Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Critical9.4Paperclip before 0.3.1 in default local_trusted mode fails to validate Host headers, allowing attackers to execute arbitrary commands via DNS rebinding.Aug 21, 2026
- Critical9.9Incus is a system container and virtual machine manager.Aug 21, 2026
- Critical9.9Incus is a system container and virtual machine manager.Aug 21, 2026
- Medium4.3The ECS WordPress plugin before 4.3.13 does not have capability or ownership checks on its dynamic repeater actions, relying only on a nonce available to any user who…Aug 15, 2026
- High8.2OmniFaces is a utility library for Faces.EPSS 0.3%Jul 24, 2026
- Medium6.5Missing Authorization vulnerability in StylemixThemes Motors motors allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Motors:…Jul 2, 2026
- Medium5.4Nautobot is a Network Source of Truth and Network Automation Platform.EPSS 0.3%May 28, 2026
- Critical10.0free5GC is an open-source implementation of the 5G core network.EPSS 0.6%May 27, 2026
- High8.2free5GC is an open-source implementation of the 5G core network.EPSS 0.5%May 27, 2026
- Critical10.0free5GC is an open-source implementation of the 5G core network.EPSS 0.5%May 27, 2026
- Critical9.4free5GC is an open-source implementation of the 5G core network.EPSS 0.5%May 27, 2026
- High7.5free5GC is an open-source implementation of the 5G core network.EPSS 0.6%May 27, 2026
- High7.3free5GC is an open-source implementation of the 5G core network.EPSS 0.4%May 27, 2026
- Critical9.4free5GC is an open-source implementation of the 5G core network.EPSS 0.5%May 27, 2026
- High8.2free5GC is an open-source implementation of the 5G core network.EPSS 0.5%May 27, 2026
- Medium4.3GitLab has remediated an issue in GitLab EE affecting all versions from 18.7 before 18.10.7, 18.11 before 18.11.4, and 19.0 before 19.0.1 that when foundational flows were enabledEPSS 0.3%May 27, 2026
- Medium4.3GitLab has remediated an issue in GitLab EE affecting all versions from 11.5 before 18.10.7, 18.11 before 18.11.4, and 19.0 before 19.0.1 that under certain conditions could have aEPSS 0.3%May 27, 2026
- Medium5.5A security vulnerability has been detected in SourceCodester eDoc Doctor Appointment System 1.0.May 26, 2026
- Low2.1A security flaw has been discovered in SourceCodester CET Automated Grading System with AI Predictive Analytics 1.0.May 26, 2026
- Medium5.3Missing Authorization vulnerability in oban-bg oban_web ('Elixir.Oban.Web.Jobs.DetailComponent' modules) allows unauthorized job worker substitution.May 26, 2026
- Medium5.3MaxKB is an open-source AI assistant for enterprise.May 26, 2026
- High7.1Missing Authorization vulnerability in AA-Team Woocommerce Envato Affiliates allows Accessing Functionality Not Properly Constrained by ACLs.May 26, 2026
- Medium6.3Missing Authorization vulnerability in Magepeople inc.May 26, 2026
- Medium4.3Missing Authorization vulnerability in Magepeople inc.May 26, 2026
- Medium5.3Missing Authorization vulnerability in Magepeople inc.May 26, 2026