Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High7.4Exposure of sensitive information to an unauthorized actor in Microsoft Authenticator allows an unauthorized attacker to disclose information over a network.May 14, 2026
- High7.8DevSpace is a client-only developer tool for cloud-native development with Kubernetes.May 14, 2026
- Medium4.3Multiple information disclosure vulnerabilities in Prisma Access Agent® allow a local user to access sensitive configuration data and credentials.EPSS 0.1%May 13, 2026
- Medium5.5Vercel’s AI Cloud is a unified platform for building modern applications.May 13, 2026
- High8.2urllib3 is an HTTP client library for Python.May 13, 2026
- Medium6.9Sensitive information disclosure vulnerability exists in the undisclosed iControl REST endpoint and TMOS Shell (tmsh) command which may allow an authenticated attacker…May 13, 2026
- Medium5.3When asked to both use a file for credentials and to follow HTTP redirects, libcurl could leak the password used for the first host to the followed-to host under certa…May 13, 2026
- Medium5.3The Broadstreet plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.53.1 via the get_sponsored_meta() AJAX action.EPSS 0.3%May 13, 2026
- Medium5.0Improper neutralization of input during web page generation ('cross-site scripting') in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.May 12, 2026
- High7.5Exposure of sensitive information to an unauthorized actor in Azure Entra ID allows an unauthorized attacker to perform spoofing over a network.May 12, 2026
- Medium6.5Exposure of sensitive information to an unauthorized actor in Power Automate allows an authorized attacker to disclose information over a network.May 12, 2026
- Critical9.8JunoClaw is an agentic AI platform built on Juno Network.May 12, 2026
- High7.3Exposure of HTTP Authentication Header to unexpected hosts during WebSocket authentication vulnerability in Apache Tomcat.May 12, 2026
- Critical9.1sealed-env is a cross-stack, zero-trust secret management library for Node.js and Java/Spring Boot.May 12, 2026
- Medium5.3The Slek Gateway for WooCommerce plugin for WordPress is vulnerable to Information Exposure in version 1.0.May 12, 2026
- High7.7WWBN AVideo is an open source video platform.May 11, 2026
- High8.2jotty·page is a self-hosted app for your checklists and notes.May 11, 2026
- High7.5An information leakage was addressed with additional validation.May 11, 2026
- High7.5This issue was addressed with improved access restrictions.May 11, 2026
- Medium5.5This issue was addressed with improved data protection.May 11, 2026
- Medium6.5This issue was addressed through improved state management.May 11, 2026
- Medium6.5An information leakage was addressed with additional validation.May 11, 2026
- None0.0WeGIA is a web manager for charitable institutions.May 11, 2026
- Medium6.9WeGIA is a web manager for charitable institutions.May 11, 2026
- Low2.3Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation Echo.May 11, 2026