Catalog

Findings

Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.

SearchRecord typeSeveritySourceStackWeaknessSort

Known exploited only

Reset

Medium5.4GitLab has remediated an issue in GitLab EE affecting all versions from 18.7 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an a…Vuln · CVE-2026-6073 · gitlab · gitlab · CVE.org · FIRST EPSS · GitLab Security Releases · GitLabEPSS 0.3%May 13, 2026
Medium6.1Kyverno is a policy engine designed for cloud native platform engineering teams.Vuln · CVE-2026-44245 · kyverno · policy-reporter-ui · CVE.org · FIRST EPSS · NIST NVDEPSS 0.3%May 12, 2026
Medium5.1Flowsint is an open-source OSINT graph exploration tool designed for cybersecurity investigation, transparency, and verification.Vuln · CVE-2026-42157 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.5%May 12, 2026
Medium5.3ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript.Vuln · CVE-2026-42338 · beaugunderson · ip-address · CVE.org · FIRST EPSS · NIST NVDEPSS 0.5%May 12, 2026
High8.7Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability…Vuln · CVE-2026-34686 · adobe · commerce · CVE.org · FIRST EPSS · NIST NVD · Adobe, MagentoEPSS 0.7%May 12, 2026
Medium4.8Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability…Vuln · CVE-2026-34658 · adobe · commerce · CVE.org · FIRST EPSS · NIST NVD · Adobe, MagentoEPSS 0.4%May 12, 2026
Medium4.8Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability…Vuln · CVE-2026-34655 · adobe · commerce · CVE.org · FIRST EPSS · NIST NVD · Adobe, MagentoEPSS 0.4%May 12, 2026
High8.8A vulnerability in the web-based management interface of Access Points running AOS-10 and AOS-8 Instant could allow an unauthenticated remote attacker to execute arbit…Vuln · CVE-2026-23819 · arubanetworks · arubaos · CVE.org · FIRST EPSS · NIST NVDEPSS 0.3%May 12, 2026
High8.8AntSword is a cross-platform website management toolkit.Vuln · CVE-2026-43892 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.4%May 12, 2026
Medium6.2LobeHub is a work-and-lifestyle space to find, build, and collaborate with agent teammates that grow with you.Vuln · CVE-2026-42045 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.4%May 12, 2026
Low3.3Improper neutralization of script-related html tags in a web page (basic xss) in Visual Studio Code allows an unauthorized attacker to execute code locally.Vuln · CVE-2026-41611 · microsoft · visual studio code · CVE.org · FIRST EPSS · NIST NVD · MicrosoftEPSS 0.5%May 12, 2026
Medium5.0Improper neutralization of input during web page generation ('cross-site scripting') in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.Vuln · CVE-2026-41610 · microsoft · visual studio code · CVE.org · FIRST EPSS · NIST NVD · MicrosoftEPSS 0.7%May 12, 2026
High7.3YetAnotherForum.NET (YAF.NET) is a C# ASP.NET forum.Vuln · CVE-2026-43939 · CVE.org · FIRST EPSS · NIST NVD · MicrosoftEPSS 0.4%May 12, 2026
High8.1YetAnotherForum.NET (YAF.NET) is a C# ASP.NET forum.Vuln · CVE-2026-43938 · CVE.org · FIRST EPSS · NIST NVD · MicrosoftEPSS 0.4%May 12, 2026
Medium5.4A Stored Cross-Site Scripting (XSS) vulnerability was discovered in the File Management module of FluentCMS 1.2.3.Vuln · CVE-2025-70842 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.1%May 12, 2026
Medium5.3Other issue in the JavaScript Engine component.Vuln · CVE-2026-8391 · mozilla · firefox · CVE.org · NIST NVD · FirefoxMay 12, 2026
Medium4.4The Continually plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 4.3.1 due to insufficient in…Vuln · CVE-2026-6813 · CVE.org · FIRST EPSS · NIST NVD · WordPressEPSS 0.3%May 12, 2026
Medium4.4The FastBots plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.0.12 due to insufficient inpu…Vuln · CVE-2026-6800 · CVE.org · FIRST EPSS · NIST NVD · WordPressEPSS 0.3%May 12, 2026
High8.5A vulnerability has been identified in Teamcenter V2312 (All versions < V2312.0014), Teamcenter V2406 (All versions < V2406.0012), Teamcenter V2412 (All versions < V24…Vuln · CVE-2026-33862 · siemens · teamcenter · CVE.org · FIRST EPSS · NIST NVDEPSS 0.3%May 12, 2026
High7.2Affected devices do not properly validate and sanitize filenames on the Firmware Update page.Vuln · CVE-2026-25789 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.5%May 12, 2026
Critical9.3Affected devices do not properly validate and sanitize Technology Object (TO) name rendered on the "Motion Control Diagnostics" page of the web interface.Vuln · CVE-2026-25787 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.5%May 12, 2026
Critical9.3Affected devices do not properly validate and sanitize PLC/station name rendered on the "communication" parameters page of the web interface.Vuln · CVE-2026-25786 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.5%May 12, 2026
Medium6.4The Bootstrap Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the shortcode in all versions up to, and including, 1.0.Vuln · CVE-2026-7661 · CVE.org · FIRST EPSS · NIST NVD · WordPressEPSS 0.3%May 12, 2026
Medium6.4The Advanced Social Media Icons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the shortcode in all versions up to, and including, 1.2.Vuln · CVE-2026-7659 · CVE.org · FIRST EPSS · NIST NVD · WordPressEPSS 0.3%May 12, 2026
Medium6.1The WP Google Maps Integration plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the parameter in all versions up to, and including, 1.2.Vuln · CVE-2026-7464 · CVE.org · FIRST EPSS · NIST NVD · Google, WordPressEPSS 0.4%May 12, 2026