Catalog

Findings

Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.

SearchRecord typeSeveritySourceStackWeaknessSort

Known exploited only

Reset

Medium5.4Grav is a file-based Web platform.Vuln · CVE-2026-42612 · getgrav · grav · CVE.org · FIRST EPSS · NIST NVDEPSS 0.3%May 11, 2026
High8.9Grav is a file-based Web platform.Vuln · CVE-2026-42611 · getgrav · grav · CVE.org · FIRST EPSS · NIST NVDEPSS 0.4%May 11, 2026
Medium5.1Reflected Cross-Site Scripting (XSS) in the latest demo version of the Cradle eCommerce platform.Vuln · CVE-2026-3320 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.4%May 11, 2026
Medium5.1Reflected Cross-Site Scripting (XSS) in the latest demo version of the Cradle eCommerce platform.Vuln · CVE-2026-3319 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.4%May 11, 2026
Low2.3Vulnerability in Wikimedia Foundation Scribunto.Vuln · CVE-2026-34089 · wikimedia · scribunto · CVE.org · FIRST EPSS · NIST NVDEPSS 0.4%May 11, 2026
Medium6.1docuFORM Managed Print Service Client 11.11c is vulnerable to a reflected cross site scripting attack via the login page of the application.Vuln · CVE-2025-65417 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.2%May 11, 2026
High7.3A reflected cross-site scripted (XSS) vulnerability in the dfm-menu_orderopt.php component of GmbH Mecury Managed Print Services (docuForm) v11.11c allows attackers to…Vuln · CVE-2025-61314 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.3%May 11, 2026
High7.3A reflected cross-site scripted (XSS) vulnerability in the dfm-menu_markeralerts.php component of GmbH Mecury Managed Print Services (docuForm) v11.11c allows attacker…Vuln · CVE-2025-61313 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.3%May 11, 2026
High7.3A reflected cross-site scripted (XSS) vulnerability in the acc-menu_pricess.php component of GmbH Mecury Managed Print Services (docuForm) v11.11c allows attackers to…Vuln · CVE-2025-61312 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.3%May 11, 2026
High7.3A reflected cross-site scripted (XSS) vulnerability in the dfm-menu_alerts.php component of GmbH Mecury Managed Print Services (docuForm) v11.11c allows attackers to e…Vuln · CVE-2025-61311 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.3%May 11, 2026
Medium6.1A reflected cross-site scripted (XSS) vulnerability in the acc-menu_billings.php component of GmbH Mecury Managed Print Services (docuForm) v11.11c allows attackers to…Vuln · CVE-2025-61310 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.2%May 11, 2026
Medium6.1A reflected cross-site scripted (XSS) vulnerability in the dfm-menu_departments.php component of GmbH Mecury Managed Print Services (docuForm) v11.11c allows attackers…Vuln · CVE-2025-61309 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.2%May 11, 2026
Medium6.1A reflected cross-site scripted (XSS) vulnerability in the dfm-menu_maintenance.php component of GmbH Mecury Managed Print Services (docuForm) v11.11c allows attackers…Vuln · CVE-2025-61308 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.2%May 11, 2026
Medium6.1A reflected cross-site scripted (XSS) vulnerability in the acc-menu_papers.php component of GmbH Mecury Managed Print Services (docuForm) v11.11c allows attackers to e…Vuln · CVE-2025-61307 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.2%May 11, 2026
Medium6.1A reflected cross-site scripted (XSS) vulnerability in the dfm-menu_coveragealerts.php component of GmbH Mecury Managed Print Services (docuForm) v11.11c allows attack…Vuln · CVE-2025-61306 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.2%May 11, 2026
Medium6.1A reflected cross-site scripted (XSS) vulnerability in the dfm-menu_firmware.php component of GmbH Mecury Managed Print Services (docuForm) v11.11c allows attackers to…Vuln · CVE-2025-61305 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.2%May 11, 2026
Medium5.1ATutor is vulnerable to Reflected XSS in /install/install.php endpoint.Vuln · CVE-2026-6956 · CVE.org · FIRST EPSS · NIST NVD · PHPEPSS 0.6%May 11, 2026
Medium5.1ATutor is vulnerable to Reflected XSS in /install/upgrade.php endpoint.Vuln · CVE-2026-6909 · CVE.org · FIRST EPSS · NIST NVD · PHPEPSS 0.6%May 11, 2026
Low1.9A vulnerability was identified in Devs Palace ERP Online up to 4.0.0.Vuln · CVE-2026-8262 · CVE.org · NIST NVDMay 11, 2026
Low1.9A security vulnerability has been detected in Devs Palace ERP Online up to 4.0.0.Vuln · CVE-2026-8256 · CVE.org · NIST NVDMay 11, 2026
Low1.9A weakness has been identified in Devs Palace ERP Online up to 4.0.0.Vuln · CVE-2026-8255 · CVE.org · NIST NVDMay 11, 2026
Low1.9A security flaw has been discovered in Devs Palace ERP Online up to 4.0.0.Vuln · CVE-2026-8254 · CVE.org · NIST NVDMay 11, 2026
Low1.9A vulnerability was identified in Devs Palace ERP Online up to 4.0.0.Vuln · CVE-2026-8253 · CVE.org · NIST NVDMay 11, 2026
Medium5.1WordPress Plugin AAWP 3.16 contains a reflected cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by manipulating the…Vuln · CVE-2022-50970 · CVE.org · FIRST EPSS · NIST NVD · WordPressEPSS 0.2%May 10, 2026
Medium5.1uBidAuction 2.0.1 contains a reflected cross-site scripting vulnerability in the backend/mailingLog/manage module.Vuln · CVE-2022-50969 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.3%May 10, 2026