- Critical9.6MeshCore Card provides MeshCore Lovelace card for Home Assistant.EPSS 0.5%May 28, 2026
- Medium6.0In Calico, the install-cni init container logs the rendered CNI configuration to standard output.EPSS 0.5%May 28, 2026
- Medium5.4TinyMCE is an open source rich text editor.EPSS 0.3%May 28, 2026
- High8.2Python Liquid is a Python engine for the Liquid template language.EPSS 0.5%May 28, 2026
- Medium4.3The Visualizer: Tables and Charts Manager for WordPress plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 3.11.14.May 28, 2026
- Medium6.5The Photo Gallery by 10Web – Mobile-Friendly Image Gallery plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'order_by' parameter in all ver…EPSS 0.6%May 28, 2026
- Medium6.3A stored cross-site scripting (XSS) vulnerability exists in the notification panel of CTI Transmute in versions prior to the patched release.May 28, 2026
- High7.2The SlimStat Analytics plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'User-Agent' header in all versions up to, and including, 5.4.11 due t…EPSS 0.5%May 28, 2026
- High7.2The HT Contact Form – Drag & Drop Form Builder for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'file_upload' parameter in all v…EPSS 0.5%May 28, 2026
- Critical9.8Velocity.js is a JavaScript implementation of the Apache Velocity template engine.EPSS 0.6%May 26, 2026
- Medium5.9Uncontrolled Resource Consumption vulnerability in oban-bg oban_web ('Elixir.Oban.Web.CronExpr' modules) allows memory exhaustion via unbounded cron range expansion.EPSS 0.5%May 26, 2026
- Medium6.1Mistune is a Python Markdown parser with renderers and plugins.EPSS 0.3%May 26, 2026
- Medium6.1Mistune is a Python Markdown parser with renderers and plugins.EPSS 0.3%May 26, 2026
- Medium6.1Mistune is a Python Markdown parser with renderers and plugins.EPSS 0.3%May 26, 2026
- Medium5.3Mistune is a Python Markdown parser with renderers and plugins.EPSS 0.3%May 26, 2026
- Medium6.5view_component is a framework for building reusable, testable, and encapsulated view components in Ruby on Rails.EPSS 0.4%May 26, 2026
- Medium6.1Mistune is a Python Markdown parser with renderers and plugins.EPSS 0.3%May 26, 2026
- Critical9.3Lumiverse is a full-featured AI chat application.EPSS 0.4%May 26, 2026
- High7.5Banks generates meaningful LLM prompts using a template language that makes sense.EPSS 0.7%May 26, 2026
- High8.7FACTION is a PenTesting Report Generation and Collaboration Framework.EPSS 0.4%May 26, 2026
- High8.7FACTION is a PenTesting Report Generation and Collaboration Framework.EPSS 0.4%May 26, 2026