Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium4.8Cross-site scripting vulnerability exists in Musetheque V4 Information Disclosure for IPKNOWLEDGE V4L1 rev2203.0 and earlier.May 15, 2026
- Medium5.1The MCP Registry provides MCP clients with a list of MCP servers, like an app store for MCP servers.May 14, 2026
- Critical9.3PrestaShop is an open source e-commerce web application.May 14, 2026
- Critical9.0SiYuan is an open-source personal knowledge management system.May 14, 2026
- Critical9.4SiYuan is an open-source personal knowledge management system.May 14, 2026
- Critical9.4SiYuan is an open-source personal knowledge management system.May 14, 2026
- High8.3SiYuan is an open-source personal knowledge management system.May 14, 2026
- Medium5.3Flowsint is an open-source OSINT graph exploration tool designed for cybersecurity investigation, transparency, and verification.May 14, 2026
- Critical9.6soundcloud-rpc is a SoundCloud Client with Discord Rich Presence, Dark Mode, Last.fm and AdBlock support.May 14, 2026
- Medium5.3Open OnDemand is an open-source high-performance computing portal.May 14, 2026
- Critical9.0vCluster Platform provides a Kubernetes platform for managing virtual clusters, multi-tenancy, and cluster sharing.May 14, 2026
- Medium5.3Vvveb before 1.0.8.3 contains a stored cross-site scripting vulnerability in the customer signup flow where the Signup::addUser() controller copies raw POST username v…May 14, 2026
- Medium6.1Northern.tech CFEngine Enterprise before 3.21.8, 3.24.3, and 3.27.0 allows XSS.May 14, 2026
- Medium5.3Verba is affected by a Stored Cross-Site Scripting (XSS) vulnerability within its login logging mechanism.EPSS 0.2%May 14, 2026
- Medium5.1WEBCON BPS is vulnerable to Reflected XSS via one of parameters used by "/openinmobileapp" endpoint.EPSS 0.4%May 14, 2026
- Medium5.1Stored Cross-Site Scripting (XSS) in Stel Order v3.25.1 and earlier, located at the ‘/app/FrontController’ endpoint via the ‘legalName’ and ‘employeeID’ parameters.May 14, 2026
- Medium5.1podinfo through 6.11.2 contains a reflected cross-site scripting vulnerability in the /echo and /api/echo endpoints where the echoHandler writes request body content d…May 14, 2026
- Medium6.1Microsoft Exchange Server Cross-Site Scripting VulnerabilityKEVEPSS 0.5%May 14, 2026
- Medium6.4The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'title_tag' parameter in all versions up to, and inc…May 14, 2026
- Medium6.4The CC Child Pages plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'more' parameter in all versions up to, and including, 2.1.1 due to insuff…May 14, 2026
- Medium6.4The Meta Field Block plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'tagName' block attribute in all versions up to, and including, 1.5.2 du…May 14, 2026
- High7.2The ManageWP Worker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'MWP-Key-Name' HTTP request header in all versions up to, and including, 4.9.31.May 14, 2026
- Medium6.4The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'text' attribute of the bt_bb_button shortcode in all versions up to, a…May 14, 2026
- Medium6.1The GLS Shipping for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'failed_orders' parameter in all versions up to, and incl…May 14, 2026
- Medium5.4GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.11 before 18.11.3 that under certain conditions could have allowed an authenticated user…May 14, 2026