Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High8.5JunoClaw is an agentic AI platform built on Juno Network.May 12, 2026
- High7.1CWE-22: Improper Limitation of a Pathname to a Restricted Directory (“Path Traversal”) vulnerability that could cause unauthorized access to sensitive files when user-…May 12, 2026
- Medium4.6The automatic folder creation feature of Lhaz and Lhaz+ provided by Chitora soft contains a path traversal vulnerability.May 12, 2026
- Medium6.8Wireshark MCP is an MCP Server that turns tshark into a structured analysis interface, then layers in optional Wireshark suite utilities.May 11, 2026
- High8.7Outline is a service that allows for collaborative documentation.May 11, 2026
- Medium6.9MinIO is a high-performance object storage system.May 11, 2026
- High8.2jotty·page is a self-hosted app for your checklists and notes.May 11, 2026
- Medium6.9Audiobookshelf is a self-hosted audiobook and podcast server.May 11, 2026
- High7.8A parsing issue in the handling of directory paths was addressed with improved path validation.May 11, 2026
- Medium4.3Audiobookshelf is a self-hosted audiobook and podcast server.May 11, 2026
- Critical9.4oxyno-zeta/s3-proxy is an aws s3 proxy written in go.May 11, 2026
- High7.5A vulnerability in the handler of in mlflow/mlflow versions 3.9.0 and earlier allows an unauthenticated remote attacker to read arbitrary files from the server's files…May 11, 2026
- Medium6.8Crabbox before 0.9.0 contains a path traversal vulnerability in the Islo provider's workspace path resolution that allows attackers to supply absolute or relative path…May 11, 2026
- Medium6.7Tookie is a advanced OSINT information gathering tool.May 11, 2026
- Medium6.3OpenClaw before 2026.4.15 contains an arbitrary local file read vulnerability in the webchat audio embedding helper that fails to apply local media root containment checks.May 11, 2026
- Medium6.5pyLoad is a free and open-source download manager written in Python.May 11, 2026
- Medium6.5pyLoad is a free and open-source download manager written in Python.May 11, 2026
- Medium5.9An arbitrary file write vulnerability exists in Casdoor's Local File System storage provider.May 11, 2026
- High8.8Grav is a file-based Web platform.May 11, 2026
- High7.5docuFORM Managed Print Service Client 11.11c is vulnerable to a directory traversal allowing attackers to read arbitrary files via crafted url.EPSS 0.6%May 11, 2026
- High8.6Path traversal vulnerability exists in GROWI v7.5.0 and earlier, which may allow an attacker to execute arbitrary EJS templates on the server when an email server is r…May 11, 2026
- Low1.9A security vulnerability has been detected in npitre cramfs-tools up to 2.1.May 11, 2026
- Medium6.9WordPress Plugin amministrazione-aperta 3.7.3 contains a local file read vulnerability that allows unauthenticated attackers to read arbitrary files by exploiting insu…EPSS 0.2%May 10, 2026
- Medium5.5A vulnerability was determined in Industrial Application Software IAS Canias ERP 8.03.May 10, 2026
- High8.8AzuraCast is a self-hosted, all-in-one web radio management suite.May 9, 2026