Threat database

4 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
High	7.1	EPSS 0.1%	CVE-2026-94066Pond · Cross-site Scripting High7.1EPSS 0.1%2026-10-09CVE Database V5CVE-2026-94066 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SpabRice Pond pond allows Reflected XSS.This issue affects Pond: from n/a through 2.6.1. EPSS 0.1%Vulnerability SpabRice	CVE Database V5	2026-10-09
High	8.1	EPSS 0.5%	CVE-2026-28570Vavo Core · PHP Remote File Inclusion High8.1EPSS 0.5%2026-08-18CVE Database V5CVE-2026-28570 Unauthenticated Local File Inclusion in Vavo Core <= 2.3.0 versions. EPSS 0.5%Vulnerability SpabRice #cwe-98	CVE Database V5	2026-08-18
Medium	5.3	EPSS 0.3%	CVE-2026-39642Nyla · Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) Medium5.3EPSS 0.3%2026-05-26CVE Database V5CVE-2026-39642 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in SpabRice Nyla allows Code Injection. This issue affects Nyla: from n/a through 1.7. EPSS 0.3%Vulnerability SpabRice #cwe-80	CVE Database V5	2026-05-26
Medium	5.3	EPSS 0.3%	CVE-2026-39637Mogi · Missing Authorization Medium5.3EPSS 0.3%2026-04-08CVE Database V5CVE-2026-39637 Missing Authorization vulnerability in SpabRice Mogi mogi allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Mogi: from n/a through <= 1.2.3. EPSS 0.3%Vulnerability SpabRice	CVE Database V5	2026-04-08

Showing 1–4 of 4 results