Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Low2.3Inbox Zero is an AI personal assistant for email.May 11, 2026
- Low1.1Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki.May 11, 2026
- High7.7Grav is a file-based Web platform.May 11, 2026
- Low2.1Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki.May 11, 2026
- Medium5.5Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki.May 11, 2026
- Medium4.8Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation CheckUser.May 11, 2026
- Low1.3Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation MediaWiki.May 11, 2026
- Medium5.1Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation OATHAuth.May 11, 2026
- Medium6.3Quarkus OpenAPI Generator is Quarkus' extensions for generation of Rest Clients and server stubs generation.May 9, 2026
- Medium5.3The Activity Logs, User Activity Tracking, Multisite Activity Log from Logtivity plugin for WordPress is vulnerable to Authentication Bypass to Information Disclosure…May 9, 2026
- Medium4.3AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting.May 8, 2026
- Medium4.4Cilium is a networking, observability, and security solution with an eBPF-based dataplane.May 8, 2026
- Medium5.1SolidCAM-GPPL-IDE is an unofficial, independently developed extension, Postprocessor IDE for SolidCAM.May 8, 2026
- Low3.4draw.io is a configurable diagramming and whiteboarding application.May 8, 2026
- Critical9.1Instances deployed via the Proxmox extension allow unauthorized access to instances belonging to other tenants.May 8, 2026
- Medium5.5electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client.May 8, 2026
- Critical9.6Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes.May 7, 2026
- High7.5Exposure of sensitive information to an unauthorized actor in Azure DevOps allows an unauthorized attacker to disclose information over a network.May 7, 2026
- High8.6Inngest is a platform for running event-driven and scheduled background functions with queueing, retries, and step orchestration.May 7, 2026
- Low2.7Admidio is an open-source user management solution.May 7, 2026
- Medium5.5A vulnerability has been found in PicoTronica e-Clinic Healthcare System ECHS 5.7.May 6, 2026
- Medium4.3Inappropriate implementation in V8 in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to obtain potentially sensitive information from process memory vi…May 6, 2026
- High7.5Sensitive data exposure leading to admin/WLAN credential leak in ZTE ZXHN H298A 1.1 and H108N 2.6.May 6, 2026
- Low2.9A vulnerability was detected in FlowiseAI Flowise up to 3.0.12.May 6, 2026
- High8.8HCL BigFix Service Management (SM) is affected by use of a vulnerable WSGI Server was identified.EPSS 0.2%May 6, 2026