Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High7.4In Eclipse Jetty, the class JASPIAuthenticator initiates the authentication checks, which set two ThreadLocal variable.Apr 8, 2026
- Critical9.2PolarLearn is a free and open-source learning program.Apr 7, 2026
- Critical9.3Rack::Session is a session management implementation for Rack.Apr 7, 2026
- Medium5.5A vulnerability was identified in Totolink A8000R 5.9c.681_B20180413.Apr 6, 2026
- Critical9.4LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format.Apr 6, 2026
- Medium5.5A vulnerability was found in assafelovic gpt-researcher up to 3.4.3.Apr 6, 2026
- Medium6.9A security vulnerability has been detected in JeecgBoot 3.9.0/3.9.1.Apr 6, 2026
- Medium5.5A vulnerability was determined in Technostrobe HI-LED-WR120-G2 5.5.0.1R6.03.30.Apr 5, 2026
- Low2.1A vulnerability was detected in badlogic pi-mono up to 0.58.4.Apr 5, 2026
- Critical9.3Hirschmann HiOS and HiSecOS products RSP, RSPE, RSPS, RSPL, MSP, EES, EESX, GRS, OS, RED, EAGLE contain an authentication bypass vulnerability in the HTTP(S) managemen…EPSS 0.5%Apr 3, 2026
- Critical9.3ProSoft Technology ICX35-HWC version 1.3 and prior cellular gateways contain an authentication bypass vulnerability in the web user interface that allows unauthenticat…EPSS 0.5%Apr 3, 2026
- Medium5.0OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems.Apr 3, 2026
- High8.8OAuthenticator is software that allows OAuth2 identity providers to be plugged in and used with JupyterHub.Apr 3, 2026
- Critical9.3Hirschmann Industrial HiVision versions prior to 06.0.07 and 07.0.03 contains an authentication bypass vulnerability in the master service that allows unauthenticated…EPSS 1.0%Apr 3, 2026
- High7.5Improper authentication in Azure SRE Agent allows an unauthorized attacker to disclose information over a network.Apr 3, 2026
- High8.7Bulwark Webmail is a self-hosted webmail client for Stalwart Mail Server.Apr 2, 2026
- Critical9.3Hirschmann HiEOS devices versions prior to 01.1.00 contain an authentication bypass vulnerability in the HTTP(S) management module that allows unauthenticated remote a…EPSS 0.5%Apr 2, 2026
- Medium5.3Open edX Platform enables the authoring and delivery of online learning at any scale.Apr 2, 2026
- High8.7An authentication bypass vulnerability within the HTTP handling of the DS configuration service in TP-Link Tapo C520WS v2.6 was identified, due to inconsistent parsing…Apr 2, 2026
- Critical9.8Convoy is a KVM server management panel for hosting businesses.Apr 2, 2026
- Medium5.5A vulnerability was detected in vanna-ai vanna up to 2.0.2.Apr 2, 2026
- Critical9.8IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10.0 through 10.0.9.1 and IBM Verify Identity Access 11.0 through 11.…Apr 1, 2026
- Critical9.1An issue was discovered in Mbed TLS 3.5.0 through 4.0.0.Apr 1, 2026
- High8.2Flask-HTTPAuth provides Basic, Digest and Token HTTP authentication for Flask routes.Apr 1, 2026
- Critical9.8Cr*nMaster (cronmaster) is a Cronjob management UI with human readable syntax, live logging and log history for cronjobs.Apr 1, 2026