Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium6.5Exposure of sensitive information to an unauthorized actor in Windows Shell allows an authorized attacker to disclose information over a network.EPSS 1.0%Apr 14, 2026
- Medium5.5Exposure of sensitive information to an unauthorized actor in Windows Remote Procedure Call allows an authorized attacker to disclose information locally.EPSS 0.5%Apr 14, 2026
- Medium5.5Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally.EPSS 0.5%Apr 14, 2026
- Medium5.5Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally.EPSS 0.5%Apr 14, 2026
- Medium5.5Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an authorized attacker to disclose information locally.EPSS 0.5%Apr 14, 2026
- Medium4.3Exposure of sensitive information to an unauthorized actor in Windows Snipping Tool allows an unauthorized attacker to perform spoofing over a network.EPSS 3.5%Apr 14, 2026
- Medium4.3An exposure of sensitive information to an unauthorized actor vulnerability in Fortinet FortiNDR 7.6.0, FortiNDR 7.4.0 through 7.4.8, FortiNDR 7.2 all versions, FortiN…EPSS 0.3%Apr 14, 2026
- High7.1External Secrets Operator reads information from a third-party service and automatically injects the values as Kubernetes Secrets.Apr 14, 2026
- Low1.7Craft Commerce is an ecommerce platform for Craft CMS.Apr 13, 2026
- Medium5.5A vulnerability was found in code-projects Simple ChatBox 1.0.Apr 13, 2026
- Medium5.3OpenClaw Client PKCE Verifier Information Disclosure Vulnerability.Apr 11, 2026
- Medium5.5PraisonAI is a multi-agent teams system.Apr 10, 2026
- Medium6.1Cross Site Scripting vulnerability in Altenar Sportsbook Software Platform (SB2) v.2.0 allows a remote attacker to obtain sensitive information and execute arbitrary c…Apr 10, 2026
- Low2.1A vulnerability was found in code-projects Online Library Management System 1.0.Apr 10, 2026
- Medium5.3PraisonAI is a multi-agent teams system.Apr 9, 2026
- Medium6.5Directus is a real-time API and App dashboard for managing SQL database content.Apr 9, 2026
- Low2.1A weakness has been identified in code-projects Patient Record Management System 1.0.Apr 9, 2026
- High7.5HashiCorp’s go-getter library up to v1.8.5 may allow arbitrary file reads on the file system during certain git operations through a maliciously crafted URL.Apr 9, 2026
- High7.5An Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists in Apache DolphinScheduler.EPSS 0.5%Apr 9, 2026
- Low2.1A vulnerability has been found in code-projects Movie Ticketing System 1.0.Apr 9, 2026
- High7.5PraisonAI is a multi-agent teams system.Apr 8, 2026
- High7.5LiquidJS is a Shopify / GitHub Pages compatible template engine in pure JavaScript.Apr 8, 2026
- Medium5.3The Riaxe Product Customizer plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.4 via the '/wp-json/InkXEProd…Apr 8, 2026
- Medium4.3Plane is an an open-source project management tool.Apr 7, 2026
- High8.2Vite is a frontend tooling framework for JavaScript.Apr 7, 2026