Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Critical9.1hoppscotch is an open source API development ecosystem.Feb 26, 2026
- High8.2Improper session management in D-Link Wireless N 300 ADSL2+ Modem Router DSL-124 ME_1.00 allows attackers to execute a session hijacking attack via spoofing the IP add…EPSS 0.1%Feb 26, 2026
- Medium6.5Discourse is an open source discussion platform.Feb 26, 2026
- Medium4.3Packistry is a self-hosted Composer repository designed to handle PHP package distribution.Feb 26, 2026
- Low1.1A flaw has been found in Chia Blockchain 2.1.0.Feb 25, 2026
- Low2.9A security vulnerability has been detected in Chia Blockchain 2.1.0.Feb 25, 2026
- Critical9.8A vulnerability in the API user authentication of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to gain access to an affected system as…EPSS 0.8%Feb 25, 2026
- High7.1FileBrowser Quantum is a free, self-hosted, web-based file manager.Feb 25, 2026
- Critical10.0Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass VulnerabilityKEVEPSS 88.5%Feb 25, 2026
- High7.5NVIDIA Delegated Licensing Service for all appliance platforms contains a vulnerability where an attacker could exploit an improper authentication issue.Feb 24, 2026
- Medium5.5A vulnerability was determined in DataLinkDC dinky up to 1.2.5.Feb 24, 2026
- Critical9.1Sentry is a developer-first error tracking and performance monitoring tool.Feb 21, 2026
- High8.1Strimzi provides a way to run an Apache Kafka cluster on Kubernetes or OpenShift in various deployment configurations.Feb 21, 2026
- Critical9.4An Authentication Bypass vulnerability in Smanga 3.2.7 allows an unauthenticated attacker to reset the password of any user (including the administrator) and fully tak…EPSS 0.4%Feb 20, 2026
- Low3.1When doing SSH-based transfers using either SCP or SFTP, and asked to do public key authentication, curl would wrongly still ask and authenticate using a locally running SSH agent.EPSS 0.5%Jan 8, 2026
- High8.2An issue was discovered in Wekan The Open Source kanban board system up to version 18.15, fixed in 18.16.EPSS 0.3%Dec 15, 2025
- Medium5.4An issue was discovered in allauth-django before 65.13.0.EPSS 0.2%Dec 15, 2025
- High8.1Filament is a collection of full-stack components for accelerated Laravel development.EPSS 0.3%Dec 10, 2025
- Low2.7The Nextcloud Approval app allows approval or disapproval of files in the sidebar.EPSS 0.3%Dec 5, 2025
- High7.5Oracle E-Business Suite Server-Side Request Forgery (SSRF) VulnerabilityKEVEPSS 95.9%Oct 11, 2025
- Critical9.8Oracle E-Business Suite Unspecified VulnerabilityKEVEPSS 99.7%Oct 4, 2025
- Critical9.9FOG is a free open-source cloning/imaging/rescue suite/inventory management system.EPSS 20.9%Sep 6, 2025
- Medium6.5Microsoft SharePoint Improper Authentication VulnerabilityKEVEPSS 99.1%Jul 8, 2025
- Critical10.0Quest KACE Systems Management Appliance (SMA) Improper Authentication VulnerabilityKEVEPSS 2.5%Jun 24, 2025
- High7.2ConnectWise ScreenConnect Improper Authentication VulnerabilityKEVEPSS 3.5%Apr 25, 2025