Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Low2.1A vulnerability was detected in chatchat-space Langchain-Chatchat up to 0.3.1.3.May 5, 2026
- Critical9.1The GoAhead web server on MeiG Smart FORGE_SLT711 devices (firmware MDM9607.LE.1.0-00110-STD.PROD-1) allows unauthenticated OS command injection via the /action/SetRem…May 5, 2026
- Critical9.3Eclipse Equinox OSGi 3.7.2 and earlier contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary commands by sending pa…EPSS 0.5%May 5, 2026
- Critical9.3Eclipse Equinox OSGi versions 3.8 through 3.18 contain a remote code execution vulnerability in the console interface that allows unauthenticated attackers to execute…EPSS 0.5%May 5, 2026
- Critical9.8Nginx UI is a web user interface for the Nginx web server.May 4, 2026
- Critical9.8Nginx UI is a web user interface for the Nginx web server.May 4, 2026
- Critical9.2Arelle before 2.39.10 contains an unauthenticated remote code execution vulnerability in the /rest/configure REST endpoint that accepts a plugins query parameter and f…May 4, 2026
- Medium5.5A flaw has been found in PrefectHQ prefect up to 3.6.13.May 4, 2026
- Medium5.5A flaw has been found in crocodilestick Calibre-Web-Automated up to 4.0.6.May 4, 2026
- High7.8Traefik is an HTTP reverse proxy and load balancer.Apr 30, 2026
- Medium6.5Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts.Apr 30, 2026
- Low2.0All versions of the package django-mdeditor are vulnerable to Missing Authentication for Critical Function in the image upload endpoint.EPSS 0.3%Apr 30, 2026
- High8.0A vulnerability in the access control mechanism of SonicOS may allow certain management interface functions to be accessible under specific conditions.EPSS 0.4%Apr 29, 2026
- Critical9.3WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function VulnerabilityKEVEPSS 98.5%Apr 29, 2026
- Critical9.4The Carlson VASCO-B GNSS Receiver lacks an authentication mechanism, allowing an attacker with network access to directly access and modify its configuration and opera…Apr 28, 2026
- Medium6.7An improper access control vulnerability exists in the Cisco Intersight Device Connector for Nutanix Prism Central.Apr 28, 2026
- High7.5An unsecured configuration interface on affected devices allows unauthenticated remote attackers to access sensitive information, including hashed credentials and access codes.Apr 28, 2026
- High8.7Penetration Testing engineers at Amazon have identified a security flaw related to request handling in the web server component that could, under certain conditions, l…EPSS 0.2%Apr 28, 2026
- Low2.9A vulnerability was found in NousResearch hermes-agent 0.8.0.Apr 27, 2026
- Medium5.5A flaw has been found in 666ghj MiroFish up to 0.1.2.Apr 26, 2026
- High8.8CyberPanel versions prior to 2.4.5 contain an authentication bypass vulnerability in the AI Scanner worker API endpoints that allows unauthenticated remote attackers t…Apr 24, 2026
- High7.8Deskflow is a keyboard and mouse sharing app.Apr 24, 2026
- Medium4.0bookserver in KDE Arianna before 26.04.1 allows attackers to read files over a socket connection by guessing a URL.Apr 24, 2026
- High8.5A client holding only a read JWT scope can still register itself as a signal provider through the production kuksa.val.v2 OpenProviderStream API by sending ProvideSignalRequest.Apr 24, 2026
- Critical9.3A vulnerability in SenseLive X3050’s embedded management service allows full administrative control to be established without any form of authentication or authorizati…Apr 24, 2026