Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- High7.1PowerStore, contains a Path Traversal vulnerability in the Service user.EPSS 0.2%Apr 1, 2026
- High7.2Dell Secure Connect Gateway (SCG) 5.0 Appliance and Application version(s) 5.28.00.xx to 5.32.00.xx, contain(s) an Improper Limitation of a Pathname to a Restricted Di…EPSS 0.6%Apr 1, 2026
- Medium5.5A vulnerability was found in Sanster IOPaint 1.5.3.Apr 1, 2026
- Medium6.3Claude SDK for TypeScript provides access to the Claude API from server-side TypeScript or JavaScript applications.Mar 31, 2026
- High8.4An arbitrary file overwrite vulnerability in InTouch Contacts & Caller ID APP v6.38.1 allows attackers to overwrite critical internal files via the file import process…EPSS 0.2%Mar 31, 2026
- Critical9.8An arbitrary file overwrite vulnerability in Zora: Post, Trade, Earn Crypto v2.60.0 allows attackers to overwrite critical internal files via the file import process,…EPSS 0.8%Mar 31, 2026
- Critical9.8An arbitrary file overwrite vulnerability in Funambol, Inc.EPSS 0.8%Mar 31, 2026
- Critical9.8An arbitrary file overwrite vulnerability in PEAKSEL D.O.O.EPSS 0.8%Mar 31, 2026
- Critical9.0An arbitrary file overwrite vulnerability in UXGROUP LLC Cast to TV Screen Mirroring v2.2.77 allows attackers to overwrite critical internal files via the file import…EPSS 0.6%Mar 31, 2026
- High8.4An arbitrary file overwrite vulnerability in Squareapps LLC My Location Travel Timeline v11.80 allows attackers to overwrite critical internal files via the file impor…EPSS 0.2%Mar 31, 2026
- Critical9.8An arbitrary file overwrite vulnerability in FLY is FUN Aviation Navigation v35.33 allows attackers to overwrite critical internal files via the file import process, l…EPSS 0.8%Mar 31, 2026
- High8.4An arbitrary file overwrite vulnerability in PDF Reader App : TA/UTAX Mobile Print v3.7.2.251001 allows attackers to overwrite critical internal files via the file imp…EPSS 0.2%Mar 31, 2026
- Low2.0A vulnerability was found in CMS Made Simple up to 2.2.22.Mar 31, 2026
- High7.1OpenClaw before 2026.3.24 contains a sandbox bypass vulnerability in the message tool that allows attackers to read arbitrary local files by using mediaUrl and fileUrl…Mar 31, 2026
- High7.6A directory traversal vulnerability in the agentic-context-engine project versions up to 0.7.1 allows arbitrary file writes via the checkpoint_dir parameter in OfflineACE.run.EPSS 0.8%Mar 31, 2026
- Critical9.1A Path Traversal vulnerability affecting Factory Resource Management in DELMIA Factory Resource Manager from Release 3DEXPERIENCE R2023x through Release 3DEXPERIENCE R…EPSS 0.3%Mar 31, 2026
- High7.5LangChain is a framework for building agents and LLM-powered applications.Mar 31, 2026
- Medium6.5SciTokens is a reference library for generating and using SciTokens.EPSS 0.5%Mar 31, 2026
- High7.2baserCMS is a website development framework.EPSS 1.1%Mar 31, 2026
- High7.8Gotenberg is an API for converting document formats.EPSS 1.6%Mar 30, 2026
- Medium6.9Nginx UI is a web user interface for the Nginx web server.EPSS 0.5%Mar 30, 2026
- Critical10.0A path traversal vulnerability exists in the function within the file of the mlflow/mlflow repository.EPSS 0.6%Mar 30, 2026
- Medium5.5A vulnerability was found in elecV2 elecV2P up to 3.8.3.Mar 28, 2026
- Medium5.5A vulnerability has been found in elecV2 elecV2P up to 3.8.3.Mar 28, 2026
- Low2.1A security vulnerability has been detected in z-9527 admin up to 72aaf2dd05cf4ec2e98f390668b41e128eec5ad2.Mar 28, 2026