Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High8.2When Jetty's make a request to a server through a forward proxy, the server may reply with a 407 (Proxy Authentication Required).Oct 15, 2026
- High8.2In Eclipse Jetty, HttpClient may receive a redirect of the form: If an attacker is able to control the redirects, then HttpClient matches authentication credentials ag…Oct 15, 2026
- High7.1GitPython before 3.2.0 Environment Variable Disclosure via .gitmodules Submodule NameOct 14, 2026
- Medium6.9A weakness has been identified in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e2449.Oct 14, 2026
- Medium5.3FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations.Oct 14, 2026
- Low3.7FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations.Oct 14, 2026
- High8.1WeGIA is a web manager for charitable institutions.Oct 14, 2026
- High8.2dbt enables data analysts and engineers to transform their data using the same practices that software engineers use to build applications.Oct 14, 2026
- Medium5.7A flaw was found in evolution-data-server.Oct 14, 2026
- High7.5FOG is a free open-source cloning/imaging/rescue suite/inventory management system.Oct 14, 2026
- Low3.3VeraCrypt provides disk encryption with strong security based on TrueCrypt.Oct 14, 2026
- High7.5Discourse is an open-source discussion platform.Oct 14, 2026
- Medium5.3Gitea uses inconsistent repository visibility predicates, and the condition used by some repository-listing endpoints admits repositories whose owners are hidden from the viewer.Oct 14, 2026
- Medium4.3Gitea's user organization-list API includes Limited-visibility organizations for authenticated restricted accounts without applying the visibility restriction enforced…Oct 14, 2026
- Critical9.2A vulnerability relating to the exposure of confidential information in the customer invoicing web application, which exposes personally identifiable information (PII)…EPSS 0.3%Oct 14, 2026
- Medium5.3The AWP Classifieds WordPress plugin before 4.4.9 does not verify that a request is authorised to view a listing when a payment transaction is referenced, allowing una…EPSS 0.2%Oct 14, 2026
- Medium5.3The GamiPress WordPress plugin before 8.0.6 does not properly authorize access to private activity log entries, allowing unauthenticated users to retrieve the private…EPSS 0.2%Oct 14, 2026
- Medium5.3The WP Data Access WordPress plugin before 5.5.84 does not restrict its database table export action to authorized users, gating it only with a token that the WP Data…EPSS 0.2%Oct 14, 2026
- Medium5.3The CodeAtoZ B2B Suite for WooCommerce WordPress plugin before 1.6.1 does not properly restrict access to guest-submitted quotes, allowing unauthenticated users to ret…EPSS 0.2%Oct 14, 2026
- Low3.1Apprise forwards configured auth headers across cross-origin HTTP redirectsEPSS 0.3%Oct 14, 2026
- High7.1Lenve vhr through commit 03abbd3 contains an information disclosure vulnerability that allows any authenticated user to retrieve other operators' BCrypt password hashe…EPSS 0.5%Oct 13, 2026
- Medium6.5Information leak in Passwords in Google Chrome prior to 155.0.8059.79 allowed a remote attacker leveraging social engineering to obtain sensitive information via a cra…EPSS 0.2%Oct 13, 2026
- Medium5.3FreeRDP from 3.0.0 before 3.32.0 contains an uninitialized memory disclosure vulnerability in smartcard_Transmit_Call that allows malicious RDP servers to read client memory.EPSS 0.2%Oct 13, 2026
- Medium5.3IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote attacker to enumerate user profiles due to the return of distinct error codes during the sign-on process.EPSS 0.2%Oct 13, 2026
- Medium5.5IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to cause a denial of service due to improper access control.EPSS 0.2%Oct 13, 2026
102 records · page 1 of 5
PreviousNext