Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium5.3Renovate before 44.61.3 minimumReleaseAge Bypass via PR Rebase RequestOct 14, 2026
- Medium4.8A security flaw has been discovered in OpenClaw ClawScan up to 0.1.6.Oct 14, 2026
- Medium6.5For pull request events, Gitea reads workflow definitions from the pull request head and posts a synthetic skipped status when workflow branch or path filters exclude execution.Oct 14, 2026
- Medium5.5A flaw was found in BusyBox's mount utility.EPSS 0.1%Oct 13, 2026
- Medium6.9Axios is a promise-based HTTP client for the browser and Node.js.EPSS 0.5%Oct 13, 2026
- Medium5.3FFmpeg before 8.1.3 contains a protection mechanism failure in the HLS demuxer that allows attackers to bypass protocol and allowed_extensions restrictions when openin…EPSS 0.3%Oct 8, 2026
- Medium6.8AsyncHttpClient: Cookies received over plaintext HTTP can plant, overwrite or delete Secure cookies set over HTTPSEPSS 0.4%Oct 8, 2026
- Low1.8ImageMagick before 7.1.2-32 and 6.9.13-57 contains a policy bypass vulnerability in LoadPolicyCache that silently skips security policy rules when policy.xml uses an a…EPSS 0.1%Oct 3, 2026
- Medium5.1Contrast, Edgeless Systems' runtime for confidential containers on Kubernetes, is affected in versions up to and including 1.9.0.EPSS 0.2%Sep 27, 2026
- High8.8Google Pixel Improper Authorization VulnerabilityKEVEPSS 0.6%Sep 15, 2026
- Medium4.6VeraCrypt provides disk encryption with strong security based on TrueCrypt.EPSS 0.1%Aug 21, 2026
- Medium5.5asteval Sandbox Escape: arbitrary native memory read/write via numpy ctypes in default asteval InterpreterEPSS 0.1%Aug 20, 2026
- Medium5.3Hono is a Web application framework that provides support for any JavaScript runtime.EPSS 0.3%May 28, 2026
- Critical9.6Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component.EPSS 0.4%May 19, 2026
- High8.6Information disclosure, sandbox escape in the Security: Process Sandboxing component.EPSS 0.4%May 19, 2026
- High7.5Sandbox escape in Firefox and Firefox Focus for Android.EPSS 0.4%May 19, 2026
- High8.8Improper neutralization of special elements used in a command ('command injection') in Windows Shell allows an unauthorized attacker to bypass a security feature over a network.EPSS 0.8%Apr 14, 2026
- Medium4.3Microsoft Windows Protection Mechanism Failure VulnerabilityKEVEPSS 4.9%Apr 14, 2026
- High8.8Microsoft MSHTML Framework Protection Mechanism Failure VulnerabilityKEVEPSS 15.9%Feb 10, 2026
- High8.8Microsoft Windows Shell Protection Mechanism Failure VulnerabilityKEVEPSS 24.5%Feb 10, 2026
- Critical9.8SolarWinds Web Help Desk Security Control Bypass VulnerabilityKEVEPSS 73.6%Jan 28, 2026
- Critical9.8pnpm is a package manager.EPSS 1.0%Jan 7, 2026
- Medium5.3mad-proxy is a Python-based HTTP/HTTPS proxy server for detection and blocking of malicious web activity using custom security policies.EPSS 0.2%Dec 10, 2025
- High7.07-Zip Mark of the Web Bypass VulnerabilityKEVEPSS 67.1%Jan 24, 2025
- High7.3Microsoft Publisher Protection Mechanism Failure VulnerabilityKEVEPSS 2.7%Sep 10, 2024
33 records · page 1 of 2
PreviousNext