Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- Low2.4The Google Cloud Storage for Craft CMS plugin provides a Google Cloud Storage integration for Craft CMS.EPSS 0.5%Mar 18, 2026
- Medium6.9The Amazon S3 for Craft CMS plugin provides an Amazon S3 integration for Craft CMS.EPSS 0.5%Mar 18, 2026
- Medium6.5IBM Planning Analytics Local 2.1.0 through 2.1.17 could allow an unauthorized access to sensitive application data and administrative functionalities due to lack of pr…EPSS 0.3%Mar 17, 2026
- Medium4.3Outline is a service that allows for collaborative documentation.EPSS 0.3%Mar 17, 2026
- Low2.3The extension fails to verify, if an authenticated user has permissions to access to redirects resulting in exposure of redirect records when editing a page.EPSS 0.3%Mar 17, 2026
- Medium5.3HCL AION is affected by a vulnerability where certain identifiers may be predictable in nature.EPSS 0.1%Mar 16, 2026
- Low1.1A vulnerability was detected in myAEDES App up to 1.18.4 on Android.EPSS 0.1%Mar 16, 2026
- Medium4.3Mattermost Plugins versions <=2.0.3.0 fail to properly mask sensitive configuration values which allows an attacker with access to support packets to obtain original p…EPSS 0.2%Mar 16, 2026
- Medium6.9wpDiscuz before 7.6.47 contains an information disclosure vulnerability that allows administrators to inadvertently expose OAuth secrets by exporting plugin options as JSON.EPSS 0.3%Mar 13, 2026
- Medium6.5Backstage is an open framework for building developer portals.EPSS 0.4%Mar 12, 2026
- Medium5.3Shopware is an open commerce platform.EPSS 0.3%Mar 12, 2026
- Medium5.3Shopware is an open commerce platform.EPSS 0.3%Mar 12, 2026
- Medium6.2Tina is a headless content management system.EPSS 0.6%Mar 12, 2026
- Medium4.8A vulnerability was identified in OpenClaw up to 2026.2.17.EPSS 0.2%Mar 12, 2026
- Medium6.9Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js.EPSS 0.5%Mar 11, 2026
- Medium6.9Shescape is a simple shell escape library for JavaScript.EPSS 0.3%Mar 11, 2026
- Medium5.4In Splunk Enterprise versions below 10.2.1 and 10.0.4, and Splunk Cloud Platform versions below 10.2.2510.5, 10.1.2507.16, and 10.0.2503.12, a low-privileged user that…EPSS 0.2%Mar 11, 2026
- Medium6.5In Splunk Enterprise versions below 10.2.0, 10.0.3, 9.4.9, and 9.3.10, and Splunk Cloud Platform versions below 10.2.2510.5, 10.1.2507.16, 10.0.2503.11, and 9.3.2411.1…EPSS 0.2%Mar 11, 2026
- Medium5.9The Guest posting / Frontend Posting / Front Editor WordPress plugin before 5.0.6 allows passing a URL parameter to regenerate a .json file based on demo data that it…EPSS 0.2%Mar 11, 2026
- High8.7Istio is an open platform to connect, manage, and secure microservices.EPSS 0.7%Mar 10, 2026
- Medium6.5Git for Windows is the Windows port of Git.EPSS 0.3%Mar 10, 2026
- High7.5FileBrowser Quantum is a free, self-hosted, web-based file manager.EPSS 0.5%Mar 10, 2026
- High8.7Glances is an open-source system cross-platform monitoring tool.EPSS 1.6%Mar 10, 2026
- Medium5.5Exposure of sensitive information to an unauthorized actor in Windows Accessibility Infrastructure (ATBroker.exe) allows an authorized attacker to disclose information locally.EPSS 0.6%Mar 10, 2026
- Medium5.3Exposure of sensitive information to an unauthorized actor in Windows Shell Link Processing allows an unauthorized attacker to perform spoofing over a network.EPSS 1.1%Mar 10, 2026