Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium5.9There are two invocations of to display a QR code for scanning.EPSS 0.1%Oct 15, 2026
- High7.5cpp-httplib is a C++ header-only HTTP/HTTPS library.EPSS 0.4%Oct 14, 2026
- Critical9.1Omnispace Agora Project before 26.10.0 contains a vulnerability where the persistent remember-me token is stored verbatim server-side, making the stored value identica…Oct 13, 2026
- Medium6.0FreeRDP 3.0.0 before 3.32.0 contains an insufficiently protected credentials vulnerability where the /restricted-admin option fails to suppress CredSSP credential dele…EPSS 0.2%Oct 13, 2026
- CriticalAsyncHttpClient: Replay to a different host sends the original host request and credentials to the new hostOct 8, 2026
- High7.1In Eclipse Ditto versions 3.6.0 to 3.8.13 and 3.9.0 to 3.9.7, the Ditto Explorer UI loads its complete environment configuration, including the Ditto API URI and the O…EPSS 0.2%Oct 8, 2026
- High8.4In Brocade ASCG before 3.5.0, a local unauthorized user on the ASCG VM who can issue a request to the SANnav host network namespace can extract stored management crede…EPSS 0.1%Oct 8, 2026
- High7.5Checkmate is an open-source, self-hosted tool designed to track and monitor server hardware, uptime, response times, and incidents in real-time with beautiful visualizations.EPSS 0.5%Aug 21, 2026
- Medium5.9Infracost provides cloud cost intelligence for engineers, AI coding agents, and CI/CD.EPSS 0.5%Aug 21, 2026
- Medium6.5Mattermost versions 11.5.x <= 11.5.1, 10.11.x <= 10.11.13, 11.4.x <= 11.4.3 fail prevent disclosure of created user password which allows a malicious attacker to imper…EPSS 0.4%May 18, 2026
- Medium6.5A vulnerability allowing a low-privileged user to extract saved SSH credentials.Mar 12, 2026
- Medium5.3When an OAuth2 bearer token is used for an HTTP(S) transfer, and that transfer performs a redirect to a second URL, curl could leak that token to the second hostname u…Mar 11, 2026
- Medium6.9Charging station authentication identifiers are publicly accessible via web-based mapping platforms.Mar 6, 2026
- Medium6.9Charging station authentication identifiers are publicly accessible via web-based mapping platforms.Mar 6, 2026
- Medium4.8Unnecessary transmission of sensitive cryptographic material.Mar 6, 2026
- Medium6.9Charging station authentication identifiers are publicly accessible via web-based mapping platforms.Mar 6, 2026
- Medium6.9Cleartext Transmission of Sensitive Information, Insufficiently Protected Credentials vulnerability in rustdesk-client RustDesk Client rustdesk-client on Windows, MacO…Mar 5, 2026
- High8.6IDC SFX2100 Satellite Receiver firmware ships with multiple daemon configuration files for routing components (e.g., zebra, bgpd, ospfd, and ripd) that are owned by ro…Mar 5, 2026
- Medium6.0In ExtremeCloud IQ – Site Engine (XIQ‑SE) before 26.2.10, a vulnerability in the NAC administration interface allows an authenticated NAC administrator to retrieve mas…Mar 2, 2026
- Medium4.6In preloader, there is a possible read of device unique identifiers due to a logic error.Mar 2, 2026
- Medium5.9Gradio is an open-source Python package designed for quick prototyping.Feb 27, 2026
- Medium6.9A Hardcoded Email Credentials Saved as Plaintext in Firmware (CWE-256: Plaintext Storage of a Password) vulnerability in Frick Controls Quantum HD version 10.22 and pr…Feb 27, 2026
- Medium6.9Charging station authentication identifiers are publicly accessible via web-based mapping platforms.Feb 27, 2026
- Medium6.9Charging station authentication identifiers are publicly accessible via web-based mapping platforms.Feb 27, 2026
- Medium6.9Charging station authentication identifiers are publicly accessible via web-based mapping platforms.Feb 27, 2026
40 records · page 1 of 2
PreviousNext