Catalog

Findings

Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.

SearchRecord typeSeveritySourceStackWeaknessSort

Known exploited only

Reset

High8.8A vulnerability in the web-based management interface of Access Points running AOS-10 and AOS-8 Instant could allow an unauthenticated remote attacker to execute arbit…Vuln · CVE-2026-23819 · arubanetworks · arubaos · CVE.org · FIRST EPSS · NIST NVDEPSS 0.3%May 12, 2026
High8.8AntSword is a cross-platform website management toolkit.Vuln · CVE-2026-43892 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.4%May 12, 2026
Medium6.2LobeHub is a work-and-lifestyle space to find, build, and collaborate with agent teammates that grow with you.Vuln · CVE-2026-42045 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.4%May 12, 2026
Low3.3Improper neutralization of script-related html tags in a web page (basic xss) in Visual Studio Code allows an unauthorized attacker to execute code locally.Vuln · CVE-2026-41611 · microsoft · visual studio code · CVE.org · FIRST EPSS · NIST NVD · MicrosoftEPSS 0.5%May 12, 2026
Medium5.0Improper neutralization of input during web page generation ('cross-site scripting') in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.Vuln · CVE-2026-41610 · microsoft · visual studio code · CVE.org · FIRST EPSS · NIST NVD · MicrosoftEPSS 0.7%May 12, 2026
High7.3YetAnotherForum.NET (YAF.NET) is a C# ASP.NET forum.Vuln · CVE-2026-43939 · CVE.org · FIRST EPSS · NIST NVD · MicrosoftEPSS 0.4%May 12, 2026
High8.1YetAnotherForum.NET (YAF.NET) is a C# ASP.NET forum.Vuln · CVE-2026-43938 · CVE.org · FIRST EPSS · NIST NVD · MicrosoftEPSS 0.4%May 12, 2026
Medium5.4A Stored Cross-Site Scripting (XSS) vulnerability was discovered in the File Management module of FluentCMS 1.2.3.Vuln · CVE-2025-70842 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.1%May 12, 2026
Medium5.3Other issue in the JavaScript Engine component.Vuln · CVE-2026-8391 · mozilla · firefox · CVE.org · NIST NVD · FirefoxMay 12, 2026
Medium4.4The Continually plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 4.3.1 due to insufficient in…Vuln · CVE-2026-6813 · CVE.org · FIRST EPSS · NIST NVD · WordPressEPSS 0.3%May 12, 2026
Medium4.4The FastBots plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.0.12 due to insufficient inpu…Vuln · CVE-2026-6800 · CVE.org · FIRST EPSS · NIST NVD · WordPressEPSS 0.3%May 12, 2026
High8.5A vulnerability has been identified in Teamcenter V2312 (All versions < V2312.0014), Teamcenter V2406 (All versions < V2406.0012), Teamcenter V2412 (All versions < V24…Vuln · CVE-2026-33862 · siemens · teamcenter · CVE.org · FIRST EPSS · NIST NVDEPSS 0.3%May 12, 2026
High7.2Affected devices do not properly validate and sanitize filenames on the Firmware Update page.Vuln · CVE-2026-25789 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.5%May 12, 2026
Critical9.3Affected devices do not properly validate and sanitize Technology Object (TO) name rendered on the "Motion Control Diagnostics" page of the web interface.Vuln · CVE-2026-25787 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.5%May 12, 2026
Critical9.3Affected devices do not properly validate and sanitize PLC/station name rendered on the "communication" parameters page of the web interface.Vuln · CVE-2026-25786 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.5%May 12, 2026
Medium6.4The Bootstrap Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the shortcode in all versions up to, and including, 1.0.Vuln · CVE-2026-7661 · CVE.org · FIRST EPSS · NIST NVD · WordPressEPSS 0.3%May 12, 2026
Medium6.4The Advanced Social Media Icons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the shortcode in all versions up to, and including, 1.2.Vuln · CVE-2026-7659 · CVE.org · FIRST EPSS · NIST NVD · WordPressEPSS 0.3%May 12, 2026
Medium6.1The WP Google Maps Integration plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the parameter in all versions up to, and including, 1.2.Vuln · CVE-2026-7464 · CVE.org · FIRST EPSS · NIST NVD · Google, WordPressEPSS 0.4%May 12, 2026
Medium6.1The AzonPost plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the parameter in all versions up to, and including, 1.3.Vuln · CVE-2026-7437 · CVE.org · FIRST EPSS · NIST NVD · WordPressEPSS 0.4%May 12, 2026
Medium6.4The Shortcodely plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'widget_area' parameter in all versions up to, and including, 1.0.1 due to in…Vuln · CVE-2026-6913 · CVE.org · FIRST EPSS · NIST NVD · WordPressEPSS 0.3%May 12, 2026
Medium6.1The Pricing Tables for WP plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'page' parameter in all versions up to, and including, 1.1.0.Vuln · CVE-2026-6808 · CVE.org · FIRST EPSS · NIST NVD · WordPressEPSS 0.4%May 12, 2026
High7.2The LifePress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'n' parameter of the lp_update_mds AJAX action in all versions up to, and including, 2.2.2.Vuln · CVE-2026-6690 · CVE.org · FIRST EPSS · NIST NVD · WordPressEPSS 0.4%May 12, 2026
Medium6.4The Credits Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'link' attribute of the 'credits' shortcode in all versions up to, and…Vuln · CVE-2026-6256 · CVE.org · FIRST EPSS · NIST NVD · WordPressEPSS 0.3%May 12, 2026
Medium6.4The scratchblocks for WP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'element' attribute of the 'scratchblocks' shortcode in all versions…Vuln · CVE-2026-6247 · CVE.org · FIRST EPSS · NIST NVD · WordPressEPSS 0.3%May 12, 2026
Medium6.4The Quick Table plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'style' attribute of the 'qtbl' shortcode in all versions up to, and includin…Vuln · CVE-2026-6237 · CVE.org · FIRST EPSS · NIST NVD · WordPressEPSS 0.3%May 12, 2026