Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium4.3PbootCMS v.3.2.11 contains a code injection vulnerability in its site configuration functionalityMay 26, 2026
- Medium5.4Snipe-IT is an IT asset/license management system.May 26, 2026
- Medium5.2SailingLab AppLock (aka com.alpha.applock) 4.3.8 for Android allows a local attacker to trigger arbitrary JavaScript execution via BrowserMainActivity, which accepts V…EPSS 0.2%May 26, 2026
- Low2.1A vulnerability was identified in teableio teable up to 1.9.x.May 26, 2026
- High8.7FACTION is a PenTesting Report Generation and Collaboration Framework.May 26, 2026
- High8.7FACTION is a PenTesting Report Generation and Collaboration Framework.May 26, 2026
- Low1.9A vulnerability was found in SourceCodester/oretnom23 Hospitals Patient Records Management System 1.0.May 26, 2026
- Medium6.9Lack of input filtering leads to an XSS vector in the HTML filter code.May 26, 2026
- Medium6.9Inadequate content filtering within the checkAttribute methods leads to XSS vulnerabilities in various components.May 26, 2026
- High8.7Twenty is an open source CRM.May 26, 2026
- Medium6.9Lack of output escaping leads to a XSS vector in the readmore links for com_content.May 26, 2026
- Medium6.9Lack of output escaping leads to a XSS vector in the content history component.May 26, 2026
- Medium6.9Lack of output escaping leads to a XSS vector in the multilingual associations component.May 26, 2026
- Medium6.9Lack of output escaping leads to a XSS vector in the feed modules.May 26, 2026
- Medium6.1IBM Financial Transaction Manager for SWIFT Services for Multiplatforms 3.2.4.0 through 3.2.4.15 IBM Financial Transaction Manager SWIFT is vulnerable to cross-site scripting.EPSS 0.2%May 26, 2026
- High7.6IBM Cognos Analytics 11.2.0, 12.0, and 12.1.0 and IBM Cognos Transformer 12.0, 11.2.4, and 12.1.0 is vulnerable to stored cross-site scripting (XSS) in Cognos Adminstration.EPSS 0.2%May 26, 2026
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dylan Kuhn Geo Mashup allows Stored XSS.May 26, 2026
- Low2.1A vulnerability was determined in itsourcecode Electronic Judging System 1.0.May 26, 2026
- Low2.1A weakness has been identified in blitz-js blitz up to 3.0.2 on GitHub.May 26, 2026
- Low2.1A security flaw has been discovered in stonith404 pingvin-share up to 1.13.0.May 26, 2026
- Low2.1A vulnerability was identified in hemant6488 CodeIgniter-StudentManagementSystem.May 26, 2026
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Melapress WP Activity Log allows DOM-Based XSS.May 25, 2026
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PickPlugins Team Showcase allows Stored XSS.EPSS 0.2%May 25, 2026
- Low2.0A vulnerability was identified in SourceCodester Student Grades Management System 1.0.May 25, 2026
- Medium4.4In Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7.1, an unsanitized subject field in the draft restored value could lead to stored XSS/HTML/CSS injection o…May 25, 2026