Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: Chaitin Clear all filters
TI-2026-83820 CVE-2026-120428 · GHSA-7h72-q9rr-77j7

Stored cross-site scripting in PandaWiki via static file uploads

Priority MEDIUM 56

PandaWiki 3.65.0 through 3.87.5 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to upload HTML files with image extensions via /share/v1/common/file/upload.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00359 Published 2026-11-02 No fix listed CWE-79
TI-2026-62495 CVE-2026-92749 · GHSA-9q3x-j473-5399

SafeLine through 9.4.1 Authentication Bypass via Weak Session Secret

Priority HIGH 75

SafeLine through 9.4.1 derives the management console session-signing secret from a time-seeded math/rand generator, allowing attackers to reconstruct the key offline.

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.00712 Published 2026-09-16 No fix listed CWE-338