Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- Medium5.4GitLab has remediated an issue in GitLab EE affecting all versions from 18.3 before 19.1.7, 19.2 before 19.2.5, and 19.3 before 19.3.1 that, under certain conditions,…EPSS 0.3%Apr 8, 2026
- Medium4.3Policy bypass in Blink in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to perform UI spoofing via a crafted HTML page.EPSS 0.2%Apr 8, 2026
- High8.1InvenTree is an Open Source Inventory Management System.EPSS 0.4%Apr 8, 2026
- Medium6.5LORIS (Longitudinal Online Research and Imaging System) is a self-hosted web application that provides data- and project-management for neuroimaging research.EPSS 0.3%Apr 8, 2026
- Medium6.5LORIS (Longitudinal Online Research and Imaging System) is a self-hosted web application that provides data- and project-management for neuroimaging research.EPSS 0.3%Apr 8, 2026
- High7.4A flaw was found in Red Hat Quay's container image upload process.EPSS 0.4%Apr 8, 2026
- Medium5.3Wimi Teamwork On-Premises versions prior to 8.2.0 contain an insecure direct object reference vulnerability in the preview.php endpoint where the item_id parameter lac…EPSS 0.3%Apr 8, 2026
- Medium5.3Authorization Bypass Through User-Controlled Key vulnerability in dFactory Download Attachments download-attachments allows Exploiting Incorrectly Configured Access Co…EPSS 0.3%Apr 8, 2026
- Medium5.4Authorization Bypass Through User-Controlled Key vulnerability in wpstream WpStream wpstream allows Exploiting Incorrectly Configured Access Control Security Levels.Th…EPSS 0.3%Apr 8, 2026
- Low2.7Authorization Bypass Through User-Controlled Key vulnerability in WP Chill Image Photo Gallery Final Tiles Grid final-tiles-grid-gallery-lite allows Exploiting Incorre…EPSS 0.3%Apr 8, 2026
- Medium5.3The Awesome Support – WordPress HelpDesk & Support Plugin plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 6.3.7.EPSS 0.4%Apr 8, 2026
- Medium4.3The Blog2Social: Social Media Auto Post & Scheduler plugin for WordPress is vulnerable to authorization bypass through user-controlled key in all versions up to, and i…EPSS 0.5%Apr 8, 2026
- Medium5.3The Masteriyo LMS – Online Course Builder for eLearning, LMS & Education plugin for WordPress is vulnerable to Authorization Bypass Through User-Controlled Key in vers…EPSS 0.5%Apr 8, 2026
- Medium4.3GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that could have allowed an…EPSS 0.3%Apr 8, 2026
- High7.7Plane is an an open-source project management tool.EPSS 0.3%Apr 7, 2026
- Medium6.5Scoold is a Q&A and a knowledge sharing platform for teams.EPSS 0.3%Apr 7, 2026
- High8.1ChurchCRM is an open-source church management system.EPSS 0.4%Apr 7, 2026
- High7.6FreeScout is a free help desk and shared inbox built with PHP's Laravel framework.EPSS 0.3%Apr 7, 2026
- Medium6.9FreeScout is a free help desk and shared inbox built with PHP's Laravel framework.EPSS 0.4%Apr 7, 2026
- High7.3Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists.EPSS 0.3%Apr 7, 2026
- High8.8The Booking for Appointments and Events Calendar – Amelia plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.1.3.Apr 7, 2026
- Medium5.4Brave CMS is an open-source CMS.EPSS 0.3%Apr 6, 2026
- Medium6.5Chyrp Lite is an ultra-lightweight blogging engine.EPSS 0.3%Apr 6, 2026
- High8.1Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists.EPSS 0.4%Apr 6, 2026
- High7.9Lupa integrates the runtimes of Lua or LuaJIT2 into CPython.EPSS 0.8%Apr 6, 2026