Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium5.4The Hub collection module documentation renderer in the unified Ansible Automation Platform UI (built from upstream ansible-ui, frontend/hub) renders a documentation U…EPSS 0.2%Oct 15, 2026
- High7.2HtmlUnit Neko is an HtmlUnit adaptation of NekoHTML.EPSS 0.3%Oct 15, 2026
- High8.7GYM One is open-source gym management software for fitness centers, personal trainers, and sports clubs.Oct 15, 2026
- Medium5.4XXL-JOB through 3.5.0-SNAPSHOT is vulnerable to stored cross-site scripting (XSS) in the GLUE code editor.EPSS 0.2%Oct 15, 2026
- Medium6.3ammonia is a Rust library for repairing and securing untrusted HTML.Oct 15, 2026
- High7.1Lychee is a free, open-source photo-management tool.Oct 15, 2026
- Medium5.7Lychee is a free, open-source photo-management tool.Oct 15, 2026
- Medium5.2OPNsense is a FreeBSD based firewall and routing platform.Oct 15, 2026
- Medium5.4OPNsense is a FreeBSD based firewall and routing platform.Oct 15, 2026
- Medium6.5EspoCRM is an open source customer relationship management application.Oct 15, 2026
- Medium4.3EspoCRM is an open source customer relationship management application.Oct 15, 2026
- Medium5.4In Progress® Kendo® UI for jQuery prior to version 2026.3.1015, the Calendar and MultiViewCalendar month content templates render data.url and data.title without prope…EPSS 0.2%Oct 15, 2026
- Medium5.4Cross-Site Scripting via TabStrip, Menu, and PanelBar Image URLs in Kendo UI for jQueryEPSS 0.2%Oct 15, 2026
- Medium5.4Cross-Site Scripting via ListBox Bound Text in Kendo UI for jQueryEPSS 0.2%Oct 15, 2026
- Medium5.4Cross-Site Scripting via Badge Text Binding in Kendo UI for jQueryEPSS 0.2%Oct 15, 2026
- Medium4.7Cross-Site Scripting in FileManager Drag Hints in Kendo UI for jQueryEPSS 0.1%Oct 15, 2026
- Medium6.5Cross-site Scripting (XSS) in Kendo UI for jQuery FileBrowser and ImageBrowserEPSS 0.2%Oct 15, 2026
- High7.0The framebuffer device model's maximum resolution constants were duplicated between the framebuffer and RFB modules and had gotten out of sync.EPSS 0.1%Oct 15, 2026
- High7.8ZDI-26-762: X.Org Server GLX RenderLarge Heap-based Buffer Overflow Privilege Escalation VulnerabilityOct 15, 2026
- UnknownImportant: ghostscript security updateOct 15, 2026
- UnknownImportant: ghostscript security updateOct 15, 2026
- UnknownImportant: ghostscript security updateOct 15, 2026
- Medium6.3qs.stringify with arrayFormat comma throws TypeError on array elements that cannot be coerced to a stringEPSS 0.3%Oct 14, 2026
- Medium4.8FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations.EPSS 0.2%Oct 14, 2026
- Medium6.8InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create professional invoices and estimates.EPSS 0.5%Oct 14, 2026