Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- Medium6.4The BJ Lazy Load plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the function in all versions up to, and including, 1.0.9.EPSS 0.2%May 12, 2026
- Medium6.1SAP TAF_APPLAUNCHER within Business Server Pages allows an unauthenticated attacker to craft malicious links that, when clicked by a victim, redirects them to attacker…EPSS 0.3%May 12, 2026
- Medium6.1Due to a reflected cross-site scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP (Applications based on Business Server Pages), an unauthenticated…EPSS 0.3%May 12, 2026
- High8.4DOM-based cross-site scripting (XSS) in Cribl Stream before 4.17.1 allows a remote attacker to execute arbitrary JavaScript in the browser of an authenticated user who…EPSS 0.5%May 12, 2026
- Critical9.3DeepChat is an open-source artificial intelligence agent platform that unifies models, tools, and agents.EPSS 0.5%May 11, 2026
- Medium5.3Fiber is a web framework for Go.EPSS 0.3%May 11, 2026
- High7.3Outline is a service that allows for collaborative documentation.EPSS 0.4%May 11, 2026
- Medium6.1WWBN AVideo is an open source video platform.EPSS 0.3%May 11, 2026
- Medium6.4WWBN AVideo is an open source video platform.EPSS 0.3%May 11, 2026
- Medium6.8WeGIA is a web manager for charitable institutions.EPSS 0.4%May 11, 2026
- Medium6.8WeGIA is a web manager for charitable institutions.EPSS 0.4%May 11, 2026
- Medium4.5Audiobookshelf is a self-hosted audiobook and podcast server.EPSS 0.4%May 11, 2026
- Medium6.1WeGIA is a web manager for charitable institutions.EPSS 0.3%May 11, 2026
- Medium6.4WeGIA is a web manager for charitable institutions.EPSS 0.4%May 11, 2026
- Medium5.1An authenticated user with upload permission to a hosted repository can store content that causes arbitrary JavaScript to execute in the browser of any user who browse…EPSS 0.4%May 11, 2026
- Medium5.4Open edX Platform enables the authoring and delivery of online learning at any scale.EPSS 0.3%May 11, 2026
- Medium5.7Taiga is a project management platform for startups and agile developers.EPSS 0.4%May 11, 2026
- Medium5.4HireFlow v1.2 is vulnerable to Cross Site Scripting (XSS) in candidate_detail.html via the Resume or Feedback Comment fields via POST /candidates/add or POST /feedback/add.EPSS 0.3%May 11, 2026
- Medium6.2grav-plugin-admin is the admin plugin for Grav is an HTML user interface that provides a convenient way to configure Grav and easily create and modify pages.EPSS 0.4%May 11, 2026
- Medium5.4The form plugin for Grav adds the ability to create and use forms.EPSS 0.3%May 11, 2026
- Medium6.1Cross Site Scripting vulnerability in iotgateway v.3.0.1 allows a remote attacker to execute arbitrary code via the Log Record FunctionEPSS 0.4%May 11, 2026
- Medium4.8Stored cross-site scripting (XSS) vulnerability in pgAdmin 4 Browser Tree and Explain Visualizer modules.EPSS 0.2%May 11, 2026
- Medium6.9Grav is a file-based Web platform.EPSS 0.3%May 11, 2026
- Medium5.4Grav is a file-based Web platform.EPSS 0.3%May 11, 2026
- High8.9Grav is a file-based Web platform.EPSS 0.4%May 11, 2026