Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium5.4Dockyard is a Docker container management app.Apr 9, 2026
- High8.5A Missing Authentication for Critical Function vulnerability in the Flexible PIC Concentrators (FPCs) of Juniper Networks Junos OS Evolved on PTX Series allows a local…Apr 9, 2026
- High8.6A low-privileged remote attacker can send Modbus packets to manipulate register values that are inputs to the odorant injection logic such that too much or too little…Apr 9, 2026
- Critical9.3Marimo Remote Code Execution VulnerabilityKEVEPSS 37.9%Apr 9, 2026
- High8.4A Missing Authentication for Critical Function vulnerability in command processing of Juniper Networks Junos OS allows a privileged local attacker to gain access to Li…EPSS 0.1%Apr 8, 2026
- High8.1CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support.Apr 8, 2026
- Critical9.1Unauthenticated functionality in CoolerControl/coolercontrold <4.0.0 allows unauthenticated attackers to view and modify potentially sensitive data via HTTP requestsApr 8, 2026
- High8.2Vite is a frontend tooling framework for JavaScript.Apr 7, 2026
- Medium6.9FreeScout is a free help desk and shared inbox built with PHP's Laravel framework.Apr 7, 2026
- High7.5Strawberry GraphQL is a library for creating GraphQL APIs.Apr 7, 2026
- Critical9.3Weaver (Fanwei) E-cology 10.0 versions prior to 20260312 contain an unauthenticated remote code execution vulnerability in the /papi/esearch/data/devops/dubboApi/debug…EPSS 20.4%Apr 7, 2026
- Medium6.5The Link Whisper Free WordPress plugin before 0.9.1 has a publicly accessible REST endpoint that allows unauthenticated settings updates.EPSS 0.2%Apr 7, 2026
- Medium5.3WWBN AVideo is an open source video platform.Apr 6, 2026
- Medium5.5A vulnerability was identified in Totolink A8000R 5.9c.681_B20180413.Apr 6, 2026
- Medium6.1GLPI is a free asset and IT management software package.Apr 6, 2026
- Medium5.5A vulnerability was found in assafelovic gpt-researcher up to 3.4.3.Apr 6, 2026
- Medium6.9A security vulnerability has been detected in JeecgBoot 3.9.0/3.9.1.Apr 6, 2026
- High8.1Missing Authentication for Critical Function vulnerability in Honeywell Handheld Scanners allows Authentication Abuse.This issue affects Handheld Scanners: from C1 Bas…Apr 5, 2026
- High8.7Core FTP 2.0 build 653 contains a denial of service vulnerability in the PBSZ command that allows unauthenticated attackers to crash the service by sending a malformed…EPSS 0.5%Apr 5, 2026
- High8.8C4G Basic Laboratory Information System 3.4 contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to execute arbitrary SQL commands by i…EPSS 0.3%Apr 5, 2026
- High8.7Wikipedia 12.0 contains a denial of service vulnerability that allows unauthenticated attackers to crash the application by submitting oversized input through the sear…EPSS 0.4%Apr 4, 2026
- High8.7VPN Browser+ 1.1.0.0 contains a denial of service vulnerability that allows unauthenticated attackers to crash the application by submitting oversized input through th…EPSS 0.4%Apr 4, 2026
- Critical9.1PraisonAI is a multi-agent teams system.Apr 3, 2026
- High8.7A specific administrative endpoint is accessible without proper authentication, exposing device management functions.Apr 3, 2026
- Medium6.9A specific administrative endpoint notifications is accessible without proper authentication.Apr 3, 2026