Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium5.4Improper authentication in the external OAuth authentication flow in Devolutions Server 2026.1.11 and earlier allows an authenticated user to authenticate as other use…Apr 1, 2026
- Critical9.1The Order Notification for WooCommerce WordPress plugin before 3.6.3 overrides WooCommerce's permission checks to grant full access to all unauthenticated requests, en…EPSS 0.2%Apr 1, 2026
- Critical9.3XenForo before 2.3.7 contains a security issue affecting Passkeys that have been added to user accounts.EPSS 0.5%Apr 1, 2026
- High7.1MinIO is a high-performance object storage system.Mar 31, 2026
- Critical9.8OpenOlat is an open source web-based e-learning platform for teaching, learning, assessment and communication.Mar 30, 2026
- Critical9.8A vulnerability in parisneo/lollms, up to and including version 2.2.0, allows unauthenticated users to upload and process files through the endpoint.EPSS 2.0%Mar 29, 2026
- Medium6.9A vulnerability was detected in PromtEngineer localGPT up to 4d41c7d1713b16b216d8e062e51a5dd88b20b054.Mar 28, 2026
- Medium4.9Fleet is open source device management software.Mar 27, 2026
- Medium5.5A vulnerability was found in OpenBMB XAgent 1.0.0.Mar 27, 2026
- Medium5.9Doveadm credentials are verified using direct comparison which is susceptible to timing oracle attack.Mar 27, 2026
- High8.8Incus is a system container and virtual machine manager.Mar 27, 2026
- Low2.9A security flaw has been discovered in kalcaddle kodbox 1.64.Mar 26, 2026
- Medium4.2NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system.Mar 25, 2026
- Medium5.4NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system.Mar 25, 2026
- High8.8n8n is an open source workflow automation platform.Mar 25, 2026
- Medium6.5NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system.Mar 24, 2026
- Critical9.2MinIO is a high-performance object storage system.Mar 24, 2026
- Medium6.5pyLoad is a free and open-source download manager written in Python.Mar 24, 2026
- High7.0Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js.Mar 24, 2026
- Medium5.7Vikunja is an open-source self-hosted task management platform.Mar 24, 2026
- High8.1The Contest Gallery plugin for WordPress is vulnerable to an authentication bypass leading to admin account takeover in all versions up to, and including, 28.1.5.Mar 24, 2026
- Medium4.9New API is a large language mode (LLM) gateway and artificial intelligence (AI) asset management system.Mar 23, 2026
- Critical9.4WWBN AVideo is an open source video platform.Mar 23, 2026
- High7.5WWBN AVideo is an open source video platform.Mar 23, 2026
- Low2.9A security vulnerability has been detected in kalcaddle kodbox 1.64.Mar 23, 2026