Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High8.5A client holding only a read JWT scope can still register itself as a signal provider through the production kuksa.val.v2 OpenProviderStream API by sending ProvideSignalRequest.Apr 24, 2026
- Critical9.3A vulnerability in SenseLive X3050’s embedded management service allows full administrative control to be established without any form of authentication or authorizati…Apr 24, 2026
- High8.7A vulnerability in SenseLive X3050’s management ecosystem allows unauthenticated discovery of deployed units through the vendor’s management protocol, enabling identif…Apr 24, 2026
- Critical9.2A vulnerability exists in SenseLive X3050's web management interface that allows critical configuration parameters to be modified without sufficient authentication or…Apr 24, 2026
- Critical9.3A vulnerability in SenseLive X3050’s remote management service allows firmware retrieval and update operations to be performed without authentication or authorization.Apr 24, 2026
- High8.7A weakness in SpiceJet’s public booking retrieval page permits full passenger booking details to be accessed using only a PNR and last name, with no authentication or…Apr 23, 2026
- High7.7Flowise is a drag & drop user interface to build a customized large language model flow.Apr 23, 2026
- Critical9.3Kofax Capture, now referred to as Tungsten Capture, version 6.0.0.0 (other versions may be affected) exposes a deprecated .NET Remoting HTTP channel on port 2424 via t…Apr 23, 2026
- Critical9.2Rclone is a command-line program to sync files and directories to and from different cloud storage providers.Apr 23, 2026
- Critical9.2Rclone is a command-line program to sync files and directories to and from different cloud storage providers.Apr 23, 2026
- High8.6Terminal Services Manager 3.1 contains a stack-based buffer overflow vulnerability in the computer names field that allows local attackers to execute arbitrary code by…EPSS 0.2%Apr 22, 2026
- High8.7Inadequate access control in the registration process in Fullstep V5, which could allow unauthenticated users to obtain a valid JWT token with which to interact with a…Apr 22, 2026
- High8.8MinIO is a high-performance object storage system.Apr 22, 2026
- Medium5.9Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core).Apr 21, 2026
- Medium5.9Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core).Apr 21, 2026
- Critical9.1Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core).Apr 21, 2026
- Critical9.1Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core).Apr 21, 2026
- Medium6.5Vulnerability in the PeopleSoft Enterprise HCM Human Resources product of Oracle PeopleSoft (component: Job Profile Manager).Apr 21, 2026
- Critical9.1Vulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Event Management).Apr 21, 2026
- Critical9.8Vulnerability in the Oracle Advanced Inbound Telephony product of Oracle E-Business Suite (component: Setup and Administration).Apr 21, 2026
- Medium6.5Vulnerability in the PeopleSoft Enterprise HCM Absence Management product of Oracle PeopleSoft (component: Absence Management).Apr 21, 2026
- Critical9.8goshs is a SimpleHTTPServer written in Go.Apr 21, 2026
- Critical9.8CrowdStrike has released security updates to address a critical unauthenticated path traversal vulnerability (CVE-2026-40050) in LogScale.Apr 21, 2026
- High7.7NVIDIA KAI Scheduler contains a vulnerability where an attacker could access API endpoints without authorization.Apr 21, 2026
- High8.7This vulnerability exists in Quantum Networks router due to improper access control and insecure default configuration in the web-based management interface.Apr 21, 2026