Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- Low3.3An incomplete fix for CVE-2024-36137 leaves and in the promises API without the required permission checks, while their callback-based equivalents ( , ) were correctly…EPSS 0.1%Mar 30, 2026
- Medium5.4The Restaurant Cafeteria WordPress theme through 0.4.6 exposes insecure admin-ajax actions without nonce or capability checks, allowing any logged-in user, like subscr…EPSS 0.3%Mar 28, 2026
- High8.7Langflow is a tool for building and deploying AI-powered agents and workflows.EPSS 0.7%Mar 27, 2026
- Medium5.4Statamic is a Laravel and Git powered content management system (CMS).EPSS 0.2%Mar 27, 2026
- Low2.1A weakness has been identified in SourceCodester Note Taking App up to 1.0.Mar 27, 2026
- Medium5.3WWBN AVideo is an open source video platform.EPSS 0.4%Mar 27, 2026
- Medium4.9Fleet is open source device management software.EPSS 0.4%Mar 27, 2026
- Low2.1A vulnerability was determined in SourceCodester Diary App 1.0.Mar 27, 2026
- Medium5.4WWBN AVideo is an open source video platform.EPSS 0.3%Mar 27, 2026
- Medium6.3WWBN AVideo is an open source video platform.EPSS 0.3%Mar 27, 2026
- Medium6.5The '/logs' and '/logs-stream' endpoints in the log router allow any authenticated user to read the full application log buffer.Mar 27, 2026
- Medium6.3The '/api/v1/files/images/{flow_id}/{file_name}' endpoint does not enforce any authentication or authorization checks, allowing any unauthenticated user to download im…Mar 27, 2026
- Medium5.3WWBN AVideo is an open source video platform.EPSS 0.4%Mar 27, 2026
- Medium5.3WWBN AVideo is an open source video platform.EPSS 0.4%Mar 27, 2026
- Medium6.3Missing Authorization vulnerability in NEC Platforms, Ltd.Mar 27, 2026
- Medium6.5The Smart Slider 3 plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 3.5.1.33 via the 'actionExportAll' function.EPSS 0.4%Mar 27, 2026
- High8.1Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline.EPSS 0.4%Mar 27, 2026
- Medium5.3Ech0 is an open-source, self-hosted publishing platform for personal idea sharing.EPSS 0.6%Mar 26, 2026
- High8.4ClearanceKit intercepts file-system access events on macOS and enforces per-process access policies.EPSS 0.1%Mar 26, 2026
- High8.7ClearanceKit intercepts file-system access events on macOS and enforces per-process access policies.EPSS 0.1%Mar 26, 2026
- Medium6.5ORY Oathkeeper is an Identity & Access Proxy (IAP) and Access Control Decision API that authorizes HTTP requests based on sets of Access Rules.EPSS 0.3%Mar 26, 2026
- Medium4.3Frigate is a network video recorder (NVR) with realtime local object detection for IP cameras.EPSS 0.3%Mar 26, 2026
- High8.8etcd is a distributed key-value store for the data of a distributed system.EPSS 0.3%Mar 26, 2026
- Medium4.3The Blog2Social: Social Media Auto Post & Scheduler plugin for WordPress is vulnerable to unauthorized data loss in all versions up to, and including, 8.8.2.Mar 26, 2026
- Medium5.3The FormLift for Infusionsoft Web Forms plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 7.5.21.Mar 26, 2026