Threat database

8 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
High	7.1	EPSS 0.2%	CVE-2026-42693Jannah · Cross-site Scripting High7.1EPSS 0.2%2026-10-10CVE Database V5CVE-2026-42693 CVE-2026-42693 is a high-severity cross-site scripting (XSS) vulnerability affecting TieLabs Jannah versions up to and including 7.6.5. The flaw allows unauthenticated attackers to inject malicious scripts during web page generation due to improper input neutralization. This vulnerability can lead to partial confidentiality, integrity, and availability impacts. EPSS 0.2%Vulnerability TieLabs #cwe-79	CVE Database V5	2026-10-10
High	8.1	EPSS 0.6%	CVE-2026-25464Jannah · Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File… High8.1EPSS 0.6%2026-03-25CVE Database V5CVE-2026-25464 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in TieLabs Jannah jannah allows PHP Local File Inclusion.This issue affects Jannah: from n/a through <= 7.6.4. EPSS 0.6%Vulnerability TieLabs	CVE Database V5	2026-03-25
High	7.1	EPSS 0.2%	CVE-2025-64207Jannah · Cross-site Scripting High7.1EPSS 0.2%2025-12-18CVE Database V5CVE-2025-64207 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in TieLabs Jannah jannah allows DOM-Based XSS.This issue affects Jannah: from n/a through <= 7.6.0. EPSS 0.2%Vulnerability TieLabs	CVE Database V5	2025-12-18
Critical	9.8	EPSS 0.5%	CVE-2025-64206Jannah · Deserialization of Untrusted Data Critical9.8EPSS 0.5%2025-12-18CVE Database V5CVE-2025-64206 Deserialization of Untrusted Data vulnerability in TieLabs Jannah jannah allows Object Injection.This issue affects Jannah: from n/a through <= 7.6.0. EPSS 0.5%Vulnerability TieLabs	CVE Database V5	2025-12-18
High	8.1	EPSS 0.4%	CVE-2025-64205Jannah · Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File… High8.1EPSS 0.4%2025-12-18CVE Database V5CVE-2025-64205 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in TieLabs Jannah jannah allows PHP Local File Inclusion.This issue affects Jannah: from n/a through <= 7.6.0. EPSS 0.4%Vulnerability TieLabs	CVE Database V5	2025-12-18
Medium	6.5	EPSS 0.2%	CVE-2025-64208Jannah - Extensions · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in TieLabs Jannah… Medium6.5EPSS 0.2%2025-10-29CVE Database V5CVE-2025-64208 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in TieLabs Jannah - Extensions jannah-extensions allows DOM-Based XSS.This issue affects Jannah - Extensions: from n/a through <= 1.1.4. EPSS 0.2%Vulnerability TieLabs	CVE Database V5	2025-10-29
Medium	6.5	EPSS 0.2%	CVE-2025-64202Sahifa · Cross-site Scripting Medium6.5EPSS 0.2%2025-10-29CVE Database V5CVE-2025-64202 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in TieLabs Sahifa sahifa allows DOM-Based XSS.This issue affects Sahifa: from n/a through < 5.8.6. EPSS 0.2%Vulnerability TieLabs	CVE Database V5	2025-10-29
High	8.1	EPSS 0.5%	CVE-2025-53334Jannah · Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File… High8.1EPSS 0.5%2025-08-28CVE Database V5CVE-2025-53334 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in TieLabs Jannah jannah allows PHP Local File Inclusion.This issue affects Jannah: from n/a through < 7.5.1. EPSS 0.5%Vulnerability TieLabs	CVE Database V5	2025-08-28

Showing 1–8 of 8 results