Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- Low2.0A vulnerability was identified in taoofagi easegen-admin up to 8f87936ac774065b92fb20aab55b274a6ea76433.Mar 17, 2026
- Medium5.5A DTrace component, dtprobed, allows arbitrary file creation through crafted USDT provider names.EPSS 0.2%Mar 16, 2026
- High8.7ZwickRoell Test Data Management versions prior to 3.0.8 contain a local file inclusion (LFI) vulnerability in the /server/node_upgrade_srv.js endpoint.EPSS 1.1%Mar 16, 2026
- Medium5.3Craft CMS is a content management system (CMS).EPSS 0.4%Mar 16, 2026
- High7.5Doom Launcher 3.8.1.0 is vulnerable to Directory Traversal due to missing file path validation during the extraction of game filesEPSS 0.7%Mar 16, 2026
- Low2.1A vulnerability was identified in ThingsGateway 12.Mar 16, 2026
- Low2.0A vulnerability was determined in SSCMS up to 7.4.0.Mar 16, 2026
- High7.3Unraid Authentication Request Path Traversal Authentication Bypass Vulnerability.Mar 16, 2026
- High8.8Unraid Update Request Path Traversal Remote Code Execution Vulnerability.Mar 16, 2026
- Medium6.4AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting.EPSS 0.5%Mar 16, 2026
- Medium6.8PX4 autopilot is a flight control solution for drones.EPSS 0.3%Mar 16, 2026
- High7.5IceWarp collaboration Directory Traversal Information Disclosure Vulnerability.EPSS 4.9%Mar 16, 2026
- High7.1Path traversal in Smart Switch prior to version 3.7.69.15 allows adjacent attackers to overwrite arbitrary files with Smart Switch privilege.EPSS 0.2%Mar 16, 2026
- Medium5.9Path traversal in Galaxy Store prior to version 4.6.03.8 allows local attacker to create file with Galaxy Store privilege.EPSS 0.1%Mar 16, 2026
- High7.0Improper access control in Galaxy Store prior to version 4.6.03.8 allows local attacker to create file with Galaxy Store privilege.EPSS 0.1%Mar 16, 2026
- High8.7Path Traversal in Clasp impacting versions < 3.2.0 allows a remote attacker to perform remote code execution via a malicious Google Apps Script project containing spec…Mar 13, 2026
- High7.6Dagu is a workflow engine with a built-in Web user interface.EPSS 0.5%Mar 13, 2026
- Medium5.3SFTPGo is an open source, event-driven file transfer solution.EPSS 0.4%Mar 13, 2026
- Medium5.3SFTPGo is an open source, event-driven file transfer solution.EPSS 0.6%Mar 13, 2026
- High8.2calibre is a cross-platform e-book manager for viewing, converting, editing, and cataloging e-books.EPSS 0.2%Mar 13, 2026
- Medium5.3Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Erlang OTP (ssh_sftpd module) allows Path Traversal.EPSS 0.4%Mar 13, 2026
- High8.7Voltronic Power SNMP Web Pro version 1.1 contains a pre-authentication path traversal vulnerability in the upload.cgi endpoint that allows unauthenticated attackers to…EPSS 1.0%Mar 13, 2026
- Medium6.3Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache Livy.EPSS 0.6%Mar 13, 2026
- High8.7Black is the uncompromising Python code formatter.EPSS 0.7%Mar 12, 2026
- High8.8ZeptoClaw is a personal AI assistant.EPSS 0.8%Mar 12, 2026