Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- Medium5.8solidtime is an open-source time-tracking app.EPSS 0.4%May 8, 2026
- High8.8UltraDAG is a minimal DAG-BFT blockchain in Rust.EPSS 0.5%May 8, 2026
- Medium6.5Onyx is an open-source AI platform.EPSS 0.3%May 8, 2026
- Medium4.3Onyx is an open-source AI platform.EPSS 0.4%May 8, 2026
- High7.1FreeScout is a free help desk and shared inbox built with PHP's Laravel framework.EPSS 0.3%May 7, 2026
- Medium5.3Authorization Bypass Through User-Controlled Key vulnerability in YITH YITH WooCommerce Wishlist allows Exploiting Incorrectly Configured Access Control Security Levels.EPSS 0.3%May 7, 2026
- High7.5When using Google Secrets Manager as a backend for the Spring Cloud Config server a client can craft a request to the config server potentially exposing secrets from u…EPSS 0.5%May 7, 2026
- Medium5.4A vulnerability in the REST API of Cisco Slido could have allowed an authenticated, remote attacker to access the social profile data of other users or affect quiz and…EPSS 0.2%May 6, 2026
- Medium5.3A weakness has been identified in FlowiseAI Flowise up to 3.0.12.EPSS 0.4%May 6, 2026
- High7.7An authorization bypass (CWE-639) in the GetUserRoles gRPC API endpoint in Velocidex Velociraptor below version 0.76.5 allows any authenticated low-privilege user to r…EPSS 0.3%May 6, 2026
- Medium6.0Dify before version 1.14.0 contains an authorization bypass vulnerability that allows authenticated users to read the full contents of files uploaded by other users wi…EPSS 0.5%May 5, 2026
- Medium6.5The GenerateBlocks plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.2.0.EPSS 0.5%May 5, 2026
- Medium5.3The Forminator plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.52.0.EPSS 0.4%May 5, 2026
- Low2.1A vulnerability was detected in CodeCanyon Perfex CRM up to 3.4.1.EPSS 0.4%May 4, 2026
- Medium6.0n8n is an open source workflow automation platform.EPSS 0.3%May 4, 2026
- High8.2The Easy PayPal Events & Tickets plugin for WordPress before version 1.4 contains an information disclosure vulnerability in the QR code scanning endpoint that allows…EPSS 0.6%May 4, 2026
- Critical9.9A critical IDOR vulnerability has been discovered in Comet Backup affecting all versions from 20.11.0 to 26.1.1 and 26.2.1.EPSS 0.5%May 4, 2026
- Medium5.5A vulnerability was detected in toeverything AFFiNE up to 0.26.3.EPSS 0.5%May 3, 2026
- Medium6.5During the analysis, it was identified that authenticated attackers with Subscriber-level access or higher are able to perform an Insecure Direct Object Reference (IDOR) attack.EPSS 0.3%May 3, 2026
- Medium5.5A security vulnerability has been detected in jsbroks COCO Annotator up to 0.11.1.EPSS 0.6%May 3, 2026
- High8.1The WCFM – Frontend Manager for WooCommerce along with Bookings Subscription Listings Compatible plugin for WordPress is vulnerable to Insecure Direct Object Reference…EPSS 0.5%May 2, 2026
- High8.6School App developed by Zyosoft has an Insecure Direct Object Reference vulnerability, allowing authenticated remote attackers to modify a specific parameter to read a…EPSS 0.4%May 2, 2026
- Medium5.3The App Builder – Create Native Android & iOS Apps On The Flight plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to and including 5.6.0.EPSS 0.5%May 2, 2026
- Low2.1A vulnerability was determined in OWAP DefectDojo up to 2.55.4.EPSS 0.4%Apr 30, 2026
- Low2.1A security vulnerability has been detected in LinkStackOrg LinkStack up to 4.8.6.EPSS 0.4%Apr 30, 2026