Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium6.3Grimmory is a self-hosted digital library.May 8, 2026
- Medium6.1MapServer is a system for developing web-based GIS applications.May 8, 2026
- Medium6.1In th30d4y/IP from version 1.0.1 to before version 2.0.1, a DOM-Based Cross-Site Scripting (XSS) vulnerability was identified in an IP Reputation Checker application.May 8, 2026
- Medium4.3Weblate is a web based localization tool.May 7, 2026
- High8.8Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in DivvyDrive Information Technologies Inc.May 7, 2026
- Medium6.1HCL DFXAnalytics is affected by an Insecure Security Header Configuration vulnerability where the application utilizes the outdated X-XSS-Protection header, which coul…May 6, 2026
- High7.0mailcow: dockerized is an open source groupware/email suite based on docker.Apr 21, 2026
- High8.9mailcow: dockerized is an open source groupware/email suite based on docker.Apr 21, 2026
- Critical9.3mailcow: dockerized is an open source groupware/email suite based on docker.Apr 21, 2026
- Medium5.1Pega Platform versions 8.1.0 through 25.1.1 are affected by an HTML Injection vulnerability in a user interface component.Apr 15, 2026
- Medium6.1A vulnerability in the Desktop Agent functionality of Cisco Webex Contact Center could have allowed an unauthenticated, remote attacker to conduct cross-site scripting attacks.Apr 15, 2026
- Medium6.5XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it.Apr 15, 2026
- Medium5.1MaxKB is an open-source AI assistant for enterprise.Apr 14, 2026
- Medium6.1A HTML Injection vulnerability exists in the Dashboard module of Vtiger CRM 8.4.0.Apr 13, 2026
- Medium5.4EspoCRM is an open source customer relationship management application.Apr 13, 2026
- Medium5.3ChurchCRM is an open-source church management system.Apr 9, 2026
- Medium5.3Zammad is a web based open source helpdesk/customer support system.Apr 8, 2026
- Medium5.3Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in tagDiv tagDiv Composer td-composer allows Code Injection.This issue affe…Apr 8, 2026
- Medium5.3Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in kutethemes Uminex uminex allows Code Injection.This issue affects Uminex…Apr 8, 2026
- Medium5.3Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in kutethemes DukaMarket dukamarket allows Code Injection.This issue affect…Apr 8, 2026
- Medium5.3Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in kutethemes Armania armania allows Code Injection.This issue affects Arma…Apr 8, 2026
- Medium5.3Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in kutethemes TechOne techone allows Code Injection.This issue affects Tech…Apr 8, 2026
- Medium6.3Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in Wikimedia Foundation Mediawiki - Cargo Extension allows Stored XSS.This…Apr 7, 2026
- Medium6.3Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in Wikimedia Foundation Mediawiki - Cargo Extension allows Stored XSS.This…Apr 7, 2026
- Medium6.3Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in WikiWorks Mediawiki - Cargo Extension allows Stored XSS.This issue affec…Apr 7, 2026