Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High7.3Missing Authorization vulnerability in Brainstorm Force SureForms Pro allows Exploiting Incorrectly Configured Access Control Security Levels.Apr 29, 2026
- High8.8OpenClaw before 2026.3.31 contains an authentication bypass vulnerability where unauthenticated plugin-auth HTTP routes receive operator runtime write scopes.Apr 28, 2026
- Low2.3OpenClaw before 2026.3.31 contains an authorization bypass vulnerability in Discord voice ingress that allows attackers to bypass channel and member allowlist restrictions.Apr 28, 2026
- High7.7OpenClaw before 2026.3.31 contains a privilege escalation vulnerability allowing paired nodes with role=node to dispatch node.event agent requests with unrestricted ga…Apr 28, 2026
- Medium6.5Improper access control in the vault documentation feature in Devolutions Server allows an authenticated attacker to read documentation content from unauthorized vault…Apr 28, 2026
- Medium6.7An improper access control vulnerability exists in the Cisco Intersight Device Connector for Nutanix Prism Central.Apr 28, 2026
- Critical9.1In certain circumstances, Spring Boot's default web security is ineffective allowing unauthorized access to all endpoints.Apr 28, 2026
- High7.1ProjeQtor versions 7.0 through 12.4.3 contain a missing authorization vulnerability in the objectDetail.php endpoint that allows authenticated users with guest-level p…Apr 27, 2026
- Low2.1A security vulnerability has been detected in code-projects Invoice System in Laravel 1.0.Apr 27, 2026
- High7.8Deskflow is a keyboard and mouse sharing app.Apr 24, 2026
- Medium5.3The Liaison Site Prober plugin for WordPress is vulnerable to Information Exposure in all versions up to and including 1.2.1 via the /wp-json/site-prober/v1/logs REST API endpoint.Apr 24, 2026
- Medium4.3The HubSpot All-In-One Marketing - Forms, Popups, Live Chat plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including,…EPSS 0.2%Apr 24, 2026
- Medium5.3The HM Books Gallery plugin for WordPress is vulnerable to Missing Authorization in versions up to and including 4.8.0.Apr 24, 2026
- Medium4.3The BetterDocs plugin for WordPress is vulnerable to Missing Authorization in versions up to and including 4.3.11.Apr 24, 2026
- Medium5.3The ExactMetrics – Google Analytics Dashboard for WordPress plugin for WordPress is vulnerable to Missing Authorization in versions up to and including 9.1.2.Apr 24, 2026
- High8.8Actual is a local-first personal finance tool.Apr 24, 2026
- High7.2A vulnerability in SenseLive X3050's web management interface allows critical system and network configuration parameters to be modified without sufficient validation…Apr 24, 2026
- High7.7OpenClaw before 2026.3.31 contains a remote code execution vulnerability where a device-paired node can bypass the node scope gate authentication mechanism.Apr 23, 2026
- High8.7OpenClaw before 2026.3.28 contains an agentic consent bypass vulnerability allowing LLM agents to silently disable execution approval via config.patch parameter.Apr 23, 2026
- High7.7Flowise is a drag & drop user interface to build a customized large language model flow.Apr 23, 2026
- Medium4.3Missing Authorization vulnerability in Navneil Naicker ACF Galerie 4 allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ACF Gal…EPSS 0.2%Apr 23, 2026
- High7.2The ExactMetrics – Google Analytics Dashboard for WordPress (Website Stats Plugin) plugin for WordPress is vulnerable to unauthorized arbitrary plugin installation and…Apr 23, 2026
- Critical10.0Paperclip is a Node.js server and React UI that orchestrates a team of AI agents to run a business.Apr 23, 2026
- High8.7WeKan before 8.35 contains a missing authorization vulnerability in the Integration REST API endpoints that allows authenticated board members to perform administrativ…Apr 22, 2026
- High8.3RustFS is a distributed object storage system built in Rust.Apr 22, 2026