Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- Low2.3OpenClaw before 2026.3.31 contains a sender allowlist bypass vulnerability that allows remote attackers to access restricted messages.EPSS 0.4%Apr 28, 2026
- Critical9.8NVIDIA NVFlare Dashboard contains a vulnerability in the user management and authentication system where an unauthenticated attacker may cause authorization bypass thr…EPSS 0.6%Apr 28, 2026
- Medium6.9OpenClaw before 2026.4.2 fails to normalize trailing-dot localhost hosts in remote CDP discovery responses, allowing bypass of loopback protections.EPSS 0.4%Apr 28, 2026
- High7.3A weak key generation vulnerability exists in specific firmware versions of Milesight AIOT cameras allows authorization to be bypassed.EPSS 0.3%Apr 27, 2026
- Medium5.3A weakness has been identified in mettle sendportal up to 3.0.1.EPSS 0.4%Apr 27, 2026
- Low2.1A security flaw has been discovered in 1000 Projects Portfolio Management System MCA 1.0.EPSS 0.4%Apr 27, 2026
- Medium5.3Authenticated user can bypass authorization in Ribblr - Crochet & Knitting iOS applicationEPSS 0.2%Apr 27, 2026
- Medium5.3The Booking Calendar Contact Form plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.2.63 via the dex_bccf_…EPSS 0.4%Apr 24, 2026
- Medium5.3The MaxiBlocks Builder plugin for WordPress is vulnerable to arbitrary media file deletion due to insufficient file ownership validation on the 'maxi_remove_custom_ima…EPSS 0.3%Apr 24, 2026
- Medium4.3Xibo is an open source digital signage platform with a web content management system and Windows display player software.EPSS 0.3%Apr 24, 2026
- High8.7A vulnerability in SpiceJet’s booking API allows unauthenticated users to query passenger name records (PNRs) without any access controls.EPSS 0.4%Apr 23, 2026
- High8.2Flowise is a drag & drop user interface to build a customized large language model flow.EPSS 0.4%Apr 23, 2026
- High7.6Flowise is a drag & drop user interface to build a customized large language model flow.EPSS 0.5%Apr 23, 2026
- Critical9.8Flowise is a drag & drop user interface to build a customized large language model flow.EPSS 0.5%Apr 23, 2026
- Medium4.7An API design flaw in WebKitGTK and WPE WebKit allows untrusted web content to unexpectedly perform IP connections, DNS lookups, and HTTP requests.EPSS 0.2%Apr 23, 2026
- Critical9.3ThinkPHP ThinkPHP Authorization Bypass Through User-Controlled KeyKEVEPSS 0.9%Apr 22, 2026
- Medium6.5A vulnerability in the web application allows unauthorized users to access and manipulate sensitive data across different tenants by exploiting insecure direct object references.EPSS 0.3%Apr 22, 2026
- High7.6An insecure direct object reference (IDOR) vulnerability in the Fullstep V5 registration process allows authenticated users to access data belonging to other registere…EPSS 0.4%Apr 22, 2026
- Medium6.5BigBlueButton is an open-source virtual classroom.EPSS 0.3%Apr 22, 2026
- High7.2An improper authorization vulnerability in scoped user-to-server (ghu_) token authorization in GitHub Enterprise Server allows an authenticated attacker to access priv…EPSS 0.5%Apr 21, 2026
- Medium5.3An authorization bypass vulnerability was identified in GitHub Enterprise Server that allowed an attacker with admin access on one repository to modify the secret scan…EPSS 0.5%Apr 21, 2026
- Medium6.5WWBN AVideo is an open source video platform.EPSS 0.4%Apr 21, 2026
- High7.1Horilla is a free and open source Human Resource Management System (HRMS).EPSS 0.4%Apr 21, 2026
- High8.6Horilla is a free and open source Human Resource Management System (HRMS).EPSS 0.4%Apr 21, 2026
- High7.1Horilla is a free and open source Human Resource Management System (HRMS).EPSS 0.2%Apr 21, 2026