Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2026-78213

Hepta Platforms｜Heptabase - Stored Cross-Site Scripting

Heptabase developed by Hepta Platforms, Inc. has a Stored Cross-Site Scripting vulnerability. Authenticated remote attackers can inject persistent malicious content into specific pages, causing arbitrary JavaScript code to execute when other users click the crafted content.

CVSS 4.0 · 6.2 Medium EPSS < 1% KEV · Not listed
Vendors
Hepta Platforms
Products
Heptabase
CVE-2026-12060

Hepta Platforms｜Heptabase - Exposed Dangerous

Heptabase developed by Hepta Platforms has a Exposed Dangerous Method or Function vulnerability, allowing unauthenticated remote attackers to leverage social engineering techniques to trick a victim into opening or loading a malicious webpage within the Heptabase application, thereby gaining unauthorized access to camera and microphone permissions.

CVSS 4.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Vendors
Hepta Platforms
Products
Heptabase