Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium6.3Socomec DIRIS A-40 HTTP API Authentication Bypass Vulnerability.Mar 16, 2026
- Medium5.3Exposure of sensitive functionality to an unauthorized actor in Smart Switch prior to version 3.7.69.15 allows remote attackers to set a specific configuration.EPSS 0.3%Mar 16, 2026
- High8.7Telesquare SKT LTE Router SDT-CS3B1 software version 1.2.0 contains an unauthenticated remote reboot vulnerability that allows attackers to trigger device reboot witho…EPSS 0.7%Mar 16, 2026
- High8.7Serviio PRO 1.8 contains an improper access control vulnerability in the Configuration REST API that allows unauthenticated attackers to change the mediabrowser login password.EPSS 0.4%Mar 16, 2026
- High8.7Serviio PRO 1.8 contains an information disclosure vulnerability due to improper access control enforcement in the Configuration REST API that allows unauthenticated a…EPSS 0.7%Mar 16, 2026
- High7.6LibreChat is a ChatGPT clone with additional features.Mar 13, 2026
- High7.5Dagu is a workflow engine with a built-in Web user interface.Mar 13, 2026
- High8.8Voltronic Power SNMP Web Pro version 1.1 contains an authentication bypass vulnerability that allows unauthenticated attackers to access privileged management function…EPSS 0.3%Mar 13, 2026
- Medium6.9The authentication mechanism for a specific feature in the EasyShare module contains a vulnerability.EPSS 0.2%Mar 13, 2026
- High7.2Missing authentication for critical function vulnerability in ABB AWIN GW100 rev.2, ABB AWIN GW120.This issue affects AWIN GW100 rev.2: 2.0-0, 2.0-1; AWIN GW120: 1.2-0, 1.2-1.EPSS 0.3%Mar 13, 2026
- High7.1Missing authentication for critical function vulnerability in ABB AWIN GW100 rev.2, ABB AWIN GW120.This issue affects AWIN GW100 rev.2: 2.0-0, 2.0-1; AWIN GW120: 1.2-0, 1.2-1.EPSS 0.3%Mar 13, 2026
- Critical10.0The Honeywell IQ4x building management controller, exposes its full web-based HMI without authentication in its factory-default configuration.Mar 12, 2026
- High8.2ZeptoClaw is a personal AI assistant.Mar 12, 2026
- Critical9.8Runtipi is a personal homeserver orchestrator.Mar 11, 2026
- High8.6Comtrend AR-5310 GE31-412SSG-C01_R10.A2pG039u.d24k contains a restricted shell escape vulnerability that allows local users to bypass command restrictions by using the…EPSS 0.1%Mar 11, 2026
- High7.5Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes.Mar 11, 2026
- High7.1Vociferous provides cross-platform, offline speech-to-text with local AI refinement.Mar 11, 2026
- High7.5FileBrowser Quantum is a free, self-hosted, web-based file manager.Mar 10, 2026
- High7.5Missing Authentication for Critical Function vulnerability in TUBITAK BILGEM Software Technologies Research Institute Liderahenk allows Remote Code Inclusion, Privileg…Mar 10, 2026
- High7.5Missing authentication for critical function in Azure IoT Explorer allows an unauthorized attacker to disclose information over a network.Mar 10, 2026
- Medium5.5WWBN AVideo is an open source video platform.Mar 10, 2026
- Medium5.3The Booking Calendar for Appointments and Service Businesses – Booktics plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capabi…EPSS 0.2%Mar 10, 2026
- Medium5.3The Booking Calendar for Appointments and Service Businesses – Booktics plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability c…EPSS 0.3%Mar 10, 2026
- High7.7Flowise is a drag & drop user interface to build a customized large language model flow.Mar 7, 2026
- High8.7XikeStor SKS8310-8X Network Switch firmware versions 1.04.B07 and prior contain a missing authentication vulnerability in the /switch_config.src endpoint that allows u…Mar 7, 2026