Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- High8.8RansomLook contains a stored cross-site scripting (XSS) vulnerability in the cryptocurrency wallet detail view.EPSS 0.4%Aug 24, 2026
- Critical9.4RansomLook contains an authorization weakness in the web-based configuration editor exposed through the /admin/config endpoint.EPSS 0.6%Aug 24, 2026
- High8.2RansomLook contains insufficient resource validation in the analysis PDF generation functionality.EPSS 0.4%Aug 24, 2026
- UnknownIn the Linux kernel, the following vulnerability has been resolved: drm/v3d: Serialize the scheduler timeout handlers V3D exposes several independent hardware queues (…EPSS 0.2%Aug 22, 2026
- Medium4.3OliveTin gives access to predefined shell commands from a web interface.EPSS 0.4%Aug 21, 2026
- High8.7Joomla Extension - j2commerce.com - Order content disclosure J2Store 1.0.0-3.3.20, 4.0.0-4.0.20, 4.1.0-4.1.5 - An unauthenticated visitor could supply any order_id as…EPSS 0.4%Aug 21, 2026
- High7.3Combodo iTop is a web based IT service management tool.EPSS 0.4%Aug 21, 2026
- Medium4.1Unleash is an open-source feature management platform.EPSS 0.3%Aug 21, 2026
- Medium5.3Element Web is a Matrix web client built using the Matrix React SDK.EPSS 0.5%Aug 21, 2026
- High8.2DiscordChatExporter saves Discord chat logs to a file.EPSS 0.2%Aug 21, 2026
- Medium4.6OctoPrint provides a web interface for controlling consumer 3D printers.EPSS 0.2%Aug 21, 2026
- Medium5.9Infracost provides cloud cost intelligence for engineers, AI coding agents, and CI/CD.EPSS 0.5%Aug 21, 2026
- Medium5.3Authorization Bypass Through User-Controlled Key in the transaction save endpoint in Roskus Prospero Flow CRM 4.9.1 through 5.14.0 allows a user with transaction and a…EPSS 0.4%Aug 21, 2026
- Unknownpodsfoundation pods Incorrect AuthorizationKEVEPSS 3.5%Aug 15, 2026
- UnknownUntrusted labels can inject SVG attributes, CSS values, and terminal escape sequencesAug 7, 2026
- Unknownwebreinvent vaahcms Embedded Malicious CodeKEVEPSS 0.8%Jul 29, 2026
- Critical9.3vBulletin vBulletin Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')KEVEPSS 5.6%Jul 27, 2026
- High8.2OmniFaces is a utility library for Faces.EPSS 0.3%Jul 24, 2026
- Unknownfossbilling fossbilling Improper Neutralization of Special Elements Used in a Template EngineKEVEPSS 1.9%Jun 25, 2026
- UnknownJupyterLab: Stored XSS in extension manager through package metadata unsanitized URI protocolEPSS 0.3%Jun 19, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths Vulnerabilities leading t…EPSS 0.2%Jun 8, 2026
- Medium5.1An authenticated user can persist arbitrary HTML/JavaScript in the email_id or mobile_no fields of a Customer record and trigger unescaped rendering in the Point of Sa…Jun 3, 2026
- Medium4.8An authenticated ERPNext user with Item record edit permissions can persist arbitrary HTML/JavaScript in the item_name, description, or image fields of an Item and tri…Jun 3, 2026
- Medium6.3A Cross Site Scripting vulnerability exists in the Kimi AI v1.0 web interface's 'Preview' feature.Jun 3, 2026
- Low1.2An HTML injection vulnerability in the notification email for "Slow Redirect" and "Cloned Website" Canarytokens exists in Thinkst Applied Research Canarytokens, enabli…Jun 3, 2026