Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium6.8pyLoad is a free and open-source download manager written in Python.Apr 7, 2026
- Medium6.1FTLDNS (pihole-FTL) provides an interactive API and also generates statistics for Pi-hole's Web interface.Apr 7, 2026
- Critical9.8changedetection.io is a free open source web page change detection tool.Apr 7, 2026
- Medium5.8An issue that could allow a credential to be updated and used for a task from outside of the authorized organization scope has been resolved.Apr 7, 2026
- Medium4.4An issue that could allow access to Explorer groups from outside of the authorized organization scope has been resolved.Apr 7, 2026
- Low3.0An issue that could expose records outside of the authorized organization scope through the MCP endpoints has been resolved.Apr 7, 2026
- Low2.2An issue that could expose task information outside of the authorized organization scope has been resolved.Apr 7, 2026
- Medium5.3An issue that could allow an authorized user to view the clear-text secrets for a subset of credential types and fields has been resolved.Apr 7, 2026
- Low3.0An issue that allowed MCP agents to access certificate information from outside of their authorized organization scope has been resolved.Apr 7, 2026
- Medium6.8An issue that allowed administrators to create and update users outside of their authorized organization scope has been resolved.Apr 7, 2026
- Medium5.8An issue that allowed MCP agents to access remediation and asset information from outside of the authorized organization scope has been resolved.Apr 7, 2026
- High7.5pyLoad is a free and open-source download manager written in Python.Apr 7, 2026
- High8.3Incorrect Authorization vulnerability in Erlang OTP (inets modules) allows unauthenticated access to CGI scripts protected by directory rules when served via script_alias.Apr 7, 2026
- High8.1Directus is a real-time API and App dashboard for managing SQL database content.Apr 6, 2026
- High8.1Directus is a real-time API and App dashboard for managing SQL database content.Apr 6, 2026
- High8.8OpenFGA is a high-performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar.Apr 6, 2026
- High8.7LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format.Apr 6, 2026
- Medium5.5A security vulnerability has been detected in Technostrobe HI-LED-WR120-G2 5.5.0.1R6.03.30.Apr 5, 2026
- Critical9.1PraisonAI is a multi-agent teams system.Apr 3, 2026
- Medium6.3OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems.Apr 3, 2026
- High7.1Juju is an open source application orchestration engine that enables any application operation on any infrastructure at any scale through special operators called ‘charms’.EPSS 0.2%Apr 3, 2026
- Medium6.9Juju is an open source application orchestration engine that enables any application operation on any infrastructure at any scale through special operators called ‘charms’.EPSS 0.4%Apr 3, 2026
- Critical9.8Improper authorization in Microsoft Azure Kubernetes Service allows an unauthorized attacker to elevate privileges over a network.Apr 3, 2026
- Critical9.8Improper authorization in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network.Apr 3, 2026
- High7.5Improper authentication in Azure SRE Agent allows an unauthorized attacker to disclose information over a network.Apr 3, 2026