Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Critical9.8IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to obt…EPSS 0.4%Oct 8, 2026
- Medium5.5Ahsay AhsayCBS Improper Authentication VulnerabilityKEVEPSS 0.7%Oct 4, 2026
- Critical9.8Improper Authentication vulnerability in DIAEnergie allows Authentication Bypass.EPSS 0.4%Sep 24, 2026
- Critical9.1Dell ObjectScale, versions prior to ObjectScale 4.4.0.0, contains an Improper Authentication vulnerability.EPSS 0.5%Sep 16, 2026
- Critical9.8JFrog Artifactory Improper Authentication VulnerabilityKEVEPSS 14.1%Aug 28, 2026
- High7.5JFrog Artifactory Improper Authentication VulnerabilityKEVEPSS 9.8%Aug 12, 2026
- Critical9.8Apple macOS Improper Authentication VulnerabilityKEVEPSS 1.7%Aug 6, 2026
- Critical9.3Check Point SmartConsole Improper Authentication VulnerabilityKEVEPSS 78.0%Jul 22, 2026
- Critical9.6Prowler is a cloud security platform.EPSS 0.9%Jul 10, 2026
- High8.8BerriAI LiteLLM Improper Authentication VulnerabilityKEVEPSS 0.8%Jul 8, 2026
- Critical10.0Kestra OSS OS Command Injection VulnerabilityKEVEPSS 2.1%Jun 26, 2026
- Critical9.3Check Point Security Gateway Improper Authentication VulnerabilityKEVEPSS 85.3%Jun 8, 2026
- Critical9.8Oracle E-Business Suite Improper Privilege Management VulnerabilityKEVEPSS 0.8%May 28, 2026
- Critical9.1IBM Aspera HSTS for CP4I 1.5.1 through 1.5.19 is affected by an authentication bypass vulnerability.EPSS 0.5%May 27, 2026
- Critical9.8Improper Authentication vulnerability in Apache OFBiz via Password-Change Logic Flaw Leading to Remote Code Execution This issue affects Apache OFBiz: before 24.09.06.EPSS 1.3%May 19, 2026
- Medium5.3Improper Authentication vulnerability in Apache OFBiz.EPSS 0.6%May 19, 2026
- Critical10.0Improper authentication in Azure Local Disconnected Operations allows an unauthorized attacker to elevate privileges over a network.EPSS 0.9%May 18, 2026
- Critical10.0Cisco Catalyst SD-WAN Controller Authentication Bypass VulnerabilityKEVEPSS 91.8%May 14, 2026
- Medium6.2Improper authentication in Windows Active Directory allows an unauthorized attacker to perform spoofing locally.EPSS 0.4%Apr 14, 2026
- Critical9.8Authentication bypass in the Microsoft Entra ID (Azure AD) authentication mode in Devolutions Server 2025.3.15.0 and earlier allows an unauthenticated user to authenti…Mar 3, 2026
- Critical9.8OpenEMR is a free and open source electronic health records and medical practice management application.Mar 3, 2026
- Critical10.0A remote authentication bypass vulnerability exists in HPE AutoPass License Server (APLS).Mar 2, 2026
- Critical9.8WeGIA is a web manager for charitable institutions.Feb 27, 2026
- High8.8Statmatic is a Laravel and Git powered content management system (CMS).Feb 27, 2026
- Medium5.3The Japanized for WooCommerce plugin for WordPress is vulnerable to Improper Authentication in versions up to, and including, 2.8.4.Feb 27, 2026