Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Critical9.3Feathersjs is a framework for creating web APIs and real-time applications with TypeScript or JavaScript.Mar 10, 2026
- High7.8Improper authentication in Azure Arc allows an authorized attacker to elevate privileges locally.Mar 10, 2026
- High7.8Improper authentication in Windows SMB Server allows an authorized attacker to elevate privileges locally.Mar 10, 2026
- High7.8Improper authentication in Windows SMB Server allows an authorized attacker to elevate privileges locally.Mar 10, 2026
- Critical9.8The Tutor LMS Pro plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 3.9.5 via the Social Login addon.EPSS 0.7%Mar 10, 2026
- High8.2FreshRSS is a free, self-hostable RSS aggregator.EPSS 0.3%Mar 9, 2026
- Medium5.5A vulnerability was identified in doramart DoraCMS 3.0.x.Mar 9, 2026
- Low2.1A security flaw has been discovered in suitenumerique messages 0.2.0.Mar 8, 2026
- Critical9.3Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js.Mar 7, 2026
- High8.8Caddy is an extensible server platform that uses TLS by default.Mar 7, 2026
- High8.2ZITADEL is an open source identity management platform.Mar 7, 2026
- High8.8OliveTin gives access to predefined shell commands from a web interface.Mar 6, 2026
- High8.0Rocket.Chat is an open-source, secure, fully customizable communications platform.Mar 6, 2026
- Critical9.3Rocket.Chat is an open-source, secure, fully customizable communications platform.Mar 6, 2026
- High8.0Natro Macro is an open-source Bee Swarm Simulator macro written in AutoHotkey.Mar 6, 2026
- Critical9.0OneUptime is a solution for monitoring and managing online services.Mar 6, 2026
- Medium5.3Talishar is a fan-made Flesh and Blood project.Mar 6, 2026
- Critical9.8WWBN AVideo is an open source video platform.Mar 6, 2026
- Medium6.3OpenClaw version 2026.1.14-1 prior to 2026.2.2, with the Matrix plugin installed and enabled, contain a vulnerability in which DM allowlist matching could be bypassed…Mar 5, 2026
- Critical9.8Authentication bypass in the Microsoft Entra ID (Azure AD) authentication mode in Devolutions Server 2025.3.15.0 and earlier allows an unauthenticated user to authenti…Mar 3, 2026
- Critical9.8OpenEMR is a free and open source electronic health records and medical practice management application.Mar 3, 2026
- Critical10.0A remote authentication bypass vulnerability exists in HPE AutoPass License Server (APLS).Mar 2, 2026
- Critical9.8WeGIA is a web manager for charitable institutions.Feb 27, 2026
- High8.8Statmatic is a Laravel and Git powered content management system (CMS).Feb 27, 2026
- Medium5.3The Japanized for WooCommerce plugin for WordPress is vulnerable to Improper Authentication in versions up to, and including, 2.8.4.EPSS 0.4%Feb 27, 2026