Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- HighThe Quiz and Survey Master (QSM) – Quiz Maker & Survey Maker plugin for WordPress is vulnerable to Stored DOM-Based Cross-Site Scripting via the 'qsm_hidden_questions'…EPSS 0.2%Oct 13, 2026
- Medium5.1Cross-Site Scripting on the YouMind portal, specifically in the avatar update endpoint, when setting a profile picture via an arbitrary URL.EPSS 0.2%Oct 13, 2026
- HighWhen Gitea's web installer is reachable against a database that already contains users, such as after has been reset to , submitting the install form with an administr…EPSS 0.4%Oct 13, 2026
- MediumGitea migration SSRF to reserved addresses through ALLOWED_DOMAINSEPSS 0.2%Oct 13, 2026
- HighA repository's external issue tracker regular expression containing alternating capture groups could produce invalid slice indexes when Gitea rendered issue references…EPSS 0.4%Oct 13, 2026
- HighIncorrect Privilege Assignment vulnerability in WPMU DEV Forminator forminator allows Privilege Escalation.This issue affects Forminator: from n/a through 1.57.3.EPSS 0.3%Oct 13, 2026
- HighMissing limits on resource use in the match expression evaluator of MongoDB Server can cause the server to consume excessive memory.EPSS 0.2%Oct 13, 2026
- MediumUse of freed memory in the aggregation feature of MongoDB Server can cause the server to read data from a memory area after it has been released.EPSS 0.2%Oct 13, 2026
- HighThe WP Photo Album Plus plugin for WordPress is vulnerable to Stored Cross-Site Scripting via REQUEST_URI Session History in all versions up to, and including, 9.3.03.…EPSS 0.3%Oct 13, 2026
- HighIBM Power Systems Firmware FW1060.00 through FW1060.81 is affected by a vulnerability in host firmware configuration parsing.EPSS 0.2%Oct 13, 2026
- HighIBM Power Systems Firmware FW1060.00 through FW1060.81 is affected by a vulnerability in the service processor mailbox interface.EPSS 0.2%Oct 13, 2026
- HighCVE-2026-96264 is listed by an advisory.EPSS 0.2%Oct 13, 2026
- HighIBM Power Systems Firmware FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, and FW1060.00 through FW1060.81 is affected by a vulnerability in the host firmwar…EPSS 0.2%Oct 13, 2026
- HighCVE-2026-96262 is listed by an advisory.EPSS 0.2%Oct 13, 2026
- HighIBM Power Systems Firmware FW1060.00 through FW1060.81 is affected by a vulnerability in host firmware configuration parsing.EPSS 0.1%Oct 13, 2026
- Critical9.9IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information or execute arbitrary code on the system due to improper data s…EPSS 0.5%Oct 13, 2026
- CriticalIBM Db2 Mirror for i 7.4, 7.5, and 7.6 is vulnerable to privilege escalation.EPSS 0.5%Oct 13, 2026
- HighThe VikBooking Hotel Booking Engine & PMS plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'attachments[name]' Parameter in all versions up to, an…EPSS 0.2%Oct 13, 2026
- HighIBM WebSphere Application Server 8.5, and 9.0 could allow an authenticated attacker to bypass authorization leading to administrative impersonation across the cell.EPSS 0.2%Oct 13, 2026
- HighAn issue in libass v.0.17.5 allows a remote attacker to cause a denial of service via the ass_outline_construct() in libass/ass_render.cEPSS 0.3%Oct 13, 2026
- High7.5Buffer Overflow vulnerability in madmurphy libconfini v.1.16.4 allows a remote attacker to cause a denial of service via an allocation-size mismatch between its bundle…EPSS 0.3%Oct 13, 2026
- Highmp4v2 2.0.0 contains a NULL pointer dereference vulnerability in MP4File::GenerateTracks() in src/mp4file.cpp.EPSS 0.5%Oct 13, 2026
- CriticalCVE-2026-97229: Critical Unauthenticated Remote Code Execution in GitLabEPSS 0.5%Oct 12, 2026
- HighCVE-2026-96893 is listed by GitLab Critical Patch Release: 19.4.2, 19.3.5, 19.2.8.EPSS 0.5%Oct 12, 2026
- Medium6.9Unbounded allocation in decimal Decimal.round/3 driven by the places argument enables DoSEPSS 0.1%Oct 10, 2026
100 records · page 4 of 4
PreviousNext