Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium6.5The Breaking News WP plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.3.Apr 22, 2026
- Medium6.5WWBN AVideo is an open source video platform.Apr 21, 2026
- High8.1WWBN AVideo is an open source video platform.Apr 21, 2026
- High7.2Hermes WebUI contains an arbitrary file deletion vulnerability in the /api/session/delete endpoint that allows authenticated attackers to delete files outside the sess…Apr 21, 2026
- Medium5.3nesquena hermes-webui contains a trust-boundary failure vulnerability that allows authenticated attackers to set or change a session workspace to an arbitrary existing…Apr 21, 2026
- Medium5.4Tekton Pipelines project provides k8s-style resources for declaring CI/CD-style pipelines.Apr 21, 2026
- Medium6.5WWBN AVideo is an open source video platform.Apr 21, 2026
- High8.7goshs is a SimpleHTTPServer written in Go.Apr 21, 2026
- Critical9.1FreeScout is a free self-hosted help desk and shared mailbox.Apr 21, 2026
- High8.8Let's Encrypt client and ACME library written in Go (Lego).Apr 21, 2026
- Critical9.4excel-mcp-server is a Model Context Protocol server for Excel file manipulation.Apr 21, 2026
- Critical9.8CrowdStrike has released security updates to address a critical unauthenticated path traversal vulnerability (CVE-2026-40050) in LogScale.Apr 21, 2026
- Medium5.3Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Erlang OTP ssh (ssh_sftpd module) allows an authenticated SFTP user to…Apr 21, 2026
- High7.1Apktool is a tool for reverse engineering Android APK files.Apr 21, 2026
- High7.7Claude Code is an agentic coding tool.Apr 21, 2026
- Medium6.5The nbconvert tool, jupyter nbconvert, converts Jupyter notebooks to various other formats via Jinja templates.Apr 21, 2026
- Medium6.5The nbconvert tool, jupyter nbconvert, converts Jupyter notebooks to various other formats via Jinja templates.Apr 21, 2026
- High8.4OpenClaude is an open-source coding-agent command line interface for cloud and local model providers.Apr 21, 2026
- High8.1The Everest Forms plugin for WordPress is vulnerable to Arbitrary File Read and Deletion in all versions up to, and including, 3.4.4.Apr 20, 2026
- High8.1The wpForo Forum plugin for WordPress is vulnerable to Arbitrary File Deletion in versions up to and including 3.0.5.Apr 20, 2026
- Medium4.9Magento Long Term Support (LTS) is an unofficial, community-driven project provides an alternative to the Magento Community Edition e-commerce platform with a high lev…Apr 20, 2026
- High7.5Junrar is an open source java RAR archive library.Apr 20, 2026
- Low2.1A vulnerability was detected in p2r3 convert up to 6998584ace3e11db66dff0b423612a5cf91de75b.Apr 20, 2026
- Low2.1A vulnerability was found in SonicCloudOrg sonic-server up to 2.0.0.Apr 20, 2026
- Medium5.5A weakness has been identified in TransformerOptimus SuperAGI up to 0.0.14.Apr 20, 2026