Catalog

Findings

Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.

SearchRecord typeSeveritySourceStackWeaknessSort

Known exploited only

Medium5.1Projectsend r1295 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by submitting crafted input in t…Vuln · CVE-2021-47947 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.2%May 10, 2026
Low2.1A security flaw has been discovered in ProjectSend r2002.Vuln · CVE-2026-5624 · CVE.org · NIST NVDApr 6, 2026
Low2.9A flaw has been found in projectsend up to r1945.Vuln · CVE-2026-4045 · CVE.org · NIST NVDMar 12, 2026
Low2.0A vulnerability was detected in projectsend up to r1945.Vuln · CVE-2026-4044 · CVE.org · NIST NVDMar 12, 2026
Medium5.3A security vulnerability has been detected in projectsend up to r1945.Vuln · CVE-2026-3977 · CVE.org · NIST NVDMar 12, 2026
Critical9.8ProjectSend Improper Authentication VulnerabilityVuln · CVE-2024-11680 · ProjectSend · ProjectSend · CISA KEV · CVE.org · FIRST EPSSKEVEPSS 91.8%Nov 26, 2024