Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium5.3Discourse is an open-source discussion platform.Mar 31, 2026
- Low2.0Discourse is an open-source discussion platform.Mar 31, 2026
- Medium4.3Discourse is an open-source discussion platform.Mar 31, 2026
- Medium5.3Discourse is an open-source discussion platform.Mar 31, 2026
- Medium4.3Discourse is an open-source discussion platform.Mar 31, 2026
- Medium5.3Discourse is an open-source discussion platform.Mar 31, 2026
- High7.5The Gravity SMTP plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.1.4.Mar 31, 2026
- High8.2A cross-session information disclosure vulnerability exists in the awesome-llm-apps project in commit e46690f99c3f08be80a9877fab52acacf7ab8251 (2026-01-19).Mar 30, 2026
- High7.1Unauthenticated credential disclosure in the wizard interface in ZTE ZXHN H188A V6.0.10P2_TE and V6.0.10P3N3_TE allows unauthenticated attackers on the local network t…Mar 30, 2026
- Medium5.5A vulnerability was found in PromtEngineer localGPT up to 4d41c7d1713b16b216d8e062e51a5dd88b20b054.Mar 28, 2026
- Low2.0A vulnerability was found in wandb OpenUI up to 1.0/3.5-turb.Mar 28, 2026
- Medium6.5The Ninja Forms - The Contact Form Builder That Grows With You plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and includin…EPSS 0.2%Mar 28, 2026
- High8.3changedetection.io is a free open source web page change detection tool.Mar 27, 2026
- Medium6.5Statamic is a Laravel and Git powered content management system (CMS).Mar 27, 2026
- Medium6.5Statamic is a Laravel and Git powered content management system (CMS).Mar 27, 2026
- Medium5.7LibreChat is a ChatGPT clone with additional features.Mar 27, 2026
- High7.1In the latest version of mlflow/mlflow, when the app is enabled, tracing and assessment endpoints are not protected by permission validators.EPSS 0.3%Mar 27, 2026
- Low2.0A flaw has been found in OpenBMB XAgent 1.0.0.Mar 27, 2026
- Medium5.3WWBN AVideo is an open source video platform.Mar 27, 2026
- Medium4.3Dovecot has provided a script to use for attachment to text conversion.EPSS 0.3%Mar 27, 2026
- High7.4cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library.Mar 27, 2026
- Medium6.9Information disclosure in the file URI processing of File (Field) Paths in Drupal File (Field) Paths 7.x prior to 7.1.3 on Drupal 7.x allows authenticated users to dis…EPSS 0.4%Mar 26, 2026
- Medium5.3HCL Aftermarket DPC is affected by Internal IP Disclosure vulnerability will give attackers a clearer map of the organization’s network layout.EPSS 0.2%Mar 26, 2026
- Medium5.3HCL Aftermarket DPC is affected by Banner Disclosure vulnerability where attackers gain insights into the system’s software and version details which would allow them…EPSS 0.2%Mar 26, 2026
- High7.5HCL Aftermarket DPC is affected by File Discovery which allows attacker could exploit this issue to read sensitive files present in the system and may use it to craft…EPSS 0.3%Mar 26, 2026