Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetSmartFilters jet-smart-filters allows Stored XSS.Th…Oct 15, 2026
- Medium4.3Missing Authorization vulnerability in Meow Apps AI Engine ai-engine allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AI Engi…Oct 15, 2026
- High7.5Junrar is an open source Java RAR archive library.Oct 15, 2026
- Medium6.3Authorization Bypass Through User-Controlled Key vulnerability in NSquared Simply Schedule Appointments simply-schedule-appointments allows Exploiting Incorrectly Conf…Oct 15, 2026
- Medium4.3Missing Authorization vulnerability in WP Chill Strong Testimonials strong-testimonials allows Exploiting Incorrectly Configured Access Control Security Levels.This is…Oct 15, 2026
- Medium5.3Missing Authorization vulnerability in WPExperts APIExperts Square for WooCommerce woosquare allows Exploiting Incorrectly Configured Access Control Security Levels.Th…Oct 15, 2026
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PluginUs.Net MDTF wp-meta-data-filter-and-taxonomy-filter allows…Oct 15, 2026
- Medium5.4XXL-JOB <=3.5.0-SNAPSHOT contains a stored Cross-Site Scripting (XSS) vulnerability in the job log list page (/joblog).Oct 15, 2026
- Medium5.4XXL-JOB through 3.5.0-SNAPSHOT is vulnerable to stored cross-site scripting (XSS) in the GLUE code editor.Oct 15, 2026
- Medium6.5tinytag is a Python library for reading audio file metadata.Oct 15, 2026
- High7.5libp2p is a JavaScript implementation of the libp2p networking stack.Oct 15, 2026
- Medium5.3Improper Validation of Specified Quantity in Input vulnerability in Magepeople inc.Oct 15, 2026
- Medium5.8The AsyncHttpClient library allows Java applications to execute HTTP requests and asynchronously process HTTP responses.Oct 15, 2026
- Medium6.3ammonia is a Rust library for repairing and securing untrusted HTML.Oct 15, 2026
- LowGitHub CLI allows attestation verification bypass through unescaped regex metacharactersOct 15, 2026
- LowGitHub CLI allows path traversal through unescaped request URL componentsOct 15, 2026
- Medium5.3WordPress WP EasyPay plugin <= 4.5.4 - Broken Access Control vulnerabilityOct 15, 2026
- Low3.3GitHub CLI partially discloses authentication tokens in outputOct 15, 2026
- Medium5.3NL Portal Backend Libraries provide backend components for Dutch government portals that interact with residents, customers, suppliers, and partner organizations.Oct 15, 2026
- Medium4.3Helium is a free online student planner for classes, homework, grades, and notes.Oct 15, 2026
- Low3.5Helium is a free online student planner for classes, homework, grades, and notes.Oct 15, 2026
- High8.8A flaw was found in the ContentRepositoryImpl.copyExplodedContent function of the wildfly-core library, which is used by WildFly and JBoss EAP to manage server deployments.Oct 15, 2026
- Medium6.5Directory Traversal vulnerability in Grav CMS 2.0.3 through 2.0.6 allows a remote attacker to obtain sensitive information via the GravExtension.php and the mediaDirFunc method.Oct 15, 2026
- Medium5.0An issue in Matomo v.5.11.2 allows a remote attacker to obtain sensitive information via the SiteContentDetector / SitesManager componentOct 15, 2026
- High8.3Lychee is a free, open-source photo-management tool.Oct 15, 2026