Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- Medium5.3Exposure of Sensitive Information to an Unauthorized Actor vulnerability in ixray-team ixray-1.6-stcop.This issue affects ixray-1.6-stcop: before 1.3.Mar 24, 2026
- Critical9.3Census CSWeb 8.0.1 allows "app/config" to be reachable via HTTP in some deployments.EPSS 0.4%Mar 23, 2026
- Medium6.9Blinko is an AI-powered card note-taking project.EPSS 0.7%Mar 23, 2026
- Medium5.5The Sprig Plugin for Craft CMS is a reactive Twig component framework for Craft CMS.EPSS 0.4%Mar 23, 2026
- Medium5.3The King Addons for Elementor – 4,000+ ready Elementor sections, 650+ templates, 70+ FREE widgets for Elementor plugin for WordPress is vulnerable to unauthenticated A…EPSS 0.2%Mar 23, 2026
- Medium4.3Discourse is an open-source discussion platform.EPSS 0.3%Mar 20, 2026
- High7.5HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare interoperability in Java.EPSS 0.5%Mar 20, 2026
- Medium5.3WWBN AVideo is an open source video platform.EPSS 0.4%Mar 20, 2026
- Medium6.5SiYuan is a personal knowledge management system.EPSS 0.6%Mar 20, 2026
- Critical9.6Anchorr is a Discord bot for requesting movies and TV shows and receiving notifications when items are added to a media server.EPSS 0.7%Mar 20, 2026
- Medium5.3Discourse is an open-source discussion platform.EPSS 0.3%Mar 20, 2026
- Medium5.3Discourse is an open-source discussion platform.EPSS 0.4%Mar 20, 2026
- Medium6.5SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application.EPSS 0.4%Mar 20, 2026
- Low2.7Discourse is an open-source discussion platform.EPSS 0.5%Mar 19, 2026
- Medium6.5Discourse is an open-source discussion platform.EPSS 0.5%Mar 19, 2026
- Medium6.5Discourse is an open-source discussion platform.EPSS 0.4%Mar 19, 2026
- Medium6.0OpenClaw versions prior to 2026.2.23 contain a sandbox bypass vulnerability in the sandboxed image tool that fails to enforce tools.fs.workspaceOnly restrictions on mo…EPSS 0.5%Mar 19, 2026
- High7.5Exposure of sensitive information to an unauthorized actor in Azure Data Factory allows an unauthorized attacker to disclose information over a network.EPSS 0.8%Mar 19, 2026
- Critical9.2OPEXUS eComplaint and eCASE before version 10.1.0.0 include the secret verification code in the HTTP response when requesting a password reset via 'ForcePasswordReset.aspx'.EPSS 0.5%Mar 19, 2026
- Medium4.3The Download Manager plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'reviewUserStatus' function in all vers…EPSS 0.4%Mar 19, 2026
- High8.2Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js.EPSS 0.5%Mar 18, 2026
- Critical9.1Glances is an open-source system cross-platform monitoring tool.EPSS 0.6%Mar 18, 2026
- Medium4.3Jenkins LoadNinja Plugin 2.1 and earlier does not mask LoadNinja API keys displayed on the job configuration form, increasing the potential for attackers to observe an…EPSS 0.3%Mar 18, 2026
- High7.5Glances is an open-source system cross-platform monitoring tool.EPSS 0.6%Mar 18, 2026
- High8.7Glances is an open-source system cross-platform monitoring tool.EPSS 1.7%Mar 18, 2026