Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- UnknownGitea's OpenID connect handler accepts a user's password without enforcing enrolled TOTP or WebAuthn verification before completing sign-in and linking an OpenID identifier.EPSS 0.2%Oct 14, 2026
- High8.1Missing critical step in authentication vulnerability in Progress MOVEit Transfer (LDAP module).EPSS 0.5%Oct 14, 2026
- High8.7Incorrect authentication vulnerability in the TSplus Remote Access multi-factor authentication (MFA) mechanism.Oct 14, 2026
- Critical9.6ChurchCRM is an open-source church management system.May 12, 2026
- High8.1Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities.May 8, 2026
- High7.3Missing critical step in authentication in Apache HttpClient 5.6 allows an attacker to cause the client to accept SCRAM-SHA-256 authentication without proper mutual au…Apr 22, 2026
- High8.0Rocket.Chat is an open-source, secure, fully customizable communications platform.Mar 6, 2026
7 records · page 1 of 1
PreviousNext