Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium5.5A vulnerability was identified in h2oai h2o-3 up to 7402.EPSS 0.5%May 17, 2026
- High8.1Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline.May 15, 2026
- High7.1Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline.May 15, 2026
- Medium6.4Traefik is an HTTP reverse proxy and load balancer.May 15, 2026
- Medium6.5Medical Management System a81df1ce700a9662cb136b27af47f4cbde64156b is vulnerable to Insecure Permissions, which allows arbitrary user password reset.May 15, 2026
- High8.8Improper isolation of VCN-JPEG HW register space could allow a malicious Guest Virtual Machine (VM) or a process to perform unauthorized access to the register space o…May 15, 2026
- High8.5Rapid7 Metasploit Pro is vulnerable to a local privilege escalation attack that allows a user to gain SYSTEM level control of a Windows host.May 15, 2026
- Medium5.3Improper access control between the Joint Test Action Group (JTAG) and Advanced Extensible Interface (AXI) could allow an attacker with physical access to read or over…EPSS 0.1%May 15, 2026
- Medium5.5Inappropriate implementation in Chromoting in Google Chrome prior to 148.0.7778.168 allowed a local attacker to bypass discretionary access control via a malicious file.May 14, 2026
- Medium4.3Insufficient policy enforcement in Payments in Google Chrome on Android prior to 148.0.7778.168 allowed a remote attacker to bypass discretionary access control via a…May 14, 2026
- Low3.1Inappropriate implementation in ANGLE in Google Chrome on Windows prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to leak cr…May 14, 2026
- Low3.1Object corruption in Compositing in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to leak cross-origin data…May 14, 2026
- Medium5.3Northern.tech CFEngine Enterprise before 3.21.8, 3.24.3, and 3.27.0 has Incorrect Access Control.May 14, 2026
- High7.5hoppscotch is an open source API development ecosystem.May 13, 2026
- High8.1When a user's access to mint tokens for a service account is revoked, it is sometimes still possible to do so for a few seconds after the event.May 13, 2026
- High7.1An Editor can overwrite a dashboard not owned by them to acquire admin on that specific dashboard.May 13, 2026
- Medium4.3Editors could delete any annotation, even those they do not have read access to.May 13, 2026
- Critical9.1vm2 is an open source vm/sandbox for Node.js.May 13, 2026
- Medium6.8U-SPEED AC1200 Gigabit Wi-Fi Router (Model: T18-21K) V1.0 is vulnerable to Incorrect Access Control.May 13, 2026
- Medium5.3Flowsint is an open-source OSINT graph exploration tool designed for cybersecurity investigation, transparency, and verification.May 12, 2026
- Medium5.3GoJobs is a REST API for a Job Board platform.May 12, 2026
- Low2.3Flowsint is an open-source OSINT graph exploration tool designed for cybersecurity investigation, transparency, and verification.May 12, 2026
- Medium4.9A vulnerability exists in the web-based management interface of an AOS-10 Gateway that could allow an authenticated remote attacker to access sensitive files on the un…May 12, 2026
- Critical9.3Pulpy is a lightweight, cross-platform desktop application packager for web apps.May 12, 2026
- Critical9.8A improper access control vulnerability in Fortinet FortiAuthenticator 8.0.2, FortiAuthenticator 8.0.0, FortiAuthenticator 6.6.0 through 6.6.8, FortiAuthenticator 6.5.…May 12, 2026