Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Low2.7An issue that could allow a user with access to a credential to view sensitive fields through an API response has been resolved.Apr 7, 2026
- Medium5.3WWBN AVideo is an open source video platform.Apr 6, 2026
- Medium5.3WWBN AVideo is an open source video platform.Apr 6, 2026
- High8.1Directus is a real-time API and App dashboard for managing SQL database content.Apr 6, 2026
- Medium5.3Directus is a real-time API and App dashboard for managing SQL database content.Apr 6, 2026
- Medium4.6An information disclosure vulnerability exists in AZIOT 1 Node Smart Switch (16amp)- WiFi/Bluetooth Enabled Software Version: 1.1.9 due to improper access control on t…Apr 6, 2026
- Medium5.5A vulnerability was detected in code-projects Online FIR System 1.0.Apr 6, 2026
- Low2.3Nhost is an open source Firebase alternative with GraphQL.Apr 6, 2026
- Medium5.5A vulnerability was found in code-projects Online Application System for Admission 1.0.Apr 6, 2026
- Medium5.5A vulnerability was found in Acrel Electrical Prepaid Cloud Platform 1.0.Apr 5, 2026
- Medium5.5A vulnerability was found in Tencent AI-Infra-Guard 4.0.Apr 5, 2026
- Medium5.5A vulnerability was identified in Technostrobe HI-LED-WR120-G2 5.5.0.1R6.03.30.Apr 5, 2026
- Low2.7Discourse is an open-source discussion platform.Apr 3, 2026
- Medium6.3Discourse is an open-source discussion platform.Apr 3, 2026
- Low2.9A vulnerability was identified in Newgen OmniDocs up to 12.0.00.Apr 2, 2026
- Low2.1Signal K Server is a server application that runs on a central hub in a boat.Apr 2, 2026
- High7.5Rack is a modular Ruby web server interface.Apr 2, 2026
- High7.5The W3 Total Cache plugin for WordPress is vulnerable to information exposure in all versions up to, and including, 2.9.3.Apr 2, 2026
- Low2.7AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python.Apr 1, 2026
- High7.5A non-default configuration in Sage DPW 2025_06_004 allows unauthenticated access to diagnostic endpoints within the Database Monitor feature, exposing sensitive infor…EPSS 0.3%Apr 1, 2026
- Medium5.3The Export All URLs WordPress plugin before 5.1 generates CSV filenames containing posts URLS (including private posts) in a predictable pattern using a random 6-digit number.Apr 1, 2026
- Medium6.5Inappropriate implementation in WebGL in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to obtain potentially sensitive information from process memor…Apr 1, 2026
- High7.5The application allows PDF JavaScript and document/print actions (such as WillPrint/DidPrint) to update form fields, annotations, or optional content groups (OCGs) imm…Apr 1, 2026
- Medium6.9XenForo before 2.3.7 allows information disclosure via local account page caching on shared systems.EPSS 0.1%Apr 1, 2026
- High8.2Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js.Mar 31, 2026