Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High7.1Wallos is an open-source, self-hostable personal subscription tracker.Mar 24, 2026
- Medium6.9The WebSocket backend uses charging station identifiers to uniquely associate sessions but allows multiple endpoints to connect using the same session identifier.Mar 20, 2026
- Medium6.9The WebSocket backend uses charging station identifiers to uniquely associate sessions but allows multiple endpoints to connect using the same session identifier.Mar 20, 2026
- Medium6.0Non-working logout functionality in Truesec’s LAPSWebUI before version 2.4 allows an attacker with access to a workstation to escalate their privileges via disclosure…Mar 16, 2026
- Medium6.0Insufficient Session Expiration in Truesec’s LAPSWebUI before version 2.4 allows an attacker with access to a workstation to escalate their privileges via disclosure o…Mar 16, 2026
- High7.4ZITADEL is an open source identity management platform.Mar 11, 2026
- Medium5.4OliveTin gives access to predefined shell commands from a web interface.Mar 6, 2026
- Medium6.9The WebSocket backend uses charging station identifiers to uniquely associate sessions but allows multiple endpoints to connect using the same session identifier.Mar 6, 2026
- Medium6.9The WebSocket backend uses charging station identifiers to uniquely associate sessions but allows multiple endpoints to connect using the same session identifier.Mar 6, 2026
- Medium6.9The WebSocket backend uses charging station identifiers to uniquely associate sessions but allows multiple endpoints to connect using the same session identifier.Mar 6, 2026
- Critical9.5Insufficient Session Expiration vulnerability in hexpm hexpm/hexpm ('Elixir.Hexpm.Accounts.PasswordReset' module) allows Account Takeover.Mar 5, 2026
- Medium6.02N Access Commander version 3.4.2 and prior improperly invalidates session tokens, allowing multiple session cookies to remain active after logout in web application.Mar 4, 2026
- Medium4.9NocoDB is software for building databases as spreadsheets.Mar 2, 2026
- Low1.3A weakness has been identified in SourceCodester Web-based Pharmacy Product Management System 1.0.Mar 2, 2026
- Medium6.9The WebSocket backend uses charging station identifiers to uniquely associate sessions but allows multiple endpoints to connect using the same session identifier.Feb 27, 2026
- Medium6.9The WebSocket backend uses charging station identifiers to uniquely associate sessions but allows multiple endpoints to connect using the same session identifier.Feb 27, 2026
- Medium6.9The WebSocket backend uses charging station identifiers to uniquely associate sessions but allows multiple endpoints to connect using the same session identifier.Feb 27, 2026
- Medium6.9The WebSocket backend uses charging station identifiers to uniquely associate sessions but allows multiple endpoints to connect using the same session identifier.Feb 27, 2026
- Medium6.9The WebSocket backend uses charging station identifiers to uniquely associate sessions but allows multiple endpoints to connect using the same session identifier.Feb 27, 2026
- Medium6.9The WebSocket backend uses charging station identifiers to uniquely associate sessions but allows multiple endpoints to connect using the same session identifier.Feb 27, 2026
- High8.1Initiative is a self-hosted project management platform.Feb 26, 2026
- Medium4.3Packistry is a self-hosted Composer repository designed to handle PHP package distribution.Feb 26, 2026
- Medium6.8Manyfold is an open source, self-hosted web application for managing a collection of 3d models, particularly focused on 3d printing.Feb 26, 2026
- Critical9.1Vikunja is an open-source self-hosted task management platform.Feb 25, 2026
- High7.5OpenEMR is a free and open source electronic health records and medical practice management application.Feb 25, 2026