Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium4.4Improper access control in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to bypass a security feature locally.Apr 14, 2026
- High7.8Improper access control in Microsoft Management Console allows an authorized attacker to elevate privileges locally.EPSS 0.3%Apr 14, 2026
- High7.8Improper access control in Windows RPC API allows an authorized attacker to elevate privileges locally.Apr 14, 2026
- Medium6.8October is a Content Management System (CMS) and web platform.EPSS 0.4%Apr 14, 2026
- Medium5.5Improper access control in Universal Plug and Play (upnp.dll) allows an authorized attacker to disclose information locally.EPSS 0.4%Apr 14, 2026
- High7.5An Improper Access Control vulnerability could allow a malicious actor with access to the UniFi Play network to obtain UniFi Play WiFi credentials.EPSS 0.4%Apr 13, 2026
- Critical9.8An Improper Access Control vulnerability could allow a malicious actor with access to the UniFi Play network to enable SSH to make unauthorized changes to the system.EPSS 0.4%Apr 13, 2026
- Low2.1A vulnerability was identified in CodeAstro Online Job Portal 1.0.Apr 13, 2026
- Critical9.8Totara LMS v19.1.5 and before is vulnerable to Incorrect Access Control.Apr 13, 2026
- Medium6.5Access control vulnerability in the memo module.Apr 13, 2026
- Medium5.3FastGPT is an AI Agent building platform.Apr 10, 2026
- High7.5An issue was discovered in BMC Control-M/MFT 9.0.20 through 9.0.22.Apr 10, 2026
- Low2.1A vulnerability was found in code-projects Online Library Management System 1.0.Apr 10, 2026
- High8.8Directus is a real-time API and App dashboard for managing SQL database content.Apr 9, 2026
- Low2.1A weakness has been identified in code-projects Patient Record Management System 1.0.Apr 9, 2026
- Low2.1A vulnerability has been found in code-projects Movie Ticketing System 1.0.Apr 9, 2026
- Medium6.5Policy bypass in LocalNetworkAccess in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.Apr 8, 2026
- High8.8Inappropriate implementation in V8 in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.Apr 8, 2026
- High8.7Zammad is a web based open source helpdesk/customer support system.Apr 8, 2026
- Low2.1Zammad is a web based open source helpdesk/customer support system.Apr 8, 2026
- High7.8mise manages dev tools like node, python, cmake, and terraform.Apr 7, 2026
- Critical9.1Podman Desktop is a graphical tool for developing on containers and Kubernetes.Apr 7, 2026
- High8.2Vite is a frontend tooling framework for JavaScript.Apr 7, 2026
- High7.5In GenieACS 1.2.13, an unauthenticated access vulnerability exists in the NBI API endpoint.EPSS 0.4%Apr 7, 2026
- Medium5.3OrangeHRM is a comprehensive human resource management (HRM) system.Apr 7, 2026