Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium5.1Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages.Oct 14, 2026
- Critical9.9Legacy Update is a tool for activating and installing updates on legacy Windows PCs.EPSS 0.2%Oct 13, 2026
- Critical9.6Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 do not sufficiently isolate user-supplied code executed through certain REST and…EPSS 0.2%Oct 12, 2026
- Low2.3Network-AI before 5.15.2 CORS Origin Validation Error in MCP SSE TransportOct 12, 2026
- High7.4AsyncHttpClient: Pooled connections can still be shared across NTLM, Negotiate and proxy loginsEPSS 0.2%Oct 8, 2026
- High7.7When was configured, a hostname matching the allow list was accepted without checking its resolved address against the local-network restrictions.Oct 6, 2026
- High7.2Payload is a free and open source headless content management system.EPSS 0.2%Oct 6, 2026
- Critical9.3Same-origin policy bypass in the Networking: HTTP component.EPSS 0.2%May 19, 2026
- Critical9.6In MLflow version 3.9.0, the MLflow Assistant feature introduced improper origin validation in its /ajax-api endpoints.EPSS 0.4%May 19, 2026
- Medium4.3Mattermost versions 11.5.x <= 11.5.1, 11.4.x <= 11.4.3 fail to validate the X-Requested-With header on the burn-on-read reveal endpoint which allows an authenticated c…EPSS 0.2%May 18, 2026
- Critical9.4Langflow Origin Validation Error VulnerabilityKEVEPSS 92.8%Dec 5, 2025
- Medium6.7In the linux kernel, if IMA appraisal is used with the "ima_appraise=log" boot param, lockdown can be defeated with kexec on any machine when Secure Boot is disabled o…EPSS 0.2%Dec 24, 2024
- High8.8Mozilla Firefox Security Feature Bypass VulnerabilityKEVEPSS 68.6%Aug 7, 2015
13 records · page 1 of 1
PreviousNext