Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium6.3A security flaw has been discovered in FlowiseAI Flowise up to 3.0.12.May 6, 2026
- High7.5Bitcoin Core through 28.x has a security issue, the details of which are not disclosed.May 5, 2026
- Critical9.8Nginx UI is a web user interface for the Nginx web server.May 4, 2026
- High8.1IKUS Rdiffweb before 2.10.5 has an improper authorization flaw that allows an attacker with any valid or stolen access token to act as other users.May 4, 2026
- Critical9.4In Apache Iceberg, the table's metadata files are control files: they tell readers which data files belong to the table and which table version to read.May 4, 2026
- Medium5.5A flaw has been found in funadmin up to 7.1.0-rc6.May 4, 2026
- Low2.1A vulnerability was detected in code-projects BloodBank Managing System 1.0.May 4, 2026
- Medium5.5A weakness has been identified in MindsDB up to 26.01.May 4, 2026
- Low2.1A vulnerability was found in Acrel Electrical EEMS Enterprise Power Operation and Maintenance Cloud Platform 1.3.0.May 3, 2026
- Medium5.5A vulnerability was found in eyeo Adblock Plus up to 4.36.2 on Chrome.May 3, 2026
- Low2.0A vulnerability was detected in crmeb_java up to 1.3.4.May 3, 2026
- High7.8AGL app-framework-binder (afb-daemon) through v19.90.0 allows any local process to execute privileged supervision commands (Exit, Do, Sclose, Config, Trace, Debug, Tok…May 1, 2026
- Low2.0A weakness has been identified in MacCMS Pro up to 2022.1.3.May 1, 2026
- Critical9.8IBM i 7.6, 7.5, 7.4, 7.3, and 7.2 s vulnerable to privilege escalation caused by an invalid IBM i Web Administration GUI authorization check.Apr 30, 2026
- High8.1Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts.Apr 30, 2026
- Medium6.5Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts.Apr 30, 2026
- High7.5Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts.Apr 30, 2026
- Medium5.5A security vulnerability has been detected in 1024-lab smart-admin up to 3.30.0.Apr 30, 2026
- Low2.0A vulnerability was found in SourceCodester Pizzafy Ecommerce System 1.0.Apr 29, 2026
- High8.8Improper Privilege Management, Improper Access Control, Incorrect privilege assignment vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus…Apr 29, 2026
- High8.5An insecure direct object reference (IDOR) vulnerability in MphRx's Minerva V3.6.0, specifically in the endpoint '/minerva/moUser/show/'.Apr 28, 2026
- Critical9.4An insecure direct object reference (IDOR) vulnerability in MphRx's Minerva V3.6.0, specifically in the '/minerva/user/updateUserProfile' endpoint.Apr 28, 2026
- Low2.0A flaw has been found in code-projects Online Music Site 1.0.Apr 28, 2026
- Medium5.9In Spring AI, an attacker can bypass conversation isolation and exfiltrate sensitive memory from other users’ chat histories, including secrets and credentials, by inj…Apr 28, 2026
- Low2.0A vulnerability was identified in code-projects Online Lot Reservation System 1.0.Apr 27, 2026