Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Critical9.1Apache CXF's STSTokenValidator and Security Token Service (STS) cached validated security tokens under a non-cryptographic 32-bit hash of the token (Java Arrays.hashCo…Oct 9, 2026
- Medium6.3A flaw has been found in opensourcepos Open Source Point of Sale up to 3.4.2.May 18, 2026
- Low3.7Next.js is a React framework for building full-stack web applications.May 13, 2026
- Critical9.3Ecommerce Systempay 1.0 contains a weak cryptographic implementation vulnerability that allows attackers to brute force the 16-character production secret key used for…May 13, 2026
- Low2.0Sandboxie-Plus is an open source sandbox-based isolation software for Windows.May 5, 2026
- Low1.2A flaw has been found in chatchat-space Langchain-Chatchat up to 0.3.1.3.May 5, 2026
- Low2.9A vulnerability was determined in code-projects Chat System 1.0.Apr 27, 2026
- High7.5jq is a command-line JSON processor.Apr 14, 2026
- Medium5.9A flaw in V8's string hashing mechanism causes integer-like strings to be hashed to their numeric value, making hash collisions trivially predictable.Mar 30, 2026
- High8.7soroban-poseidon provides Poseidon and Poseidon2 cryptographic hash functions for Soroban smart contracts.Mar 12, 2026
- Medium6.2An unauthenticated attacker can abuse the weak hash of the backup generated by the wwwdnload.cgi endpoint to gain unauthorized access to sensitive data, including pass…Mar 9, 2026
- Medium6.9SODOLA SL902-SWTGW124AS firmware versions through 200.1.20 use the cryptographically broken MD5 hash function for session cookie generation, weakening session security.Feb 27, 2026
12 records · page 1 of 1
PreviousNext