Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Low2.3OpenClaw before 2026.3.31 fails to terminate active WebSocket sessions when rotating device tokens.Apr 23, 2026
- Medium4.3IBM Guardium Data Protection 12.0, 12.1, and 12.2 is vulnerable to Security Misconfiguration vulnerability in the user access control panel.Apr 23, 2026
- High8.1A flaw was found in Red Hat Quay.Apr 22, 2026
- High8.8pyLoad is a free and open-source download manager written in Python.Apr 22, 2026
- Medium5.4GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 18.9.6, 18.10 before 18.10.4, and 18.11 before 18.11.1 that could have allowed a…Apr 22, 2026
- Medium6.8The Data Sharing Framework (DSF) implements a distributed process engine based on the BPMN 2.0 and FHIR R4 standards.Apr 21, 2026
- Medium6.5blueprintUE is a tool to help Unreal Engine developers.Apr 21, 2026
- Medium4.3An improper session timeout issue in Fortra's GoAnywhere MFT prior to version 7.10.0 results in SAML configured Web Users being redirected to the regular login page in…Apr 21, 2026
- Medium5.4Active access tokens are not revoked or invalidated when a user account is locked within WSO2 Identity Server.Apr 16, 2026
- Low3.5OAuth2 Proxy is a reverse proxy that provides authentication using OAuth2 providers.Apr 14, 2026
- Medium6.5Vikunja is an open-source self-hosted task management platform.Apr 10, 2026
- Critical9.1When user logged out, the JWT token the user had authtenticated with was not invalidated, which could lead to reuse of that token in case it was intercepted.Apr 9, 2026
- Medium4.1An insufficient session expiration vulnerability exists in the latest version of parisneo/lollms.Apr 8, 2026
- Medium5.9An issue that could prevent session inactivity timeouts from triggering due to automatic page reloading has been resolved.Apr 7, 2026
- Medium4.3Papra is a minimalistic document management and archiving platform.Apr 7, 2026
- High7.1listmonk is a standalone, self-hosted, newsletter and mailing list manager.Apr 2, 2026
- Medium6.5IBM Aspera Shares 1.9.9 through 1.11.0 does not invalidate session after a password reset which could allow an authenticated user to impersonate another user on the system.Apr 1, 2026
- High8.8CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support.Apr 1, 2026
- High8.8CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support.Apr 1, 2026
- High8.6OpenClaw before 2026.3.28 fails to disconnect active WebSocket sessions when devices are removed or tokens are revoked.Mar 31, 2026
- Medium6.0Fleet is open source device management software.Mar 27, 2026
- Medium5.4WWBN AVideo is an open source video platform.Mar 27, 2026
- Medium5.5HCL Aftermarket DPC is affected by Failure to Invalidate Session on Password Change will allow attacker to access to a session, then they can maintain control over the…Mar 26, 2026
- Medium6.5IBM InfoSphere Information Server 11.7.0.0 through 11.7.1.6 does not invalidate a session after privileges have been modified which could allow an authenticated user t…Mar 25, 2026
- High7.5Kiteworks is a private data network (PDN).Mar 25, 2026