Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High7.1FreeScout is a free self-hosted help desk and shared mailbox.Apr 21, 2026
- High7.1FreeScout is a free self-hosted help desk and shared mailbox.Apr 21, 2026
- Medium6.8OAuth2 Proxy is a reverse proxy that provides authentication using OAuth2 providers.Apr 21, 2026
- Low3.3October is a Content Management System (CMS) and web platform.Apr 21, 2026
- Medium6.6October is a Content Management System (CMS) and web platform.Apr 21, 2026
- Medium4.9October is a Content Management System (CMS) and web platform.Apr 21, 2026
- Medium4.3NVIDIA KAI Scheduler contains a vulnerability where an attacker could cause improper authorization through cross-namespace pod references.Apr 21, 2026
- High8.7OpenClaw before 2026.3.28 contains an authorization bypass vulnerability in Discord text approval commands that allows non-approvers to resolve pending exec approvals.Apr 21, 2026
- Medium5.3Dify is an open-source LLM app development platform.Apr 20, 2026
- High8.6Nginx UI is a web user interface for the Nginx web server.Apr 20, 2026
- Medium5.1Fudo Enterprise in versions from 5.5.0 through 5.6.2 allows low privileged users to access certain administrator-only resources via improperly protected API endpoints.EPSS 0.3%Apr 20, 2026
- High8.5SKYSEA Client View and SKYMEC IT Manager provided by Sky Co.,LTD.Apr 20, 2026
- High7.5UI / API User with asset materialize permission could trigger dags they had no access to.Apr 18, 2026
- High8.8Movary is a self hosted web app to track and rate a user's watched movies.Apr 18, 2026
- Medium5.3zrok is software for sharing web services, files, and network resources.Apr 17, 2026
- Medium5.4The Auth0 Next.js SDK is a library for implementing user authentication in Next.js applications.Apr 17, 2026
- High8.7OpenHarness before commit bd4df81 contains a permission bypass vulnerability that allows attackers to read sensitive files by exploiting incomplete path normalization…Apr 17, 2026
- Medium5.3The Silverstripe Assets Module is a required component of Silverstripe Framework.Apr 16, 2026
- Medium5.4Istio is an open platform to connect, manage, and secure microservices.Apr 15, 2026
- Medium5.3ApostropheCMS is an open-source Node.js content management system.Apr 15, 2026
- Medium5.4A flaw was found in KubeVirt's Role-Based Access Control (RBAC) evaluation logic.Apr 15, 2026
- High8.4IdentityIQ 8.5, all IdentityIQ 8.5 patch levels prior to 8.5p2, IdentityIQ 8.4, and all IdentityIQ 8.4 patch levels prior to 8.4p4 allow authenticated users assigned t…Apr 15, 2026
- Critical9.1Velociraptor versions prior to 0.76.3 contain a vulnerability in the query() plugin which allows access to all orgs with the user's current ACL token.Apr 15, 2026
- High7.2An access control vulnerability was discovered in the Threat Intelligence functionality due to a specific access restriction not being properly enforced for users with…EPSS 0.3%Apr 15, 2026
- High8.8Chamilo LMS is an open-source learning management system.Apr 14, 2026