Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- Critical9.9Langflow is a tool for building and deploying AI-powered agents and workflows.EPSS 1.0%Mar 24, 2026
- High8.6Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in TeamJCD JoyConDroid (app/src/main/java/com/rdapps/gamepad/util modules).Mar 24, 2026
- High8.6Vulnerability in Spring Cloud when substituting the profile parameter from a request made to the Spring Cloud Config Server configured to the native file system as a b…EPSS 1.2%Mar 24, 2026
- High7.5Salvo is a Rust web framework.EPSS 0.6%Mar 24, 2026
- Critical9.6Tekton Pipelines project provides k8s-style resources for declaring CI/CD-style pipelines.EPSS 0.7%Mar 24, 2026
- High8.0Active Storage allows users to attach cloud and local files in Rails applications.EPSS 0.6%Mar 24, 2026
- High7.7Indico is an event management system that uses Flask-Multipass, a multi-backend authentication system for Flask.EPSS 1.0%Mar 23, 2026
- High8.7Census CSWeb 8.0.1 allows arbitrary file path input.EPSS 0.5%Mar 23, 2026
- Medium6.9Blinko is an AI-powered card note-taking project.EPSS 0.3%Mar 23, 2026
- Medium5.3Blinko is an AI-powered card note-taking project.EPSS 0.3%Mar 23, 2026
- Medium6.9Blinko is an AI-powered card note-taking project.EPSS 0.8%Mar 23, 2026
- High8.2Blinko is an AI-powered card note-taking project.EPSS 1.5%Mar 23, 2026
- Medium5.3Blinko is an AI-powered card note-taking project.EPSS 0.4%Mar 23, 2026
- High7.2WWBN AVideo is an open source video platform.EPSS 0.6%Mar 23, 2026
- High7.5WWBN AVideo is an open source video platform.EPSS 0.7%Mar 23, 2026
- High8.1WWBN AVideo is an open source video platform.EPSS 0.4%Mar 23, 2026
- High8.1WWBN AVideo is an open source video platform.EPSS 0.6%Mar 22, 2026
- High7.5WWBN AVideo is an open source video platform.EPSS 0.6%Mar 22, 2026
- High7.1NetNumber Titan Master 7.9.1 contains a path traversal vulnerability in the drp endpoint that allows authenticated users to download arbitrary files by injecting direc…EPSS 0.6%Mar 22, 2026
- Low2.1A vulnerability has been found in SSCMS 4.7.0.Mar 22, 2026
- High8.7phpTransformer 2016.9 contains a directory traversal vulnerability that allows unauthenticated attackers to access arbitrary files by manipulating the path parameter.EPSS 1.1%Mar 21, 2026
- Medium6.8SeoToaster Ecommerce 3.0.0 contains a local file inclusion vulnerability that allows authenticated attackers to read arbitrary files by manipulating path parameters in…EPSS 0.9%Mar 21, 2026
- High7.1Green CMS 2.x contains a path traversal vulnerability that allows authenticated attackers to download arbitrary files and directories by injecting directory traversal sequences.EPSS 1.1%Mar 21, 2026
- High7.2OpenClaw versions prior to 2026.2.26 contain a path traversal vulnerability in workspace boundary validation that allows attackers to write files outside the workspace…EPSS 0.5%Mar 21, 2026
- Medium4.9The EmailKit – Email Customizer for WooCommerce & WP plugin for WordPress is vulnerable to arbitrary file read via path traversal in all versions up to, and including, 1.6.3.Mar 21, 2026