Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium5.3Mantis Bug Tracker (MantisBT) is an open source issue tracker.May 20, 2026
- Medium5.3Mantis Bug Tracker (MantisBT) is an open source issue tracker.May 19, 2026
- Medium5.7Joplin is an open source note-taking and to-do application that organises notes and lists into notebooks.May 19, 2026
- Medium5.3Mantis Bug Tracker (MantisBT) is an open source issue tracker.May 19, 2026
- Medium6.5libheif is a HEIF and AVIF file format decoder and encoder.May 19, 2026
- Medium6.5Firefox for iOS hosted Reader mode on an unauthenticated local web server, allowing another application on the same device to request arbitrary URLs and receive the re…May 19, 2026
- High7.5Information disclosure in the Graphics: WebGPU component.May 19, 2026
- High7.5Information disclosure in the IP Protection component.May 19, 2026
- High7.5Information disclosure in the DOM: Security component.May 19, 2026
- High7.5Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache OFBiz.EPSS 0.6%May 19, 2026
- Medium6.3There is an unauthorized access vulnerability in ZTE MU5250.May 19, 2026
- Medium5.3Discourse is an open-source discussion platform.May 19, 2026
- Medium6.5FacturaScripts is an open source accounting and invoicing software.May 18, 2026
- High7.5An issue in prestashop upsshipping all versions through at least 2.4.0 allows a remote attacker to obtain sensitive information via the /modules/upsshipping/logs/, and…May 18, 2026
- High7.6Mattermost versions 11.5.x <= 11.5.1, 10.11.x <= 10.11.13, 11.4.x <= 11.4.3 fail to sanitize sensitive configuration fields in the Mattermost Calls plugin which allows…EPSS 0.4%May 18, 2026
- High8.7Mattermost versions 11.5.x <= 11.5.1, 10.11.x <= 10.11.13, 11.4.x <= 11.4.3 fail to sanitize sensitive configuration fields before including them in support packet gen…EPSS 0.4%May 18, 2026
- Low2.1A flaw has been found in Kilo-Org kilocode up to 7.0.47.EPSS 0.3%May 17, 2026
- Medium5.5A vulnerability was identified in h2oai h2o-3 up to 7402.EPSS 0.5%May 17, 2026
- Medium6.5Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline.May 15, 2026
- Medium4.3Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline.May 15, 2026
- High7.4Microsoft APM is an open-source, community-driven dependency manager for AI agents.May 15, 2026
- Medium5.8Permission control vulnerability in calls.May 15, 2026
- Critical9.2Strapi is an open source headless content management system.May 14, 2026
- High7.4Exposure of sensitive information to an unauthorized actor in Microsoft Authenticator allows an unauthorized attacker to disclose information over a network.May 14, 2026
- High7.8DevSpace is a client-only developer tool for cloud-native development with Kubernetes.May 14, 2026