Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium5.9FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations.Oct 14, 2026
- High8.3holaOS through 2026.822.1 Missing Authorization in Channel-Gateway ConnectorsOct 14, 2026
- Critical9.3Komodo through 2.3.3 contains an authentication bypass vulnerability in the Periphery agent that allows unauthenticated attackers to connect as a trusted Core because…Oct 14, 2026
- High7.7Epic Games Unreal Engine versions up to and including 5.8.0 ship with an insecure default configuration for the LaunchURL Blueprint node (UKismetSystemLibrary::LaunchURL).EPSS 0.4%Oct 13, 2026
- Medium4.3In Splunk Enterprise versions below 10.4.3, 10.2.7, and 10.0.10, a low-privileged user that does not hold the "admin" or "power" Splunk roles could retrieve original s…EPSS 0.2%Oct 7, 2026
- Critical9.3rConfig Core 8.0.0 before 8.2.10 contains an authentication bypass vulnerability that allows unauthenticated attackers to self-register accounts with full Administrato…EPSS 0.8%Aug 24, 2026
- High8.7NLTK versions before 3.10.0 default to ENFORCE=False in pathsec.py, causing all security validation functions to emit warnings instead of raising exceptions.EPSS 0.5%Aug 22, 2026
- Medium6.9Misskey is an open source, federated social media platform.EPSS 0.3%Dec 16, 2025
- Medium5.3TeleMessage TM SGNL Initialization of a Resource with an Insecure Default VulnerabilityKEVEPSS 11.1%May 28, 2025
- Low3.6shadow-utils (aka shadow) 4.4 through 4.17.0 establishes a default /etc/subuid behavior (e.g., uid 100000 through 165535 for the first user account) that can realistic…Dec 26, 2024
- Critical9.8Unitronics Vision PLC and HMI Insecure Default Password VulnerabilityKEVEPSS 2.1%Dec 5, 2023
- Critical9.8Apache Superset Insecure Default Initialization of Resource VulnerabilityKEVEPSS 97.4%Apr 24, 2023
- Critical9.8Apache CouchDB Insecure Default Initialization of Resource VulnerabilityKEVEPSS 92.5%Apr 26, 2022
- Critical9.8Apache Airflow's Experimental API Authentication BypassKEVEPSS 99.8%Nov 10, 2020
14 records · page 1 of 1
PreviousNext