Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Critical9.3WebSocket endpoints lack proper authentication mechanisms, enabling attackers to perform unauthorized station impersonation and manipulate data sent to the backend.Mar 20, 2026
- Critical9.3WebSocket endpoints lack proper authentication mechanisms, enabling attackers to perform unauthorized station impersonation and manipulate data sent to the backend.Mar 20, 2026
- Critical9.3A missing authentication for critical function vulnerability has been reported to affect QVR Pro.EPSS 0.7%Mar 20, 2026
- Medium4.8FileRise is a self-hosted web file manager / WebDAV server.Mar 20, 2026
- Low2.1A vulnerability was found in Yi Technology YI Home Camera 2 2.1.1_20171024151200.Mar 20, 2026
- High8.1WWBN AVideo is an open source video platform.Mar 20, 2026
- Critical9.8Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: REST WebServices) and Oracle Web Services Manager product of Oracle Fusion…EPSS 1.0%Mar 20, 2026
- Critical9.3Xerte Online Toolkits versions 3.14 and earlier contain an unauthenticated arbitrary file upload vulnerability in the template import functionality that allows remote…Mar 20, 2026
- High8.1Spring Boot applications with Actuator can be vulnerable to an "Authentication Bypass" vulnerability when an application endpoint that requires authentication is decla…EPSS 0.3%Mar 19, 2026
- High7.5OpenClaw versions prior to 2026.3.1 fail to properly handle authentication bootstrap errors during startup, allowing browser-control routes to remain accessible withou…Mar 19, 2026
- Critical9.3Langflow Code Injection VulnerabilityKEVEPSS 24.8%Mar 19, 2026
- Medium6.9BMC FootPrints ITSM versions 20.20.02 through 20.24.01.001 contain an authentication bypass vulnerability due to improper enforcement of security filters on restricted…EPSS 44.6%Mar 19, 2026
- High7.8The "Privileged Helper" component of the Arturia Software Center (MacOS) does not perform sufficient client code signature validation when a client connects.Mar 18, 2026
- High8.1A flaw was found in Keycloak.Mar 18, 2026
- Medium5.9OpenClaw versions prior to 2026.2.22 inject the x-OpenClaw-relay-token header into Chrome CDP probe traffic on loopback interfaces, allowing local processes to capture…EPSS 0.1%Mar 18, 2026
- High7.5Unprotected internal endpoints in Cloud Foundry Capi Release 1.226.0 and below, and CF Deployment v54.9.0 and below on all platforms allows any user who has bypassed t…EPSS 0.2%Mar 17, 2026
- Medium6.5IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.1.0.0 through 6.1.2.7_2, 6.2.0.0 through 6.2.0.5_1, 6.2.1.0 through 6.2.1.1_1, and 6.2.2.0 allows a remote…EPSS 0.2%Mar 17, 2026
- High8.7Configuration issue in Java Management Extensions (JMX) in TIBCO BPM Enterprise version 4.x allows unauthorised access.Mar 17, 2026
- Critical9.3The Angeet ES3 KVM allows a remote, unauthenticated attacker to write arbitrary files, including configuration files or system binaries.Mar 17, 2026
- High8.8Sipeed NanoKVM before 2.3.1 exposes a Wi-Fi configuration endpoint without proper security checks, allowing an unauthenticated attacker with network access to change t…Mar 17, 2026
- High7.0The GL-iNet Comet (GL-RM1) KVM before 1.8.2 does not require authentication on the UART serial console.Mar 17, 2026
- Critical9.3GCB/FCB Audit Software developed by DrangSoft has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to directly access certain APIs to…Mar 17, 2026
- Medium5.5A vulnerability was identified in Tiandy Easy7 Integrated Management Platform 7.17.0.Mar 16, 2026
- High8.1Philips Hue Bridge HomeKit Accessory Protocol Transient Pairing Mode Authentication Bypass Vulnerability.Mar 16, 2026
- Medium6.9Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js.Mar 16, 2026