Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High7.0Multiple smartphones provided by Rakuten Mobile, Inc.EPSS 0.2%Oct 14, 2026
- Critical9.3Grav Login OAuth plugin (grav-plugin-login-oauth) before 1.4.3 provisions OAuth accounts as ordinary Grav users with a deterministic .Oct 12, 2026
- Critical9.3Weak credentials in the CashDro 3 web administration panel, version 24.01.00.26, where the platform allows the use of numeric PINs for user authentication.May 8, 2026
- Critical9.3BridgeHead FileStore versions prior to 24A (released in early 2024) expose the Apache Axis2 administration module on network-accessible endpoints with default credenti…Apr 24, 2026
- High8.4Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.5, LTS2025 release version 8.3.1.0 through 8.3.1.…Apr 17, 2026
- Critical9.8Use of a deterministic credential generation algorithm in /ftl/bin/calc_f2 in Small Cell Sercomm SCE4255W (FreedomFi Englewood) firmware before DG3934v3@2308041842 all…Mar 19, 2026
- Critical9.8OpenMQ exposes a TCP-based management service (imqbrokerd) that by default requires authentication.Mar 3, 2026
7 records · page 1 of 1
PreviousNext