Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High8.1e107 is a content management system (CMS).May 26, 2026
- Low2.9A security vulnerability has been detected in fraillt bitsery up to 5.2.4.May 26, 2026
- Low2.1A flaw has been found in changmingxie tcc-transaction up to 2.1.0.May 25, 2026
- High8.8Improper input validation in Azure Virtual Network Gateway allows an authorized attacker to execute code over a network.May 22, 2026
- High7.7Improper input validation in Azure Compute Gallery allows an authorized attacker to disclose information over a network.May 22, 2026
- High8.7An authentication logic vulnerability in multiple TP-Link range extenders allows an unauthenticated attacker on an adjacent network to manipulate a login parameter and…May 22, 2026
- High7.6TypeBot is a chatbot builder tool.May 22, 2026
- High7.5The fix for CVE-2025-48913: Apache CXF: Untrusted JMS configuration can lead to RCE was not complete, meaning that another path in the code might lead to code executio…May 22, 2026
- Critical9.1A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi OS devices to execute a Command Injection.May 22, 2026
- Critical10.0Ubiquiti UniFi OS Improper Input Validation VulnerabilityKEVEPSS 45.8%May 21, 2026
- High8.6Improper input validation, Unrestricted upload of file with dangerous type vulnerability in Gmission Web Fax allows Remote Code Inclusion.May 21, 2026
- Medium5.3Insufficient validation of untrusted input in Input in Google Chrome on prior to 148.0.7778.179 allowed a remote attacker who had compromised the renderer process to l…May 20, 2026
- High7.4Yii 2 is a PHP application framework.May 20, 2026
- Medium6.5In Splunk Enterprise versions below 10.2.2, 10.0.5, 9.4.11, and 9.3.12, and Splunk Cloud Platform versions below 10.4.2603.1, 10.3.2512.9, 10.2.2510.11, 10.1.2507.21,…May 20, 2026
- High7.5Multiple flaws have been identified in related to the handling of DNS messages whose CLASS is not Internet ( ) — for example, or , or DNS messages that specify meta-cl…May 20, 2026
- Critical9.6Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component.EPSS 0.4%May 19, 2026
- Medium6.5Improper Input Validation vulnerability in Apache OFBiz.EPSS 0.7%May 19, 2026
- Low3.3in OpenHarmony v6.0 and prior versions allow a local attacker cause DOS.May 19, 2026
- High7.2FacturaScripts is an open source accounting and invoicing software.May 18, 2026
- Critical9.8Microsoft Edge (Chromium-based) Remote Code Execution VulnerabilityEPSS 1.0%May 18, 2026
- Medium5.4Improper input validation in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature over a network.EPSS 0.4%May 18, 2026
- Medium6.5An attacker in a privileged network position may be able to leak sensitive information.May 18, 2026
- Medium5.5A vulnerability was identified in xiandafu beetl up to 3.20.2.May 17, 2026
- Medium5.5A security flaw has been discovered in h2oai h2o-3 up to 7402.EPSS 0.4%May 17, 2026
- Low2.1A vulnerability was identified in Oinone Pamirs up to 7.2.0.May 17, 2026