Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High8.8BerriAI LiteLLM Improper Authentication VulnerabilityKEVEPSS 0.8%Jul 8, 2026
- High8.4Flyto2 Core is an execution kernel for automation and AI-agent workflows.Jul 6, 2026
- Critical9.8Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function VulnerabilityKEVEPSS 96.7%Jun 10, 2026
- Critical9.8Splunk Enterprise Missing Authentication for Critical Function VulnerabilityKEVEPSS 96.9%Jun 10, 2026
- Critical9.8Oracle E-Business Suite Improper Privilege Management VulnerabilityKEVEPSS 0.8%May 28, 2026
- Critical10.0free5GC is an open-source implementation of the 5G core network.EPSS 0.6%May 27, 2026
- High8.2free5GC is an open-source implementation of the 5G core network.EPSS 0.5%May 27, 2026
- Critical10.0free5GC is an open-source implementation of the 5G core network.EPSS 0.5%May 27, 2026
- High7.5free5GC is an open-source implementation of the 5G core network.EPSS 0.6%May 27, 2026
- High7.3free5GC is an open-source implementation of the 5G core network.EPSS 0.4%May 27, 2026
- Low2.0All versions of the package django-mdeditor are vulnerable to Missing Authentication for Critical Function in the image upload endpoint.EPSS 0.3%Apr 30, 2026
- Critical9.3WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function VulnerabilityKEVEPSS 98.5%Apr 29, 2026
- High7.8Missing authentication for critical function in Windows Remote Desktop Licensing Service allows an authorized attacker to elevate privileges locally.EPSS 0.3%Apr 14, 2026
- High7.8Missing authentication for critical function in Windows Remote Desktop Licensing Service allows an authorized attacker to elevate privileges locally.EPSS 0.3%Apr 14, 2026
- Critical9.3Marimo Remote Code Execution VulnerabilityKEVEPSS 37.9%Apr 9, 2026
- Critical9.3Langflow Code Injection VulnerabilityKEVEPSS 24.8%Mar 19, 2026
- High7.5Ivanti Endpoint Manager (EPM) Authentication Bypass VulnerabilityKEVEPSS 88.3%Feb 10, 2026
- Critical9.3SmarterTools SmarterMail Missing Authentication for Critical Function VulnerabilityKEVEPSS 88.2%Jan 23, 2026
- Critical9.3A malicious actor can access camera configuration information, including account credentials, without authenticating when accessing a vulnerable URL.EPSS 0.8%Dec 10, 2025
- High7.8Android Framework Privilege Escalation VulnerabilityKEVEPSS 0.3%Dec 2, 2025
- Critical9.8Oracle Fusion Middleware Missing Authentication for Critical Function VulnerabilityKEVEPSS 88.6%Oct 21, 2025
- Critical9.9FOG is a free open-source cloning/imaging/rescue suite/inventory management system.EPSS 19.4%Sep 6, 2025
- Critical9.8Missing Authentication in the registration feature of Lablup's BackendAI allows arbitrary users to create user accounts that can access private data even when registra…EPSS 0.4%Jun 9, 2025
- High8.7Smartbedded Meteobridge Command Injection VulnerabilityKEVEPSS 93.7%May 21, 2025
- Critical9.3Commvault Command Center Path Traversal VulnerabilityKEVEPSS 97.6%Apr 22, 2025