Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium6.5Textpattern CMS 4.9.0 contains a Broken Access Control vulnerability in the article management system that allows authenticated users with low privileges to modify art…Apr 21, 2026
- High8.9FreeScout is a free self-hosted help desk and shared mailbox.Apr 21, 2026
- High8.8In Dolibarr ERP & CRM <= 22.0.4, PHP code detection and editing permission enforcement in the Website module is not applied consistently to all input parameters, allow…Apr 21, 2026
- Medium5.3XiangShan (open-source high-performance RISC-V processor) commit edb1dfaf7d290ae99724594507dc46c2c2125384 (2024-11-28) has improper gating of its distributed CSR write…Apr 21, 2026
- High8.8Neko is a a self-hosted virtual browser that runs in Docker and uses WebRTC In versions 3.0.0 through 3.0.10 and 3.1.0 through 3.1.1, any authenticated user can immedi…Apr 21, 2026
- High8.4OpenClaude is an open-source coding-agent command line interface for cloud and local model providers.Apr 21, 2026
- Medium5.3Dify is an open-source LLM app development platform.Apr 20, 2026
- High8.6Nginx UI is a web user interface for the Nginx web server.Apr 20, 2026
- Low2.0A vulnerability was identified in Z-BlogPHP 1.7.5.Apr 20, 2026
- Medium5.5A vulnerability was found in rickxy Hospital Management System up to 88a4290d957dc5bdde8a56e5ad451ad14f7f90f4.Apr 20, 2026
- Medium5.5A security flaw has been discovered in langflow-ai langflow up to 1.1.0.Apr 20, 2026
- Low2.0A vulnerability was detected in EyouCMS up to 1.7.1.Apr 19, 2026
- High7.6wger is a free, open-source workout and fitness manager.Apr 17, 2026
- Medium5.3zrok is software for sharing web services, files, and network resources.Apr 17, 2026
- Low2.3mcp-neo4j-cypher is an MCP server for executing Cypher queries against Neo4j databases.Apr 17, 2026
- Medium5.5A vulnerability was detected in arnobt78 Hotel Booking Management System up to f8922d0e0f6ac1cc761974c7616f44c2bbc04bea.Apr 17, 2026
- Low2.1A security flaw has been discovered in QueryMine sms up to 7ab5a9ea196209611134525ffc18de25c57d9593.Apr 17, 2026
- Medium6.5An issue in the Bluetooth Low Energy (BLE) control interface of the Yamaha SR-B30A sound bar firmware 2.40 (Mobile App: Sound Bar Remote / version: 2.40) allows remote…Apr 16, 2026
- Critical10.0The goodoneuz/pay-uz Laravel package (<= 2.2.24) contains a critical vulnerability in the /payment/api/editable/update endpoint that allows unauthenticated attackers t…Apr 16, 2026
- Low3.1Insufficient policy enforcement in CORS in Google Chrome prior to 147.0.7727.101 allowed a remote attacker who had compromised the renderer process to leak cross-origi…Apr 15, 2026
- Low3.1Insufficient policy enforcement in Passwords in Google Chrome prior to 147.0.7727.101 allowed a remote attacker who had compromised the renderer process to leak cross-…Apr 15, 2026
- Low3.1Weblate is a web based localization tool.Apr 15, 2026
- High7.5Incorrect access control in the config.php component of Slah v1.5.0 and below allows unauthenticated attackers to access sensitive information, including active sessio…Apr 15, 2026
- Medium4.3In Splunk Enterprise versions below 10.2.2, 10.0.5, 9.4.10, and 9.3.11, and Splunk Cloud Platform versions below 10.4.2603.0, 10.3.2512.6, 10.2.2510.10, 10.1.2507.19,…EPSS 0.2%Apr 15, 2026
- Medium5.5Improper access control in Microsoft Dynamics 365 (on-premises) allows an authorized attacker to disclose information locally.Apr 14, 2026