Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- Medium6.5The Ninja Forms - The Contact Form Builder That Grows With You plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and includin…EPSS 0.2%Mar 28, 2026
- High8.3changedetection.io is a free open source web page change detection tool.EPSS 0.5%Mar 27, 2026
- Medium6.5Statamic is a Laravel and Git powered content management system (CMS).EPSS 0.4%Mar 27, 2026
- Medium6.5Statamic is a Laravel and Git powered content management system (CMS).EPSS 0.4%Mar 27, 2026
- Medium5.7LibreChat is a ChatGPT clone with additional features.EPSS 0.4%Mar 27, 2026
- High7.1In the latest version of mlflow/mlflow, when the app is enabled, tracing and assessment endpoints are not protected by permission validators.EPSS 0.3%Mar 27, 2026
- Low2.0A flaw has been found in OpenBMB XAgent 1.0.0.Mar 27, 2026
- Medium5.3WWBN AVideo is an open source video platform.EPSS 0.4%Mar 27, 2026
- Medium4.3Dovecot has provided a script to use for attachment to text conversion.EPSS 0.3%Mar 27, 2026
- High7.4cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library.EPSS 0.4%Mar 27, 2026
- Medium6.9Information disclosure in the file URI processing of File (Field) Paths in Drupal File (Field) Paths 7.x prior to 7.1.3 on Drupal 7.x allows authenticated users to dis…EPSS 0.4%Mar 26, 2026
- Medium5.3HCL Aftermarket DPC is affected by Internal IP Disclosure vulnerability will give attackers a clearer map of the organization’s network layout.EPSS 0.2%Mar 26, 2026
- Medium5.3HCL Aftermarket DPC is affected by Banner Disclosure vulnerability where attackers gain insights into the system’s software and version details which would allow them…EPSS 0.2%Mar 26, 2026
- High7.5HCL Aftermarket DPC is affected by File Discovery which allows attacker could exploit this issue to read sensitive files present in the system and may use it to craft…EPSS 0.3%Mar 26, 2026
- Low1.1A flaw has been found in Enter Software Iperius Backup up to 8.7.3.Mar 25, 2026
- High7.2IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.3 IBM WebSphere Application Server Liberty is affected by privilege escalation.EPSS 0.6%Mar 25, 2026
- Medium6.5A privacy issue was addressed by removing sensitive data.EPSS 0.5%Mar 25, 2026
- Medium5.5An authorization issue was addressed with improved state management.EPSS 0.2%Mar 25, 2026
- Medium5.3This issue was addressed with improved checks.EPSS 0.2%Mar 25, 2026
- High7.1Soft Serve is a self-hostable Git server for the command line.EPSS 0.4%Mar 24, 2026
- High7.1Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js.EPSS 0.5%Mar 24, 2026
- Low1.3Craft CMS is a content management system (CMS).EPSS 0.3%Mar 24, 2026
- Medium6.5Vikunja is an open-source self-hosted task management platform.EPSS 0.4%Mar 24, 2026
- High7.5Information disclosure in the Widget: Cocoa component.Mar 24, 2026
- Medium5.3Exposure of Sensitive Information to an Unauthorized Actor vulnerability in ixray-team ixray-1.6-stcop.This issue affects ixray-1.6-stcop: before 1.3.Mar 24, 2026