Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium5.5IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to cause a denial of service due to improper access control.EPSS 0.1%Oct 13, 2026
- Medium6.5IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information due to an exposure of sensitive information to…EPSS 0.3%Oct 12, 2026
- Medium6.5obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults.Oct 12, 2026
- High8.5Grav Login plugin 1.2.0 before 3.9.9 contains an information disclosure vulnerability that allows publishers to obtain password-reset tokens by authoring a page at the reset route.Oct 12, 2026
- High7.6Open WebUI 0.6.27 before 0.11.4 Session Token Disclosure via OAuth-Mode ConnectionsEPSS 0.3%Oct 12, 2026
- Medium5.5A security flaw has been discovered in tsi-coop tsi-dpdp-cms 0.5.0/0.5.1/0.5.2.EPSS 0.3%Oct 12, 2026
- Medium5.3Contao: Protected page content is disclosed to anonymous visitors after contao.search.index_protected is disabledEPSS 0.3%Oct 9, 2026
- High8.7Exposure of sensitive information to an unauthorized actor in Azure API Center allows an unauthorized attacker to disclose information over a network.EPSS 0.4%Oct 8, 2026
- Medium5.3An unauthenticated network-based attacker can query specific internal management endpoints on Brocade ASCG versions before 3.5.0 to enumerate the configuration details…EPSS 0.1%Oct 8, 2026
- High8.5PraisonAI: Crawl4AI/Chromium backend is also affected by the SSRF validation bypassOct 7, 2026
- High8.8Information leak in Autofill in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via a crafted HTML page.EPSS 0.3%Oct 6, 2026
- Medium6.5Information leak in Animation in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to leak sensitive information via a crafted HTML page.EPSS 0.3%Oct 6, 2026
- Medium4.3Information leak in Payments in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted HTML page.EPSS 0.3%Oct 6, 2026
- High7.2Payload is a free and open source headless content management system.EPSS 0.1%Oct 6, 2026
- High7.1Payload is a free and open source headless content management system.EPSS 0.3%Oct 6, 2026
- High7.1Payload is a free and open source headless content management system.EPSS 0.2%Oct 6, 2026
- Medium5.3HCL BigFix Service Management is affected by a Sensitive Information Leakage vulnerability, which could allow an unauthenticated attacker to extract internal IP addres…EPSS 0.2%Sep 18, 2026
- High7.5Trilium is an open-source hierarchical note-taking application.EPSS 0.4%Aug 27, 2026
- High8.7RansomLook exposed sensitive operator-side scraping configuration through multiple unauthenticated API responses.EPSS 0.8%Aug 24, 2026
- Medium6.9Ransomlook contains a Redis glob pattern injection vulnerability caused by insufficient neutralization of user-controlled input before it is incorporated into Redis SC…EPSS 0.4%Aug 24, 2026
- High7.4Git for Windows is the Windows port of Git.EPSS 0.5%Aug 21, 2026
- High7.5Combodo iTop is a web based IT service management tool.EPSS 0.5%Aug 21, 2026
- Medium5.3Combodo iTop is a web based IT service management tool.EPSS 0.3%Aug 21, 2026
- High7.5Checkmate is an open-source, self-hosted tool designed to track and monitor server hardware, uptime, response times, and incidents in real-time with beautiful visualizations.EPSS 0.5%Aug 21, 2026
- Medium4.3OpenList: Search metadata/count disclosure via Non-Separator-Aware Path Check in Bleve SearchEPSS 0.2%Jul 24, 2026