Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High8.7RansomLook exposed sensitive operator-side scraping configuration through multiple unauthenticated API responses.EPSS 0.8%Aug 24, 2026
- Medium6.9Ransomlook contains a Redis glob pattern injection vulnerability caused by insufficient neutralization of user-controlled input before it is incorporated into Redis SC…EPSS 0.4%Aug 24, 2026
- High7.4Git for Windows is the Windows port of Git.EPSS 0.5%Aug 21, 2026
- High7.5Combodo iTop is a web based IT service management tool.EPSS 0.5%Aug 21, 2026
- Medium5.3Combodo iTop is a web based IT service management tool.EPSS 0.3%Aug 21, 2026
- High7.5Checkmate is an open-source, self-hosted tool designed to track and monitor server hardware, uptime, response times, and incidents in real-time with beautiful visualizations.EPSS 0.5%Aug 21, 2026
- Medium4.3OpenList: Search metadata/count disclosure via Non-Separator-Aware Path Check in Bleve SearchEPSS 0.2%Jul 24, 2026
- UnknownClaude Code Action: Malicious MCP Server Configuration in PRs Enables Remote Code Execution and Secret ExfiltrationJun 10, 2026
- High7.5Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache OFBiz.EPSS 0.6%May 19, 2026
- High7.6Mattermost versions 11.5.x <= 11.5.1, 10.11.x <= 10.11.13, 11.4.x <= 11.4.3 fail to sanitize sensitive configuration fields in the Mattermost Calls plugin which allows…EPSS 0.4%May 18, 2026
- High8.7Mattermost versions 11.5.x <= 11.5.1, 10.11.x <= 10.11.13, 11.4.x <= 11.4.3 fail to sanitize sensitive configuration fields before including them in support packet gen…EPSS 0.4%May 18, 2026
- Low2.1A flaw has been found in Kilo-Org kilocode up to 7.0.47.EPSS 0.3%May 17, 2026
- Medium5.5A vulnerability was identified in h2oai h2o-3 up to 7402.EPSS 0.5%May 17, 2026
- Critical10.0Gemini CLI: Remote Code Execution via workspace trust and tool allowlisting bypassesApr 24, 2026
- High7.5Free5GC is an open-source Linux Foundation project for 5th generation (5G) mobile core networks.Apr 16, 2026
- Critical9.4Dgraph is an open source distributed GraphQL database.Apr 15, 2026
- Medium5.3ApostropheCMS is an open-source Node.js content management system.Apr 15, 2026
- Medium5.3ApostropheCMS is an open-source Node.js content management system.Apr 15, 2026
- Medium5.0Weblate is a web based localization tool.Apr 15, 2026
- High7.7Weblate is a web based localization tool.Apr 15, 2026
- Medium6.8Weblate is a web based localization tool.Apr 15, 2026
- High7.4Git for Windows is the Windows port of Git.Apr 15, 2026
- Low1.3In Grafana's alerting system, users with edit permissions for a contact point, specifically the permissions “alert.notifications:write” or “alert.notifications.receive…Apr 15, 2026
- Medium6.5The and connection properties were not marked as sensitive names in secrets masker.Apr 15, 2026
- Medium4.9October is a Content Management System (CMS) and web platform.Apr 14, 2026