Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Low3.3This issue was addressed with improved permissions checking.May 11, 2026
- Critical9.4Authorization vulnerability in pgAdmin 4 server mode affecting Server Groups, Servers, Shared Servers, Background Processes, and Debugger modules.May 11, 2026
- High7.2Due to not validating the organization context when executing adaptive authentication flows, the WSO2 Identity Server allows adaptive authentication logic to be trigge…EPSS 0.4%May 11, 2026
- Low2.1A vulnerability was determined in Dotouch XproUPF 2.0.0-release-088aa7c4.May 10, 2026
- Critical9.4phpVMS is a PHP application to run and simulate an airline.May 9, 2026
- Medium6.8There is an Access Control Vulnerability in some HikCentral Professional versions.May 9, 2026
- High8.8Avo is a framework to create admin panels for Ruby on Rails apps.May 8, 2026
- Medium5.3Langfuse is an open source large language model engineering platform.May 8, 2026
- High8.1Dapr is a portable, event-driven, runtime for building distributed applications across cloud and edge.May 8, 2026
- High8.5PredatorSense version 3.00.3136 to 3.00.3196 contain Local Privilege Escalation (LPE) vulnerability.The program exposes a Windows Named Pipe that uses a custom protoco…May 8, 2026
- Critical9.9Netgate pfSense CE 2.8.0 allows code execution in the XMLRPC API via pfsense.exec_php.May 8, 2026
- High8.8UltraDAG is a minimal DAG-BFT blockchain in Rust.May 8, 2026
- Critical10.0OpenLearnX is an open-source, decentralized learning and assessment platform.May 8, 2026
- Medium5.5Nuclei is a vulnerability scanner built on a simple YAML-based DSL.May 8, 2026
- Low2.1A vulnerability has been found in eladmin up to 2.7.May 8, 2026
- Critical10.0Improper access control in Azure AI Foundry M365 published agents allows an unauthorized attacker to elevate privileges over a network.May 7, 2026
- Critical9.9Improper access control in Azure Managed Instance for Apache Cassandra allows an authorized attacker to execute code over a network.May 7, 2026
- Critical9.8Insecure Permissions vulnerability in grokability snipe-it v.8.4.0 and before and fixed after 2026-03-10 commit 676a9958 allows a remote attacker to execute arbitrary…May 7, 2026
- Critical9.8An Improper Access Control in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 allows a remote unauthenticated attacker to invoke arbitrary methods.May 7, 2026
- High8.8An Improper Access Control vulnerability in Ivanti EPMM before versions 12.6.1.1, 12.7.0.1, and 12.8.0.1 allows a remote authenticated attacker to gain administrative access.May 7, 2026
- High7.2NocoBase is an AI-powered no-code/low-code platform for building business applications and enterprise solutions.May 7, 2026
- Medium5.5A vulnerability has been found in PicoTronica e-Clinic Healthcare System ECHS 5.7.May 6, 2026
- Low3.1Inappropriate implementation in Navigation in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to bypass site is…May 6, 2026
- High7.7A vulnerability in the web-based management interface of Cisco IoT Field Network Director could allow an authenticated, remote attacker with low privileges to cause a…May 6, 2026
- Low2.9A vulnerability was detected in FlowiseAI Flowise up to 3.0.12.May 6, 2026