Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High7.3Combodo iTop is a web based IT service management tool.EPSS 0.4%Aug 21, 2026
- Medium4.1Unleash is an open-source feature management platform.EPSS 0.3%Aug 21, 2026
- Medium5.3Element Web is a Matrix web client built using the Matrix React SDK.EPSS 0.5%Aug 21, 2026
- High8.2DiscordChatExporter saves Discord chat logs to a file.EPSS 0.2%Aug 21, 2026
- Medium4.6OctoPrint provides a web interface for controlling consumer 3D printers.EPSS 0.2%Aug 21, 2026
- Medium5.9Infracost provides cloud cost intelligence for engineers, AI coding agents, and CI/CD.EPSS 0.5%Aug 21, 2026
- Medium5.3Authorization Bypass Through User-Controlled Key in the transaction save endpoint in Roskus Prospero Flow CRM 4.9.1 through 5.14.0 allows a user with transaction and a…Aug 21, 2026
- Unknownpodsfoundation pods Incorrect AuthorizationKEVAug 15, 2026
- UnknownUntrusted labels can inject SVG attributes, CSS values, and terminal escape sequencesAug 7, 2026
- Unknownwebreinvent vaahcms Embedded Malicious CodeKEVJul 29, 2026
- Critical9.3vBulletin vBulletin Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')KEVEPSS 5.6%Jul 27, 2026
- High8.2OmniFaces is a utility library for Faces.EPSS 0.3%Jul 24, 2026
- Unknownfossbilling fossbilling Improper Neutralization of Special Elements Used in a Template EngineKEVJun 25, 2026
- UnknownJupyterLab: Stored XSS in extension manager through package metadata unsanitized URI protocolEPSS 0.3%Jun 19, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths Vulnerabilities leading t…EPSS 0.2%Jun 8, 2026
- Unknownbrainstormforce spectra Improper Privilege ManagementKEVJun 2, 2026
- UnknownMissing Authentication for Critical FunctionKEVMay 29, 2026
- Medium5.4Improper Neutralization of Input During Web Page Generation (CWE-79) in Kibana can lead to stored HTML injection.EPSS 0.1%May 28, 2026
- Critical9.6MeshCore Card provides MeshCore Lovelace card for Home Assistant.May 28, 2026
- Medium6.0In Calico, the install-cni init container logs the rendered CNI configuration to standard output.May 28, 2026
- Medium5.4TinyMCE is an open source rich text editor.EPSS 0.3%May 28, 2026
- High8.2Python Liquid is a Python engine for the Liquid template language.May 28, 2026
- Medium4.3The Visualizer: Tables and Charts Manager for WordPress plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 3.11.14.May 28, 2026
- Medium6.5The Photo Gallery by 10Web – Mobile-Friendly Image Gallery plugin for WordPress is vulnerable to time-based blind SQL Injection via the 'order_by' parameter in all ver…May 28, 2026
- Medium6.3A stored cross-site scripting (XSS) vulnerability exists in the notification panel of CTI Transmute in versions prior to the patched release.May 28, 2026