Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Critical9.1frp is a fast reverse proxy.Apr 21, 2026
- Medium5.3HKUDS OpenHarness prior to PR #159 remediation contains a session key derivation vulnerability that allows authenticated participants in shared chats or threads to hij…Apr 20, 2026
- High7.7Roxy-WI is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers.Apr 20, 2026
- Medium5.5A security vulnerability has been detected in rowboatlabs rowboat up to 0.1.67.Apr 20, 2026
- Medium5.5A weakness has been identified in serge-chat serge up to 1.4TB.Apr 20, 2026
- Medium5.5A flaw has been found in TransformerOptimus SuperAGI up to 0.0.14.Apr 19, 2026
- Medium5.5A weakness has been identified in liangliangyy DjangoBlog up to 2.1.0.0.Apr 19, 2026
- Medium5.5A vulnerability was identified in liangliangyy DjangoBlog up to 2.1.0.0.Apr 19, 2026
- Medium6.9A vulnerability was identified in kodcloud KodExplorer up to 4.52.Apr 19, 2026
- Medium6.6Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 8.4 through 8.5 contain an improper authentication vulnerability.Apr 17, 2026
- High7.2Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 8.4 through 8.5 contain an improper authentication vulnerability.Apr 17, 2026
- Medium6.2Improper authentication in Windows Active Directory allows an unauthorized attacker to perform spoofing locally.EPSS 0.4%Apr 14, 2026
- High8.1A improper authentication vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.3, FortiSOAR PaaS 7.5.0 through 7.5.2, FortiSOAR on-premise 7.6.0 through 7.6.3, F…Apr 14, 2026
- Medium5.5A vulnerability was detected in zhayujie chatgpt-on-wechat CowAgent up to 2.0.4.Apr 12, 2026
- Medium5.5A weakness has been identified in zhayujie chatgpt-on-wechat CowAgent 2.0.4.Apr 12, 2026
- Medium6.9ajenti.plugin.core defines all necessary core elements to allow Ajenti to run properly.Apr 10, 2026
- Critical9.3ajenti.plugin.core defines all necessary core elements to allow Ajenti to run properly.Apr 10, 2026
- Critical9.1Vikunja is an open-source self-hosted task management platform.Apr 10, 2026
- Medium5.3The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 5.103.0.Apr 10, 2026
- Low3.1Flux notification-controller is the event forwarder and notification dispatcher for the GitOps Toolkit controllers.Apr 9, 2026
- Medium6.5CLIENT_CERT authentication does not fail as expected for some scenarios when soft fail is disabled and FFM is used in Apache Tomcat.Apr 9, 2026
- Critical9.1CLIENT_CERT authentication does not fail as expected for some scenarios when soft fail is disabled vulnerability in Apache Tomcat, Apache Tomcat Native.Apr 9, 2026
- High7.1Laravel Passport provides OAuth2 server support to Laravel.Apr 9, 2026
- High7.5A security flaw has been discovered in GL.iNet GL-RM1, GL-RM10, GL-RM10RC and GL-RM1PE 1.8.1.Apr 9, 2026
- High7.1LobeHub is a work-and-lifestyle space to find, build, and collaborate with agent teammates that grow with you.Apr 8, 2026