Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium6.5Insertion of Sensitive Information Into Sent Data vulnerability in ClikIT Infinite Uploads infinite-uploads allows Retrieve Embedded Sensitive Data.This issue affects…Oct 15, 2026
- Medium5.3Missing Authorization vulnerability in WPdreams Ajax Search Lite ajax-search-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue af…Oct 15, 2026
- Medium5.9undici is an HTTP client library for Node.js.Oct 15, 2026
- Medium5.9undici is an HTTP client library for Node.js.Oct 15, 2026
- Medium5.4Missing Authorization vulnerability in WP Chill Strong Testimonials strong-testimonials allows Exploiting Incorrectly Configured Access Control Security Levels.This is…Oct 15, 2026
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force Presto Player presto-player allows Stored XSS.Th…Oct 15, 2026
- High7.5undici is an HTTP client library for Node.js.Oct 15, 2026
- Medium5.9undici is an HTTP client library for Node.js.Oct 15, 2026
- High7.4undici is an HTTP client library for Node.js.Oct 15, 2026
- Medium5.3Missing Authorization vulnerability in WP Sunshine Sunshine Photo Cart sunshine-photo-cart allows Exploiting Incorrectly Configured Access Control Security Levels.This…Oct 15, 2026
- High7.4undici is an HTTP client library for Node.js.Oct 15, 2026
- Medium5.4The Hub collection module documentation renderer in the unified Ansible Automation Platform UI (built from upstream ansible-ui, frontend/hub) renders a documentation U…Oct 15, 2026
- Medium5.3Missing Authorization vulnerability in WebberZone Knowledge Base knowledgebase allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affec…Oct 15, 2026
- High7.4A flaw was found in the internal WebAssembly (WASM) shim used by the Kuadrant operator.Oct 15, 2026
- Medium6.0temporal-proxy 0.2.0 through 0.8.0 does not bind encrypted payloads to the namespace they were encrypted for.Oct 15, 2026
- Medium6.1ELADMIN v2.7 and before is vulnerable to Cross Site Scripting (XSS) via the component WebSocketServer, SpringSecurityConfig, deploy.vue.Oct 15, 2026
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in YITH YITH WooCommerce Compare yith-woocommerce-compare allows Sto…Oct 15, 2026
- High7.2HtmlUnit Neko is an HtmlUnit adaptation of NekoHTML.Oct 15, 2026
- Medium5.4Authorization Bypass Through User-Controlled Key vulnerability in ELEXtensions ELEX WooCommerce Advanced Bulk Edit Products, Prices & Attributes elex-bulk-edit-product…Oct 15, 2026
- Critical9.1joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption (JOSE) standards.Oct 15, 2026
- Medium6.3Web3.py 7.15.0 through 7.16.0 and 8.0.0b2 through 8.0.0 CCIP-Read SSRF BypassOct 15, 2026
- Medium5.9undici is an HTTP client library for Node.js.Oct 15, 2026
- High7.5undici is an HTTP client library for Node.js.Oct 15, 2026
- Medium6.9Unvalidated HTTP/1 request-target authority lets a client choose conn.host and conn.port in BanditOct 15, 2026
- Medium6.1Scoold is a Q&A and a knowledge sharing platform for teams.Oct 15, 2026