Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Critical9.1IBM Aspera HSTS for CP4I 1.5.1 through 1.5.19 is affected by an authentication bypass vulnerability.EPSS 0.5%May 27, 2026
- Critical9.8Improper Authentication vulnerability in Apache OFBiz via Password-Change Logic Flaw Leading to Remote Code Execution This issue affects Apache OFBiz: before 24.09.06.EPSS 1.3%May 19, 2026
- Medium5.3Improper Authentication vulnerability in Apache OFBiz.EPSS 0.6%May 19, 2026
- Critical10.0Improper authentication in Azure Local Disconnected Operations allows an unauthorized attacker to elevate privileges over a network.EPSS 0.9%May 18, 2026
- Critical10.0Cisco Catalyst SD-WAN Controller Authentication Bypass VulnerabilityKEVEPSS 91.8%May 14, 2026
- Medium5.5A flaw has been found in PrefectHQ prefect up to 3.6.13.May 4, 2026
- Medium5.5A vulnerability was detected in PrefectHQ prefect up to 3.6.21.May 4, 2026
- Medium5.5A flaw has been found in crocodilestick Calibre-Web-Automated up to 4.0.6.May 4, 2026
- Medium5.5A security flaw has been discovered in YunaiV yudao-cloud up to 3.8.0.May 4, 2026
- Medium5.5A security flaw has been discovered in YunaiV yudao-cloud up to 2026.01.May 3, 2026
- Medium5.5A vulnerability has been found in innocommerce InnoShop up to 0.7.8.May 2, 2026
- Critical9.8MERCURY MIPC252W IP camera 1.0.5 Build 230306 Rel.79931n contains an improper authentication vulnerability in the RTSP service.Apr 27, 2026
- Medium6.5Improper Handling of TLS Client Authentication Failure Leading to Anonymous Principal Assignment in Apache Storm Versions Affected: up to 2.8.7 Description: When TLS t…Apr 27, 2026
- Low2.9A vulnerability was found in NousResearch hermes-agent 0.8.0.Apr 27, 2026
- Low2.9A vulnerability has been found in NousResearch hermes-agent 0.8.0.Apr 27, 2026
- Medium5.5A flaw has been found in 666ghj MiroFish up to 0.1.2.Apr 26, 2026
- Medium5.5A security vulnerability has been detected in SmythOS sre up to 0.0.15.Apr 26, 2026
- Critical9.1Budibase is an open-source low-code platform.Apr 24, 2026
- Medium6.5Axios is a promise based HTTP client for the browser and Node.js.Apr 24, 2026
- High7.7Flowise is a drag & drop user interface to build a customized large language model flow.Apr 23, 2026
- Critical10.0Paperclip is a Node.js server and React UI that orchestrates a team of AI agents to run a business.Apr 23, 2026
- High8.8MinIO is a high-performance object storage system.Apr 22, 2026
- High8.8MinIO is a high-performance object storage system.Apr 22, 2026
- Critical9.2Oxia is a metadata store and coordination system.Apr 21, 2026
- Critical9.1frp is a fast reverse proxy.Apr 21, 2026