Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- Low2.1A security vulnerability has been detected in z-9527 admin up to 72aaf2dd05cf4ec2e98f390668b41e128eec5ad2.Mar 28, 2026
- Medium5.5A security flaw has been discovered in Sinaptik AI PandasAI up to 3.0.0.Mar 28, 2026
- High8.6iSelect 1.4.0-2+b1 contains a local buffer overflow vulnerability that allows local attackers to execute arbitrary code by supplying an oversized value to the -k/--key parameter.EPSS 0.2%Mar 28, 2026
- High8.6Yasr 0.6.9-5 contains a buffer overflow vulnerability that allows local attackers to crash the application or execute arbitrary code by supplying an oversized argument…EPSS 0.2%Mar 28, 2026
- High8.6TiEmu 3.03-nogdb+dfsg-3 contains a buffer overflow vulnerability in the ROM parameter handling that allows local attackers to crash the application or execute arbitrary code.EPSS 0.2%Mar 28, 2026
- Medium6.5Mobile Next is an MCP server for mobile development and automation.Mar 27, 2026
- High8.8Langflow Langflow Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')KEVMar 27, 2026
- High8.2BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner.Mar 27, 2026
- High7.5A path traversal vulnerability exists in the awesome-llm-apps project in commit e46690f99c3f08be80a9877fab52acacf7ab8251 (2026-01-19) in the Beifong AI News and Podcas…EPSS 0.7%Mar 27, 2026
- Medium6.0Path Traversal vulnerability in NEC Platforms, Ltd.Mar 27, 2026
- Medium5.3When dovecot has been configured to use per-domain passwd files, and they are placed one path component above /etc, or slash has been added to allowed characters, path…EPSS 0.4%Mar 27, 2026
- Critical9.8BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner.Mar 27, 2026
- Critical9.6Incus is a system container and virtual machine manager.Mar 27, 2026
- Medium4.3Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline.EPSS 0.4%Mar 27, 2026
- High8.8Sharp is a content management framework built for Laravel as a package.Mar 26, 2026
- High7.5SiYuan is a personal knowledge management system.Mar 26, 2026
- High8.1Fireshare facilitates self-hosted media and link sharing.Mar 26, 2026
- Medium6.3A malicious SCP server can send unexpected paths that could make the client application override local files outside of working directory.EPSS 0.4%Mar 26, 2026
- High8.8Zoraxy is a general purpose HTTP reverse proxy and forwarding tool.Mar 26, 2026
- Medium6.5GoDoxy is a reverse proxy and container orchestrator for self-hosters.Mar 26, 2026
- Medium4.9Mattermost versions 11.4.x <= 11.4.0, 11.3.x <= 11.3.1, 11.2.x <= 11.2.3, 10.11.x <= 10.11.11 fail to validate Advanced Logging file target paths which allows system a…Mar 26, 2026
- High8.7OpenClaw before 2026.3.28 contains a path traversal vulnerability in media parsing that allows attackers to read arbitrary files by bypassing path validation in the is…EPSS 0.7%Mar 26, 2026
- High8.7Problem in the Small HTTP Server v3.06.36 service.EPSS 0.6%Mar 26, 2026
- High8.0Saloon is a PHP library that gives users tools to build API integrations and SDKs.EPSS 0.7%Mar 26, 2026
- High8.8The WP Job Portal plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the 'WPJOBPORTALcustomfields::removeFileCus…Mar 26, 2026