Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High7.5An issue was discovered in Roundcube Webmail before 1.5.14 and 1.6.14.Apr 3, 2026
- Critical9.9Group-Office is an enterprise customer relationship management and groupware tool.Apr 2, 2026
- Critical9.8An issue was discovered in Mbed TLS versions from 2.19.0 up to 3.6.5, Mbed TLS 4.0.0.Apr 2, 2026
- High7.2OpenSTAManager is an open source management software for technical assistance and invoicing.Apr 2, 2026
- High8.8NVIDIA BioNeMo contains a vulnerability where a user could cause a deserialization of untrusted data.Mar 31, 2026
- Critical9.8NVIDIA BioNeMo contains a vulnerability where a user could cause a deserialization of untrusted data.Mar 31, 2026
- Critical9.2ZEBRA is a Zcash node written entirely in Rust.Mar 31, 2026
- High8.4An Insecure Deserialization vulnerability in WatchGuard Fireware OS allows an attacker that has obtained write access to the local filesystem through another vulnerabi…Mar 30, 2026
- High8.5The Performance Library component of Gigabyte Control Center has an Insecure Deserialization vulnerability.Mar 30, 2026
- Critical9.8GRID::Machine versions through 0.127 for Perl allows arbitrary code execution via unsafe deserialization.Mar 29, 2026
- Critical9.3dd-trace-java is a Datadog APM client for Java.Mar 27, 2026
- High7.2Metabase is an open source business intelligence and embedded analytics tool.Mar 27, 2026
- Critical9.3OpenTelemetry Java Instrumentation provides OpenTelemetry auto-instrumentation and instrumentation libraries for Java.Mar 27, 2026
- Medium5.5A security flaw has been discovered in 648540858 wvp-GB28181-pro up to 2.7.4.Mar 26, 2026
- High7.2The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to PHP Object Injection via deserialization of the 'post_content' of admin_form posts in all versio…Mar 26, 2026
- High8.1Saloon is a PHP library that gives users tools to build API integrations and SDKs.Mar 26, 2026
- High8.8Deserialization of Untrusted Data vulnerability in Miguel Useche JS Archive List jquery-archive-list-widget allows Object Injection.This issue affects JS Archive List:…Mar 25, 2026
- Critical9.8Deserialization of Untrusted Data vulnerability in Edge-Themes Pelicula pelicula-video-production-and-movie-theme allows Object Injection.This issue affects Pelicula:…Mar 25, 2026
- Medium5.4Deserialization of Untrusted Data vulnerability in Mikado-Themes Stål stal allows Object Injection.This issue affects Stål: from n/a through < 1.7.Mar 25, 2026
- Medium5.4Deserialization of Untrusted Data vulnerability in Edge-Themes Kamperen kamperen allows Object Injection.This issue affects Kamperen: from n/a through < 1.3.Mar 25, 2026
- Medium5.4Deserialization of Untrusted Data vulnerability in Edge-Themes Gracey gracey allows Object Injection.This issue affects Gracey: from n/a through < 1.4.Mar 25, 2026
- Medium5.4Deserialization of Untrusted Data vulnerability in Mikado-Themes Halstein halstein allows Object Injection.This issue affects Halstein: from n/a through < 1.8.Mar 25, 2026
- Medium5.4Deserialization of Untrusted Data vulnerability in Elated-Themes Leroux leroux allows Object Injection.This issue affects Leroux: from n/a through < 1.4.Mar 25, 2026
- Medium5.4Deserialization of Untrusted Data vulnerability in Edge-Themes Archicon archicon allows Object Injection.This issue affects Archicon: from n/a through < 1.7.Mar 25, 2026
- Critical9.8Deserialization of Untrusted Data vulnerability in Select-Themes Borgholm borgholm-marketing-agency-theme allows Object Injection.This issue affects Borgholm: from n/a…Mar 25, 2026