Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High8.8Improper access control in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.EPSS 0.7%Oct 13, 2026
- Critical9.8ProPhoenix Law RMS v2022.2403.3.101 was discovered to contain an incorrect access control issue in sensitive API endpoints.EPSS 0.4%Oct 13, 2026
- High7.5CAI Content Credentials is affected by an Improper Access Control vulnerability that could result in a Security feature bypass.EPSS 0.5%Oct 13, 2026
- High7.5CAI Content Credentials is affected by an Improper Access Control vulnerability that could result in a Security feature bypass.EPSS 0.5%Oct 13, 2026
- Critical9.1IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow an unauthenticated remote attacker to bypass access controls configured on gRPC service methods.EPSS 0.4%Oct 13, 2026
- Medium4.9Improper access control in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.EPSS 0.9%Oct 13, 2026
- High7.1Frappe before 13.46.3 and 14.x before 14.21.1 contains an improper access control vulnerability in Email Template permissions that allows any authenticated non-guest u…EPSS 0.2%Oct 12, 2026
- Medium4.3Convex is an open-source reactive database for application developers.Oct 12, 2026
- Low2.1A flaw has been found in KusalkaSilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2.EPSS 0.3%Oct 12, 2026
- Medium5.5A security flaw has been discovered in tsi-coop tsi-dpdp-cms 0.5.0/0.5.1/0.5.2.EPSS 0.3%Oct 12, 2026
- Medium6.5In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, and Splunk Secure Gateway versions below 3.10.11, 3.9.25, and 3.8.72, a user who does not hold…EPSS 0.2%Oct 7, 2026
- High8.2Dell System Update, versions prior to 2.3.0.0, contains an Improper Access Control vulnerability.EPSS 0.1%Oct 6, 2026
- High7.6Payload is a free and open source headless content management system.EPSS 0.2%Oct 6, 2026
- Critical9.3Payload is a free and open source headless content management system.EPSS 0.2%Oct 6, 2026
- Medium5.0HCL BigFix Service Management is affected by a Security Misconfiguration vulnerability, which could allow an authenticated attacker to exploit improper access controls…EPSS 0.2%Sep 18, 2026
- High7.8Microsoft Windows Link Following VulnerabilityKEVEPSS 0.4%Sep 8, 2026
- High7.1NLTK versions before 3.10.0 contain a logic bug in FileSystemPathPointer.open() where the sandbox validation check compares a normalized path against itself, making th…EPSS 0.4%Aug 22, 2026
- High7.1Improper access control in Microsoft Windows DNS allows an authorized attacker to perform tampering locally.EPSS 0.3%Jul 14, 2026
- Critical10.0Joomlack Page Builder Improper Access Control VulnerabilityKEVEPSS 30.9%Jun 29, 2026
- Critical10.0Widget Factory Joomla Content Editor Improper Access Control VulnerabilityKEVEPSS 16.2%Jun 5, 2026
- Critical9.3The vulnerability in the Tassos Framework Plugin allows users to delete arbitrary files on the affected sites.EPSS 0.4%May 27, 2026
- Critical10.0Ubiquiti UniFi OS Improper Access Control VulnerabilityKEVEPSS 15.2%May 21, 2026
- Medium5.3Improper Access Control vulnerability in Apache OFBiz in multi-tenant deployments.EPSS 0.5%May 19, 2026
- Low2.1A flaw has been found in Kilo-Org kilocode up to 7.0.47.EPSS 0.3%May 17, 2026
- Medium5.5A weakness has been identified in h2oai h2o-3 up to 7402.EPSS 0.5%May 17, 2026