Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- Medium6.5ShellHub is a centralized SSH gateway.EPSS 0.4%May 13, 2026
- High8.6SQLBot is an intelligent Text-to-SQL system based on large language models and RAG.EPSS 0.4%May 13, 2026
- Medium5.3The Tutor LMS – eLearning and online course solution plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to and including 3.9.9.EPSS 0.5%May 13, 2026
- Medium5.3The ilGhera Support System for WooCommerce plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'get_ticket_conte…EPSS 0.3%May 13, 2026
- Medium5.3GoJobs is a REST API for a Job Board platform.EPSS 0.4%May 12, 2026
- Critical9.1Relay adds real-time collaboration to Obsidian.EPSS 0.5%May 12, 2026
- Critical9.1Insufficient ownership check in allows an authenticated client area user to submit requests using another user’s without any ownership validation leading to unauthoriz…EPSS 0.5%May 12, 2026
- Medium5.4An insecure direct object reference in MK-Auth 23.01K4.9 allows attackers to access and send support calls for other users via manipulation of the chamado parameter th…EPSS 0.2%May 12, 2026
- High8.8Authorization bypass through User-Controlled key vulnerability in ABIS Technology Ltd.EPSS 0.4%May 12, 2026
- High7.7Outline is a service that allows for collaborative documentation.EPSS 0.3%May 11, 2026
- Medium4.2WWBN AVideo is an open source video platform.EPSS 0.3%May 11, 2026
- High8.1HireFlow v1.2 is vulnerable to Incorrect Access Control.EPSS 0.4%May 11, 2026
- High7.7In Meari IoT Cloud MQTT Broker deployments running EMQX 4.x, any authenticated low-privilege account can subscribe to global wildcard topics and receive telemetry from…EPSS 0.4%May 11, 2026
- High8.1Grav is a file-based Web platform.EPSS 0.6%May 11, 2026
- Low2.9A flaw has been found in JeecgBoot 3.9.1.May 9, 2026
- Medium4.3AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting.EPSS 0.3%May 8, 2026
- Medium6.8SysReptor is a fully customizable pentest reporting platform.EPSS 0.3%May 8, 2026
- High8.8Avo is a framework to create admin panels for Ruby on Rails apps.EPSS 0.5%May 8, 2026
- High8.7MailEnable Enterprise Premium 10.55 and earlier contains an improper authorization vulnerability in the WebAdmin mobile portal that allows attackers to bypass authenti…EPSS 0.6%May 8, 2026
- Medium5.8solidtime is an open-source time-tracking app.EPSS 0.4%May 8, 2026
- High8.8UltraDAG is a minimal DAG-BFT blockchain in Rust.EPSS 0.5%May 8, 2026
- Medium6.5Onyx is an open-source AI platform.EPSS 0.3%May 8, 2026
- Medium4.3Onyx is an open-source AI platform.EPSS 0.4%May 8, 2026
- High7.1FreeScout is a free help desk and shared inbox built with PHP's Laravel framework.EPSS 0.3%May 7, 2026
- Medium5.3Authorization Bypass Through User-Controlled Key vulnerability in YITH YITH WooCommerce Wishlist allows Exploiting Incorrectly Configured Access Control Security Levels.EPSS 0.3%May 7, 2026