Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Low3.1ckan-mcp-server: DataStore Table UI resource does not validate postMessage origin (in) and posts to targetOrigin "*" (out)Oct 16, 2026
- Medium5.4Scoold is a Q&A and a knowledge sharing platform for teams.Oct 15, 2026
- Low3.5Helium is a free online student planner for classes, homework, grades, and notes.Oct 15, 2026
- Medium5.1"Handmade Marketplace App - Creema" provided by CREEMA LTD.EPSS 0.2%Oct 15, 2026
- Medium5.4"ゲオアプリ" provided by GEO CORPORATION is vulnerable to improper authorization in handler for a custom URL scheme.EPSS 0.2%Oct 15, 2026
- Medium5.3Gogs is an open source self-hosted Git service.EPSS 0.3%Oct 14, 2026
- Medium5.4The Responsive Blocks WordPress plugin before 2.3.0 does not sanitise or escape some of the values submitted with its Form block before adding them to the HTML notific…EPSS 0.2%Oct 14, 2026
- Medium5.1Open WebUI from 0.6.31 before 0.11.4 contains a stored cross-site scripting vulnerability in its Markdown renderer, which treats user-authored tool-call details blocks…EPSS 0.2%Oct 12, 2026
- Medium6.1A flaw was found in oauth-proxy.EPSS 0.2%Oct 1, 2026
- High8.1Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Cross-Site Request Forgery (CSRF) vulnerability.Sep 29, 2026
- Medium6.8Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain a Reliance on Data/Memory Layout vulnerability.EPSS 0.4%Sep 3, 2026
- Medium5.1Joomla Extension - j2commerce.com - Open redirect in cart controller in J2Store 1.0.0-3.3.20, 4.0.0-4.0.20, 4.1.0-4.1.5 - Four task handlers accepted a base64-encoded…EPSS 0.5%Aug 21, 2026
- Medium5.3Element Web is a Matrix web client built using the Matrix React SDK.EPSS 0.5%Aug 21, 2026
- Medium4.3Jenkins Bitbucket OAuth Plugin 0.17 and earlier does not restrict the redirect URL after login, allowing attackers to perform phishing attacks.EPSS 0.3%May 27, 2026
- High8.1e107 is a content management system (CMS).May 26, 2026
- High8.7NukeViet CMS is a multi Content Management System.May 22, 2026
- Medium6.1Devise is an authentication solution for Rails based on Warden.May 22, 2026
- High8.2Dell PowerFlex Manager, versions 4.6.2 and prior, contains an Open Redirect Vulnerability.EPSS 0.2%May 22, 2026
- High8.6Trilium Notes is a cross-platform, hierarchical note taking application focused on building large personal knowledge bases.May 20, 2026
- Medium5.1A Stored HTML Injection vulnerability was discovered in the Smart Polling functionality due to improper validation of an input parameter.EPSS 0.2%May 19, 2026
- Medium4.8A Stored HTML Injection vulnerability was discovered in the Schedule Restore Archive functionality due to improper validation of an input parameter.EPSS 0.2%May 19, 2026
- Medium4.8A Stored HTML Injection vulnerability was discovered in the Users functionality due to improper validation of an input parameter.EPSS 0.2%May 19, 2026
- Medium4.8A Stored HTML Injection vulnerability was discovered in the Credentials Manager functionality due to improper validation of an input parameter.EPSS 0.2%May 19, 2026
- Medium5.1WordPress Plugin Buddypress 6.2.0 contains a persistent cross-site scripting vulnerability that allows authenticated attackers with moderator privileges to inject mali…EPSS 0.3%May 16, 2026
- Medium6.1CubeCart is an ecommerce software solution.May 13, 2026
89 records · page 1 of 4
PreviousNext