Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium6.3Better Auth drizzle-adapter 1.6.17 before 1.7.7 Rate Limit Bypass via Race ConditionOct 14, 2026
- High8.1FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations.Oct 14, 2026
- Medium6.5FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations.Oct 14, 2026
- Critical9.2Databasus 3.7.0 through 3.61.0 Account Takeover via Password Reset Brute-ForceOct 14, 2026
- Low3.7An authentication rate-limit bypass in Zimbra Collaboration Suite 10.1.0 through 10.1.21 allows unauthenticated attackers to make repeated password guesses through Gra…Oct 14, 2026
- Medium5.3IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote attacker to perform brute-force attacks to obtain credentials due to improper authentication.EPSS 0.3%Oct 13, 2026
- Medium6.9Pingvin Share X before 1.22.0 contains an ineffective rate limiting vulnerability because throttler TTL values specified in seconds are interpreted as milliseconds.EPSS 0.2%Oct 10, 2026
- Medium6.9Payload is a free and open source headless content management system.EPSS 0.4%Oct 6, 2026
- Critical9.8HCL BigFix Service Management is affected by an Improper Authentication validation vulnerability related to inadequate account lockouts, which could allow an unauthent…EPSS 0.4%Sep 18, 2026
- Medium6.9Strapi is an open source headless content management system.EPSS 0.5%May 14, 2026
- Medium6.9Misskey is an open source, federated social media platform.EPSS 0.3%Dec 16, 2025
- High8.1In affected versions, vulnerability-lookup did not track or limit failed One-Time Password (OTP) attempts during Two-Factor Authentication (2FA) verification.EPSS 0.4%Dec 8, 2025
- High8.1A flaw was found in Wildfly Elytron integration.EPSS 0.9%Mar 4, 2025
13 records · page 1 of 1
PreviousNext