🔍 Filter Threats
| Title | Severity | PoC | Actively Exploited | Source | Date |
|---|---|---|---|---|---|
| CVE-2026-82440 HIGH Description
Nimbus instantiates the class named by a topology's `topology.scheduler.strategy` when scheduling it. The
allowlist intended to cons... | HIGH | ????? | ????? | NVD | 4 days ago |
| CVE-2026-66675 MEDIUM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in StylemixThemes Motors motors-car-deale... | MEDIUM | ????? | ????? | NVD | 4 days ago |
| CVE-2026-54863 HIGH Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mamunur Rashid Review Schema review-sc... | HIGH | ????? | ????? | NVD | 4 days ago |
| CVE-2026-40913 HIGH Apache Airflow's public Import Errors API returns the raw parse-failure stack trace to any user with the `ImportError.can_read` permission when t... | HIGH | ????? | ????? | NVD | 4 days ago |
| CVE-2026-50204 MEDIUM Apache Airflow's audit log stored Connection and Variable secret values in cleartext in the `Log.extra` column because the secrets masker matched... | MEDIUM | ????? | ????? | NVD | 4 days ago |
| CVE-2026-123484 HIGH Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Crocoblock JetFormBuilder jetformbuild... | HIGH | ????? | ????? | NVD | 4 days ago |
| CVE-2026-123465 HIGH Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in myCred myCred mycred allows Retrieve Embedded Sensitive Da... | HIGH | ????? | ????? | NVD | 4 days ago |
| CVE-2026-123463 HIGH Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Wham Checkout Files Upload for WooC... | HIGH | ????? | ????? | NVD | 4 days ago |
| CVE-2026-121780 HIGH Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Gijo Varghese Flying Images nazy-load ... | HIGH | ????? | ????? | NVD | 4 days ago |
| CVE-2026-121764 HIGH Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in FolioVision FV Flowplayer Video Player... | HIGH | ????? | ????? | NVD | 4 days ago |
| CVE-2026-121763 MEDIUM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPMU DEV Hummingbird hummingbird-perfo... | MEDIUM | ????? | ????? | NVD | 4 days ago |
| CVE-2026-121760 HIGH Missing Authorization vulnerability in weDevs weDocs wedocs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects... | HIGH | ????? | ????? | NVD | 4 days ago |
| CVE-2026-119514 MEDIUM Incorrect Privilege Assignment vulnerability in Webful Creations RepairBuddy computer-repair-shop allows Privilege Escalation.This issue affects Repai... | MEDIUM | ????? | ????? | NVD | 4 days ago |
| CVE-2026-119505 HIGH Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Welcart Welcart e-Commerce usc-e-shop ... | HIGH | ????? | ????? | NVD | 4 days ago |
| CVE-2026-119504 HIGH Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in DynamiApps Frontend Admin by DynamiApp... | HIGH | ????? | ????? | NVD | 4 days ago |
| CVE-2026-119503 MEDIUM Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Welcart Welcart e-Commerce usc-e-shop allows Code Injec... | MEDIUM | ????? | ????? | NVD | 4 days ago |
| CVE-2026-119497 MEDIUM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpWax Directorist directorist allows S... | MEDIUM | ????? | ????? | NVD | 4 days ago |
| CVE-2026-119483 HIGH Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 10Web Form Maker by 10Web form-maker a... | HIGH | ????? | ????? | NVD | 4 days ago |
| CVE-2026-113504 MEDIUM Apache Airflow's secrets masker stopped descending into nested structures after five levels, so a secret registered with the masker — for examp... | MEDIUM | ????? | ????? | NVD | 4 days ago |
| CVE-2026-113508 HIGH Apache Airflow's logout endpoint attempted to revoke the presented token on the server, but any failure during revocation was silently ignored an... | HIGH | ????? | ????? | NVD | 4 days ago |