Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium5.1BottleCRM 0.30 through 1.14.5 contains an HTML injection vulnerability in render_invoice_template() that allows authenticated organization members to inject markup int…Oct 14, 2026
- Medium6.1The unstructured library provides open-source components for ingesting and pre-processing images and text documents, such as PDFs, HTML, Word docs, and many more.EPSS 0.2%Oct 13, 2026
- Critical9.3Contao: Cross-site scripting in the comments bundleEPSS 0.3%Oct 9, 2026
- High7.2MariaDB server is a community developed fork of MySQL server.EPSS 0.4%Oct 9, 2026
- Medium4.1Unleash is an open-source feature management platform.EPSS 0.3%Aug 21, 2026
- Medium6.5Improper encoding or escaping of output in .NET allows an authorized attacker to perform spoofing over a network.EPSS 0.7%Jul 14, 2026
- High7.8Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output VulnerabilityKEVEPSS 25.3%Jun 4, 2026
- Low3.5GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.6 before 18.4.6, 18.5 before 18.5.4, and 18.6 before 18.6.2 that could have allowed an au…EPSS 0.3%Dec 11, 2025
- High7.7GitLab has remediated a security issue in GitLab CE/EE affecting all versions from 17.1 before 18.4.6, 18.5 before 18.5.4, and 18.6 before 18.6.2 that could have allow…EPSS 0.5%Dec 11, 2025
- Critical9.1Apache HTTP Server Improper Escaping of Output VulnerabilityKEVEPSS 100.0%Jul 1, 2024
- Critical9.8Fortra Cobalt Strike User Interface Remote Code Execution VulnerabilityKEVEPSS 2.7%Mar 24, 2023
- Critical9.8xmltok_impl.c in Expat (aka libexpat) before 2.4.5 lacks certain validation of encoding, such as checks for whether a UTF-8 character is valid in a certain context.EPSS 5.0%Feb 16, 2022
- Medium6.1Synacor Zimbra Collaborate Suite (ZCS) Cross-Site Scripting VulnerabilityKEVEPSS 30.9%Feb 8, 2022
- Medium6.8An issue was discovered in OpenSSH 7.9.EPSS 3.8%Jan 31, 2019
14 records · page 1 of 1
PreviousNext