Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium4.6PPTAgent is an agentic framework for reflective PowerPoint generation.May 4, 2026
- Medium4.6PPTAgent is an agentic framework for reflective PowerPoint generation.May 4, 2026
- High8.1Evolver is a GEP-powered self-evolving engine for AI agents.May 4, 2026
- Low2.1A security flaw has been discovered in puchunjie doc-tools-mcp 1.0.18.May 4, 2026
- Low2.1A vulnerability was identified in ryanjoachim mcp-rtfm 0.1.0.May 4, 2026
- Low2.1A vulnerability has been found in ravenwits mcp-server-arangodb up to 0.4.7.May 4, 2026
- Low2.1A vulnerability has been found in AV Stumpfl Pixera Two Media Server up to 25.1 R2.May 3, 2026
- Low2.1A weakness has been identified in jsbroks COCO Annotator up to 0.11.1.May 3, 2026
- Low2.1A vulnerability was found in kerwincui FastBee up to 1.2.1.May 3, 2026
- Medium5.5A vulnerability was found in ruvnet sublinear-time-solver 1.5.0.May 2, 2026
- High7.5The Salon Booking System – Free Version plugin for WordPress is vulnerable to Arbitrary File Read in versions up to, and including, 10.30.25.May 2, 2026
- Low2.1A security vulnerability has been detected in 8nite metatrader-4-mcp 1.0.0.May 2, 2026
- Low2.1A vulnerability was detected in Dayoooun hwpx-mcp 0.2.0.May 1, 2026
- Medium5.5A vulnerability was detected in Flux159 mcp-game-asset-gen 0.1.0.May 1, 2026
- Medium5.5A vulnerability was determined in ghantakiran splunk-mcp-integration up to 0b86b09d5e5adf0433acd43c975951224613a1a6.May 1, 2026
- Medium5.5A vulnerability was found in ggerve coding-standards-mcp.May 1, 2026
- Critical9.8AGL app-framework-main thru 17.1.12 contains a Zip Slip path traversal vulnerability (CWE-22) combined with a TOCTOU race condition (CWE-367) in the widget installation flow.May 1, 2026
- Medium5.5A vulnerability has been found in Fujian Apex LiveBOS up to 2.0.May 1, 2026
- High7.8Profile import path traversal in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service and possible code executionMay 1, 2026
- Medium6.5IBM Langflow Desktop <=1.8.4 Langflow could allow a remote attacker to traverse directories on the system.Apr 30, 2026
- Medium6.5IBM Langflow Desktop 1.2.0 through 1.8.4 Langflow could allow an authenticated attacker to traverse directories on the system.Apr 30, 2026
- High7.8Traefik is an HTTP reverse proxy and load balancer.Apr 30, 2026
- High8.8An issue in the fileEntityId parameter in the /a/file/upload endpoint of JeeSite v5.15.1 allows authenticated attackers with file upload permissions to execute a path…Apr 30, 2026
- Critical10.0A path traversal vulnerability in the /content/images/add endpoint of shopizer v3.2.5 allows attackers write arbitrary files to any writeable path via a crafted POST request.Apr 30, 2026
- Critical9.6An issue in the fileMd5 parameter in the /a/file/upload endpoint of JeeSite v5.15.1 allows authenticated attackers with file upload permissions to execute a path trave…Apr 30, 2026