Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Critical9.1Better Auth 1.5.0-beta.12 before 1.7.7 Authentication Bypass via OAuth ProxyOct 14, 2026
- High8.6Better Auth @better-auth/sso before 1.7.3 Authentication Bypass via Personal SSO ProvidersOct 14, 2026
- Critical9.3Better Auth 1.4.0-beta.18 before 1.7.7 Authentication Bypass via Magic LinkOct 14, 2026
- High8.1FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations.Oct 14, 2026
- Medium6.4FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations.Oct 14, 2026
- Medium5.4FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations.Oct 14, 2026
- Medium5.5A security vulnerability has been detected in cemtan sar2html 4.0.0.Oct 14, 2026
- Medium5.9Multiple TP-Link Wi-Fi range extenders use a custom, reversible XOR-and-dictionary transformation in the HTTP web-management login flow.Oct 14, 2026
- High7.6Sentry is an application monitoring and error tracking platform.Oct 14, 2026
- Critical9.3An Improper Authentication vulnerability in the J-Web management interface and its NETCONF session handling of Juniper Networks Junos OS and Junos OS Evolved allows an…Oct 14, 2026
- Critical9.3An Improper Authentication vulnerability in J-Web of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network attacker to bypass J-Web authenti…Oct 14, 2026
- Critical9.3An Improper Authentication vulnerability in the J-Web web management component of Juniper Networks Junos OS allows an unauthenticated remote attacker to execute arbitr…Oct 14, 2026
- Critical9.1Zulip is an open-source team collaboration tool.Oct 14, 2026
- High8.8Improper authentication in PgBouncer 1.17.0 through 1.26.0 allows a remote attacker who knows the password of a user listed in auth_file to log in as any other user th…Oct 14, 2026
- High7.4The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to Authentication Bypass in versions up to, and inc…EPSS 0.4%Oct 14, 2026
- Medium5.3The Asaas Gateway for WooCommerce WordPress plugin before 2.7.8 does not properly authenticate its payment webhook, accepting an empty access token in its default conf…EPSS 0.2%Oct 14, 2026
- High8.6Ikaros 1.2.0 through 1.2.5 contains an authentication bypass vulnerability that allows attackers with a valid password to skip TOTP verification by reusing the login temp token.EPSS 0.4%Oct 13, 2026
- High7.1Nginx UI is a web user interface for the Nginx web server.EPSS 0.2%Oct 12, 2026
- High8.6Grav Login Plugin 2.7.0 before 3.9.9 2FA Bypass via Profile Update FormOct 12, 2026
- Medium5.5A vulnerability was identified in agno-agi agno up to 2.7.3/3.0.6.EPSS 0.5%Oct 12, 2026
- High8.8AmoyLab Unla through 0.10.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to obtain valid access tokens because the OAuth2 serv…EPSS 0.3%Oct 11, 2026
- Medium6.9Studio-Saelix Sencho Login Endpoint login improper authenticationEPSS 0.4%Oct 11, 2026
- Medium6.8AsyncHttpClient CookieStore Silently Overrides Caller's Explicit Cookie Header via setHeader (Bypass of CVE-2024-53990 Fix)EPSS 0.3%Oct 8, 2026
- Critical9.8IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to obt…EPSS 0.4%Oct 8, 2026
- Medium5.5Ahsay AhsayCBS Improper Authentication VulnerabilityKEVEPSS 0.4%Oct 4, 2026
102 records · page 1 of 5
PreviousNext