Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High8.6PMS 0.42 contains a stack-based buffer overflow vulnerability that allows local unauthenticated attackers to execute arbitrary code by supplying malicious values in th…EPSS 0.2%Mar 28, 2026
- Medium6.9Appsmith versions prior to 1.98 expose sensitive instance management API endpoints without authentication.Mar 27, 2026
- Medium5.5A vulnerability was found in OpenBMB XAgent 1.0.0.Mar 27, 2026
- Medium6.9Missing authentication for critical function vulnerability in BUFFALO Wi-Fi router products may allow an attacker to forcibly reboot the product without authentication.Mar 27, 2026
- Medium6.5Missing Authentication for Critical Function vulnerability in Drupal AJAX Dashboard allows Exploiting Incorrectly Configured Access Control Security Levels.This issue…Mar 26, 2026
- High8.8The VSL privileged helper does utilize NSXPC for IPC.Mar 26, 2026
- Medium6.9SHARP routers do not perform authentication for some web APIs.Mar 25, 2026
- High7.5GitLab has remediated an issue in GitLab EE affecting all versions from 18.5 before 18.8.7, 18.9 before 18.9.3, and 18.10 before 18.10.1 that could have allowed an una…EPSS 0.5%Mar 25, 2026
- Critical9.3A Missing Authentication for Critical Function vulnerability in Pharos Controls Mosaic Show Controller firmware version 2.15.3 could allow an unauthenticated attacker…Mar 24, 2026
- Medium6.9Craft CMS is a content management system (CMS).Mar 24, 2026
- Critical9.1LoLLMs WEBUI provides the Web user interface for Lord of Large Language and Multi modal Systems.Mar 24, 2026
- Medium6.9phpFileManager 1.7.8 contains a local file inclusion vulnerability that allows unauthenticated attackers to read arbitrary files by manipulating the action, fm_current…EPSS 0.6%Mar 24, 2026
- Medium5.3Apache Artemis before version 2.52.0 is affected by an authentication bypass flaw which allows reading all messages exchanged via the broker and injection of new messa…Mar 24, 2026
- High8.7Vitals ESP developed by Galaxy Software Services has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to execute certain functions to…Mar 24, 2026
- High8.6WWBN AVideo is an open source video platform.Mar 23, 2026
- High8.6A missing authentication check in the HTTP server on TP-Link Archer NX200, NX210, NX500 and NX600 to certain cgi endpoints allows unauthenticated access intended for a…EPSS 3.0%Mar 23, 2026
- High7.1Missing authentication in the /goform/ate endpoint in Nexxt Solutions Nebula 300+ firmware through version 12.01.01.37 allows an adjacent unauthenticated attacker to r…Mar 23, 2026
- Low1.3A security vulnerability has been detected in Shenzhen HCC Technology MPOS M6 PLUS 1V.31-N.Mar 23, 2026
- Medium5.5A security flaw has been discovered in MacCMS 2025.1000.4052.Mar 23, 2026
- Low2.3A security vulnerability has been detected in OmniPEMF NeoRhythm up to 20260308.Mar 21, 2026
- Critical9.3Memu Play 6.0.7 contains an insecure file permissions vulnerability that allows low-privilege users to escalate privileges by replacing the MemuService.exe executable.EPSS 0.3%Mar 21, 2026
- Medium6.3The BlueBubbles webhook handler in OpenClaw versions prior to 2026.2.21 contains a passwordless fallback authentication path that allows unauthenticated webhook events…Mar 21, 2026
- High8.5OpenClaw versions prior to 2026.2.21 sandbox browser entrypoint launches x11vnc without authentication for noVNC observer sessions, allowing unauthenticated access to…Mar 21, 2026
- High7.5NLTK (Natural Language Toolkit) is a suite of open source Python modules, data sets, and tutorials supporting research and development in Natural Language Processing.Mar 20, 2026
- High7.5SiYuan is a personal knowledge management system.Mar 20, 2026