Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High7.1A permissions issue was addressed with additional restrictions.EPSS 0.2%Apr 2, 2026
- Low2.9A vulnerability was identified in Newgen OmniDocs up to 12.0.00.Apr 2, 2026
- Medium6.9Signal K Server is a server application that runs on a central hub in a boat.Apr 2, 2026
- Critical9.8Customer Managed ShareFile Storage Zones Controller (SZC) allows an unauthenticated attacker to access restricted configuration pages.Apr 2, 2026
- Medium5.5A vulnerability was found in SourceCodester/mayuri_k Best Courier Management System 1.0.Apr 2, 2026
- High8.8CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support.Apr 1, 2026
- High8.8CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support.Apr 1, 2026
- Medium5.5A weakness has been identified in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DN…Apr 1, 2026
- Medium5.5A security flaw has been discovered in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-32…Apr 1, 2026
- Critical9.8Reviactyl is an open-source game server management panel built using Laravel, React, FilamentPHP, Vite, and Go.Apr 1, 2026
- High8.6An improper access check allows unauthorized access to webservice endpoints.Apr 1, 2026
- Medium6.3The ajax component was excluded from the default logged-in-user check in the administrative area.EPSS 0.2%Apr 1, 2026
- Low2.1A vulnerability was detected in Harvard University IQSS Dataverse up to 6.8.EPSS 0.3%Apr 1, 2026
- Medium5.5A vulnerability was identified in Shandong Hoteam InforCenter PLM up to 8.3.8.Apr 1, 2026
- High7.1Addressed a potential insecure direct object reference (IDOR) vulnerability in the signing invitation acceptance process.Apr 1, 2026
- Low2.1A vulnerability was identified in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DN…Mar 31, 2026
- High7.3WWBN AVideo is an open source video platform.Mar 31, 2026
- High7.5Admidio is an open-source user management solution.Mar 31, 2026
- Medium5.1Discourse is an open-source discussion platform.Mar 31, 2026
- Low2.1A vulnerability has been found in SourceCodester Simple Doctors Appointment System up to 1.0.Mar 31, 2026
- Medium5.3A flaw in Node.js Permission Model network enforcement leaves Unix Domain Socket (UDS) server operations without the required permission checks, while all comparable n…EPSS 0.2%Mar 30, 2026
- High8.2A cross-session information disclosure vulnerability exists in the awesome-llm-apps project in commit e46690f99c3f08be80a9877fab52acacf7ab8251 (2026-01-19).Mar 30, 2026
- Medium6.3A security vulnerability has been detected in osrg GoBGP up to 4.3.0.Mar 30, 2026
- Medium6.5DDSN Interactive cm3 Acora CMS version 10.7.1 contains an improper access control vulnerability.Mar 30, 2026
- Medium6.3A security flaw has been discovered in osrg GoBGP up to 4.3.0.Mar 30, 2026