Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium5.4In Progress® Kendo® UI for jQuery versions starting with 2012.2.710 and prior to 2026.3.1015, the Validator decodes validation messages from data-msg-* attributes and…Oct 15, 2026
- Medium5.4In Progress® Kendo® UI for jQuery prior to v2026.3.1015, the Menu component constructs HTML attributes from bound dataSource fields by string concatenation without pro…Oct 15, 2026
- Medium5.4Cross-Site Scripting via TabStrip, Menu, and PanelBar Image URLs in Kendo UI for jQueryOct 15, 2026
- Medium5.4Cross-Site Scripting via ListBox Bound Text in Kendo UI for jQueryOct 15, 2026
- Medium5.4Cross-Site Scripting via Badge Text Binding in Kendo UI for jQueryOct 15, 2026
- Medium4.7Cross-Site Scripting via ToolBar ButtonGroup URLs in Kendo UI for jQueryOct 15, 2026
- Medium4.7Cross-Site Scripting via Scheduler Resource Colors in Kendo UI for jQueryOct 15, 2026
- Medium4.7Cross-Site Scripting via PanelBar Item URLs in Kendo UI for jQueryOct 15, 2026
- Medium4.7Cross-Site Scripting in FileManager Drag Hints in Kendo UI for jQueryOct 15, 2026
- Medium6.5Cross-site Scripting (XSS) in Kendo UI for jQuery FileBrowser and ImageBrowserOct 15, 2026
- Critical9.8Vitess is a database clustering system for horizontal scaling of MySQL.Oct 13, 2026
- Medium5.4In Progress® Kendo UI for Vue (@progress/kendo-vue-charts) starting with version 2.5.0 and prior to 16.2.0, the default Chart tooltip renders the formatted point value…Oct 10, 2026
- Medium5.4In Progress® KendoReact (@progress/kendo-react-charts) starting with version 1.1.0 and prior to 16.2.0, the default Chart tooltip renders the formatted point value as…Oct 10, 2026
- Medium4.6OctoPrint provides a web interface for controlling consumer 3D printers.EPSS 0.2%Aug 21, 2026
- Medium5.3Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in SpabRice Nyla allows Code Injection.May 26, 2026
- Low1.8The GDPR cookies module for Backdrop CMS (before 1.x-1.3.5) doesn't sufficiently protect visitors from Cross Site Scripting (XSS) if a malicious value has been provide…May 26, 2026
- Medium4.8CtrlPanel is open-source billing software for hosting providers.May 19, 2026
- Medium5.1Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline.May 15, 2026
- Medium6.1The MapGeo – Interactive Geo Maps plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'map' parameter in the display-map shortcode in all vers…May 14, 2026
- High8.5CVAT is an open source interactive video and image annotation tool for computer vision.May 13, 2026
- Medium4.6efw4.X is an Enterprise Framework for Web.May 12, 2026
- Low3.3Improper neutralization of script-related html tags in a web page (basic xss) in Visual Studio Code allows an unauthorized attacker to execute code locally.May 12, 2026
- High7.3YetAnotherForum.NET (YAF.NET) is a C# ASP.NET forum.May 12, 2026
- High8.1YetAnotherForum.NET (YAF.NET) is a C# ASP.NET forum.May 12, 2026
- Medium5.1WordPress GetPaid Plugin 2.4.6 contains an HTML injection vulnerability that allows authenticated attackers to inject arbitrary HTML code by exploiting the Help Text f…May 10, 2026
74 records · page 1 of 3
PreviousNext