Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium5.3The mem0 1.0.0 server lacks authentication and authorization controls for its memory creation API endpoint (POST /memories).May 12, 2026
- Medium6.5The mem0 1.0.0 server lacks authentication and authorization controls for its memory deletion API endpoint (DELETE /memories/{memory_id}).May 12, 2026
- Medium6.5The mem0 1.0.0 server lacks authentication and authorization controls for its memory reset and table re-creation functionality accessible via the DELETE /memories endpoint.May 12, 2026
- Critical9.1The mem0 v1.0.0 server lacks authentication and authorization controls for its memory reset functionality accessible via the DELETE /memories endpoint.May 12, 2026
- Medium6.5The mem0 1.0.0 server lacks authentication and authorization controls for its memory deletion API endpoint (DELETE /memories).May 12, 2026
- High7.5The mem0 1.0.0 server lacks authentication and authorization controls for its memory management API endpoints.May 12, 2026
- High8.7A remote code execution vulnerability exists in Code Runner MCP Server when run with the --transport http option, which exposes the /mcp JSON-RPC endpoint without auth…May 12, 2026
- High8.8A vulnerability has been identified in SIMATIC CN 4100 (All versions < V5.0).EPSS 0.3%May 12, 2026
- Medium5.3WWBN AVideo is an open source video platform.May 11, 2026
- Critical9.9FireFighter is an incident management application.May 11, 2026
- High7.5In JetBrains TeamCity before 2026.1 2025.11.5 authenticated users could expose server API to unauthorised accessMay 11, 2026
- High8.7Network-AI is a TypeScript/Node.js multi-agent orchestrator.May 11, 2026
- Medium6.8pyLoad is a free and open-source download manager written in Python.May 11, 2026
- Critical9.3WordPress Plugin Download From Files version 1.48 and earlier contains an arbitrary file upload vulnerability that allows unauthenticated attackers to upload malicious…EPSS 0.4%May 10, 2026
- Critical9.3OpenCATS 0.9.4 contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary commands by uploading malicious PHP files disg…EPSS 0.7%May 10, 2026
- Critical9.3WordPress MStore API 2.0.6 contains an arbitrary file upload vulnerability that allows unauthenticated attackers to upload malicious files by sending POST requests to…EPSS 0.6%May 10, 2026
- Critical9.4phpVMS is a PHP application to run and simulate an airline.May 9, 2026
- Medium5.3A security vulnerability has been detected in UGREEN CM933 1.1.59.4319.May 9, 2026
- Critical9.8FastGPT is an AI Agent building platform.May 8, 2026
- Medium6.7Scoold is a Q&A and a knowledge sharing platform for teams.May 8, 2026
- High7.3PraisonAI is a multi-agent teams system.May 8, 2026
- Medium6.3An authentication bypass vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to create a local user account, bypassing th…May 7, 2026
- Critical9.8The MQTT broker embedded in Yarbo firmware v2.3.9 is configured to allow anonymous connections with no topic-level read or write ACLs.May 7, 2026
- Medium5.5A vulnerability was detected in PicoTronica e-Clinic Healthcare System ECHS 5.7.May 6, 2026
- Critical9.2Vvveb before version 1.0.8.2 contains a hard-coded credentials vulnerability in its docker-compose-apache.yaml configuration that allows unauthenticated attackers to a…May 6, 2026