Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium5.4HCL BigFix Service Management (SM) is affected by a security misconfiguration due to a missing or insecure “X-Content-Type-Options” header.EPSS 0.1%May 6, 2026
- Medium6.5HCL BigFix Service Management (SM) had directories that were not linked or publicly visible but could be accessed directly.EPSS 0.2%May 6, 2026
- High7.5HCL BigFix Service Management (SM) is vulnerable to insufficiently protected credentials for a short duration while communicating with a backend, internal application…EPSS 0.2%May 6, 2026
- Medium5.3HCL BigFix Service Management (SM) is affected by an Information Disclosure – Server Banner issue was identified.EPSS 0.2%May 6, 2026
- Medium6.3A security flaw has been discovered in FlowiseAI Flowise up to 3.0.12.May 6, 2026
- High7.5Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Wicket.May 6, 2026
- High7.7The rtl8192cd Wi-Fi kernel driver in the Realtek rtl819x Jungle SDK (all known versions through v3.4.14B) does not perform any access control checks on the write_mem (…May 5, 2026
- Medium6.5The Subscribe To Comments Reloaded plugin for WordPress is vulnerable to unauthorized modification of data due to a leaked secret key and usage of a weak hash generati…May 5, 2026
- Medium6.5Nginx UI is a web user interface for the Nginx web server.May 4, 2026
- Medium6.5Nginx UI is a web user interface for the Nginx web server.May 4, 2026
- High7.5Prometheus is an open-source monitoring system and time series database.May 4, 2026
- Medium6.5titra is an open source time tracking project.May 4, 2026
- Medium5.3The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and incl…May 2, 2026
- Medium6.5The Widgets for Social Photo Feed plugin for WordPress is vulnerable to unauthorized access of data and modification of data due to a missing capability check on the '…EPSS 0.8%May 2, 2026
- Medium4.8CVE-2026-33448 is a format string vulnerability in the logging subsystem of Secure Access client for MacOS prior to 14.50.Apr 30, 2026
- Medium6.5Exposure of Sensitive Information to an Unauthorized Actor, Exposure of private personal information to an unauthorized actor vulnerability in MeWare Software Development Inc.Apr 30, 2026
- Critical9.1Plack::Middleware::XSendfile versions through 1.0053 for Perl can allow client-controlled path rewriting.Apr 29, 2026
- Medium5.5A security vulnerability has been detected in CodeAstro Online Job Portal 1.0.Apr 27, 2026
- Low2.9A vulnerability was detected in 666ghj MiroFish up to 0.1.2.Apr 26, 2026
- Low2.0A weakness has been identified in SmythOS sre up to 0.0.15.Apr 26, 2026
- Critical10.0Gemini CLI: Remote Code Execution via workspace trust and tool allowlisting bypassesEPSS 0.2%Apr 24, 2026
- Critical9.8Dgraph is an open source distributed GraphQL database.Apr 24, 2026
- Medium5.4OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems.Apr 24, 2026
- Critical9.9Exposure of sensitive information to an unauthorized actor in Azure IOT Central allows an authorized attacker to elevate privileges over a network.EPSS 0.7%Apr 24, 2026
- Critical9.1Kyverno is a policy engine designed for cloud native platform engineering teams.Apr 24, 2026