Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Low3.1BBOT's Symlink guard bypass in unarchive module allows planting symlinks during extractionEPSS 0.4%Jul 8, 2026
- High7.5A flaw was found in GLib.EPSS 0.8%Jun 30, 2026
- Critical10.0Adobe ColdFusion Path Traversal VulnerabilityKEVEPSS 42.4%Jun 30, 2026
- High7.5Zephyr's HTTP server (subsys/net/lib/http) provides a static-filesystem resource type (HTTP_RESOURCE_TYPE_STATIC_FS, available when CONFIG_FILE_SYSTEM is enabled) that…Jun 29, 2026
- Critical9.6NetLicensing MCP Server is a natural-language interface that enables agentic applications to manage the software-licensing lifecycle in Labs64 NetLicensing.Jun 18, 2026
- Medium6.5Cisco Catalyst SD-WAN Manager Directory or Path Traversal VulnerabilityKEVEPSS 28.2%Jun 15, 2026
- High7.3A path traversal vulnerability was identified in Kibana's dashboard management functionality.EPSS 0.2%May 28, 2026
- High8.4An issue was discovered in Canonical Multipass before version 1.16.3.EPSS 0.4%May 28, 2026
- Medium6.5SharpCompress is a fully managed C# library to deal with many compression types and formats.May 26, 2026
- Low3.5Magic Wormhole makes it possible to get arbitrary-sized files and directories from one computer to another.May 26, 2026
- High8.2Algernon is a small self-contained pure-Go web server.May 26, 2026
- High8.7Algernon is a small self-contained pure-Go web server.May 26, 2026
- Medium5.9An improper validation of the search parameter of the com_media files API endpoint leads to a path traversal vulnerability.May 26, 2026
- High7.5An improper validation of user-supplied input leads to a local file inclusion vulnerability.May 26, 2026
- Medium5.5A vulnerability was determined in Acrel Electrical EEMS Enterprise Power Operation and Maintenance Cloud Platform 1.3.0.May 26, 2026
- Medium6.9OpenKM 6.3.12 contains a local file inclusion vulnerability in the administrative scripting interface at /admin/Scripting that allows authenticated administrators to r…May 26, 2026
- Critical9.1Archive::Tar versions before 3.08 for Perl extract symlinks with attacker controlled targets outside the extraction directory.May 26, 2026
- Low2.1A vulnerability has been found in c-rick jimeng-mcp 1.10.0.May 25, 2026
- Low2.1A flaw has been found in dazeb markdown-downloader up to 3d4394b34b6c99d81af817623af55e3384df5a6a.May 25, 2026
- Low2.1A security flaw has been discovered in dazeb cline-mcp-memory-bank up to 55c81b9cf6c16700983c84dc4cdea3cafa19a75f.May 25, 2026
- Low2.1A vulnerability was identified in debugmcp mcp-debugger up to 0.20.0.May 25, 2026
- High8.7Softneta MedDream PACS Server Premium 6.7.1.1 contains a directory traversal vulnerability that allows unauthenticated attackers to read arbitrary files by manipulatin…May 25, 2026
- High8.7PCViewer vt1000 contains a directory traversal vulnerability that allows unauthenticated attackers to read arbitrary files by submitting relative path sequences in GET requests.May 25, 2026
- High8.3Kenik Camera management Panel is vulnerable to Path Traversal vulnerability.May 25, 2026
- Medium6.5Spring AI's support for Anthropic's Skills API used LLM-influenced filenames unsanitized in Path.resolve before writing files to disk.May 25, 2026