Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- Critical10.0Dgraph is an open source distributed GraphQL database.EPSS 1.7%Apr 6, 2026
- High8.5Twitch Studio version 0.114.8 and prior contain a privilege escalation vulnerability in its privileged helper tool that allows local attackers to execute arbitrary cod…EPSS 0.2%Apr 6, 2026
- High8.8Mattermost Plugin Legal Hold versions <=1.1.4 fail to halt request processing after a failed authorization check in ServeHTTP which allows an authenticated attacker to…Apr 6, 2026
- Low2.1A security flaw has been discovered in ProjectSend r2002.Apr 6, 2026
- Medium5.5A security vulnerability has been detected in Technostrobe HI-LED-WR120-G2 5.5.0.1R6.03.30.Apr 5, 2026
- Low2.1A security flaw has been discovered in Technostrobe HI-LED-WR120-G2 5.5.0.1R6.03.30.Apr 5, 2026
- High7.1The Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress plugin for WordPress is vulnerable to unautho…Apr 4, 2026
- Medium4.3The Kadence Blocks — Page Builder Toolkit for Gutenberg Editor plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.6.3.EPSS 0.3%Apr 4, 2026
- Medium6.5The Pie Register – User Registration, Profiles & Content Restriction plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capabilit…Apr 4, 2026
- Medium5.4Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS.EPSS 0.2%Apr 4, 2026
- High7.5Piwigo is an open source photo gallery application for the web.EPSS 1.7%Apr 3, 2026
- Critical9.1Insufficient authentication security controls in the browser-based authentication components in Amazon Athena ODBC driver before 2.1.0.0 might allow a threat actor to…EPSS 0.7%Apr 3, 2026
- Medium5.3Zulip is an open-source team collaboration tool.EPSS 0.4%Apr 3, 2026
- High8.7prompts.chat prior to commit 7b81836 contains multiple authorization bypass vulnerabilities due to missing isPrivate checks across API endpoints and page metadata gene…EPSS 0.3%Apr 3, 2026
- Critical9.2OneUptime is an open-source monitoring and observability platform.EPSS 0.7%Apr 2, 2026
- Critical9.4Signal K Server is a server application that runs on a central hub in a boat.EPSS 0.5%Apr 2, 2026
- High8.0A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager (EPNM) could allow an authenticated, remote attacker with low privi…EPSS 0.3%Apr 1, 2026
- Medium5.0Improper access control in the multi-factor authentication (MFA) management API in Devolutions Server allows an authenticated attacker to delete their own configured M…Apr 1, 2026
- Medium5.0Improper access control in the users MFA feature in Devolutions Server allows an authenticated user to bypass administrator-enforced restrictions and remove their own…Apr 1, 2026
- Medium4.3The Database for Contact Form 7, WPforms, Elementor forms plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the en…Apr 1, 2026
- Medium6.5WWBN AVideo is an open source video platform.EPSS 0.3%Mar 31, 2026
- Medium6.5WWBN AVideo is an open source video platform.EPSS 0.4%Mar 31, 2026
- High8.1In Search Guard FLX versions from 3.0.0 up to 4.0.1, there exists an issue which allows users without the necessary privileges to execute some management operations ag…Mar 31, 2026
- Medium5.3The Appointment Booking and Scheduler Plugin – Truebooker plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.…EPSS 0.2%Mar 31, 2026
- High8.2act is a project which allows for local running of github actions.EPSS 0.6%Mar 31, 2026