Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- Low1.2An HTML injection vulnerability in the notification email for "Slow Redirect" and "Cloned Website" Canarytokens exists in Thinkst Applied Research Canarytokens, enabli…Jun 3, 2026
- Medium5.3OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables.Jun 2, 2026
- Medium6.1Cross Site Scripting vulnerability in usememos Memos v.0.26.0 allows a remote attacker to obtain sensitive information via the SANITIZE_SCHEMA, Memo Rendering Componen…Jun 2, 2026
- Medium5.4React Router is a router for React.Jun 2, 2026
- Medium5.4Appsmith’s SQL query editor’s autocomplete functionality fails to sanitize database object names before rendering them in innerHTML, allowing an authenticated Develope…Jun 2, 2026
- High7.5NiceGUI is a Python-based UI framework.Jun 2, 2026
- Medium4.4The Simple Custom Login Page plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the color settings fields (Page Background, Form Background, Text Co…Jun 2, 2026
- High7.8A flaw was found in Poppler's Splash backend.Jun 1, 2026
- Medium5.1Lightweight Music Server (LMS) though 3.76.0 contains a stored cross-site scripting vulnerability that allows attackers to execute arbitrary JavaScript by embedding ma…Jun 1, 2026
- Medium6.5A bug in Apache Airflow's rendered-template field handling caused nested sensitive-key masking (e.g.Jun 1, 2026
- Medium6.5An improper neutralization of active SVG content in OTRS or ((OTRS)) Community Edition ticket article rendering allows attackers to inject specially crafted SVG payloa…Jun 1, 2026
- High8.8brainstormforce spectra Improper Privilege ManagementKEVEPSS 1.0%May 30, 2026
- Medium6.5Shopper is a Headless e-commerce Admin Panel.May 29, 2026
- Medium6.9SillyTavern is a locally installed user interface that allows users to interact with text generation large language models, image generation engines, and text-to-speec…May 29, 2026
- Critical9.3Trilium Notes is a cross-platform, hierarchical note taking application focused on building large personal knowledge bases.May 29, 2026
- Low2.3QuickCMS is vulnerable to Cross-Site Scripting (XSS) through its insecure HTTP-based plugin‑fetching mechanism.EPSS 0.3%May 29, 2026
- Medium5.3Mermaid is a JavaScript tool that uses Markdown-inspired text to create and modify diagrams and charts.May 29, 2026
- Medium5.4WWBN AVideo is an open source video platform.May 29, 2026
- Medium5.4WWBN AVideo is an open source video platform.May 29, 2026
- High8.3Home Assistant is open source home automation software that puts local control and privacy first.May 29, 2026
- Medium5.4A stored Cross-Site Scripting (XSS) vulnerability exists in the project selector component of Mautic 7.May 29, 2026
- High7.6A stored Cross-Site Scripting (XSS) vulnerability exists in the Projects component of Mautic 7.May 29, 2026
- Critical9.9A Server-Side Template Injection (SSTI) vulnerability exists in Mautic's theme engine.May 29, 2026
- Medium6.4The Plus Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'carousel_direction' parameter of the Carousel Anything widget…May 29, 2026
- Medium4.4The Post Snippets plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 4.0.19.May 29, 2026