Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High8.1FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations.Oct 14, 2026
- Medium5.6Pipecat is an open-source Python framework for building real-time voice and multimodal conversational agents.Oct 14, 2026
- Medium6.5For pull request events, Gitea reads workflow definitions from the pull request head and posts a synthetic skipped status when workflow branch or path filters exclude execution.Oct 14, 2026
- High7.1BizSpring Shop through commit cf22d39daaf1 contains a payment verification bypass vulnerability that allows authenticated buyers to mark orders paid by calling the Pay…Oct 14, 2026
- Medium5.3The Tickera WordPress plugin before 3.6.0.4 does not correctly verify the integrity of incoming payment notifications, and the validated signature does not cover the o…Oct 14, 2026
- Medium5.3The WPForms Lite WordPress plugin before 2.0.2.2 does not verify server-side that a payment was completed before accepting a submission on forms using its PayPal Comme…Oct 14, 2026
- Medium6.5The Visma Pay for WooCommerce WordPress plugin before 1.2.2 does not verify the authenticity of payment gateway return requests, relying on a merchant secret that is e…Oct 14, 2026
- Medium5.3The Sunshine Photo Cart WordPress plugin before 3.7.4 does not check whether a visitor is permitted to access a restricted gallery before accepting comment submissions…EPSS 0.1%Oct 14, 2026
- Medium5.3The LTL Freight Quotes WordPress plugin before 4.2.19 does not perform any authorization check or input sanitization before storing certain values from a request, allo…EPSS 0.1%Oct 14, 2026
- Medium6.5IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow an authenticated user to…EPSS 0.1%Oct 8, 2026
- Critical9.1UrlUtil.getBaseUrl builds the absolute URLs in a response — download links, icons, asset and API URLs — from the X-Forwarded-Host, X-Forwarded-Proto and X-Forwarded-Pr…EPSS 0.3%Sep 21, 2026
- High8.8MOOS essential-moos through 10.0.1 contains an authentication bypass vulnerability in pShare that accepts UDP datagrams from any source and republishes them with the a…EPSS 1.3%Sep 3, 2026
- High8.7MOOS-IvP uFldNodeComms through 24.8.1 trusts the source node identity from the message body rather than validating it from the connection source.EPSS 0.2%Sep 3, 2026
- Critical9.3MOOS-IvP through 24.8.1 uFldNodeBroker Unauthenticated Shore Route EnrollmentEPSS 0.3%Sep 3, 2026
- Critical9.3MOOS-IvP uFldShoreBroker through 24.8.1 fails to verify node ping authenticity before creating outbound bridge routes.EPSS 0.3%Sep 3, 2026
- High8.7MOOS essential-moos through version 10.0.1 contains an unauthenticated UDP packet injection vulnerability in pMOOSBridge when configured with UDPListen.EPSS 2.8%Sep 3, 2026
- High8.2OmniFaces is a utility library for Faces.Jul 24, 2026
- High7.8RARLAB WinRAR Code Execution VulnerabilityKEVEPSS 99.8%Aug 23, 2023
- Medium4.3It was found that a specially crafted LUKS header could trick cryptsetup into disabling encryption during the recovery of the device.EPSS 0.3%Aug 24, 2022
- Critical9.8Trend Micro Apex Central Arbitrary File Upload VulnerabilityKEVEPSS 19.5%Mar 29, 2022
- Medium5.9When curl >= 7.20.0 and <= 7.78.0 connects to an IMAP or POP3 server to retrieve data using STARTTLS to upgrade to TLS security, the server can respond and send back m…EPSS 3.0%Sep 29, 2021
21 records · page 1 of 1
PreviousNext