Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High8.3Vaultwarden is an unofficial Bitwarden compatible server written in Rust, formerly known as bitwarden_rs.Mar 4, 2026
- High7.8Dell Device Management Agent (DDMA), versions prior to 26.02, contain an Incorrect Authorization vulnerability.Mar 4, 2026
- Medium5.3A logic error in the remove_password() function in Checkmk GmbH's Checkmk versions <2.4.0p23, <2.3.0p43, and 2.2.0 (EOL) allows a low-privileged user to cause data loss.Mar 4, 2026
- Medium5.4IBM Engineering Requirements Management DOORS Next 7.1, and 7.2 could allow an authenticated user to view and edit data beyond their authorized access permissions.EPSS 0.1%Mar 3, 2026
- High8.6An improper authorization vulnerability in GitHub Trigger Comment Control in Google Cloud Build prior to 2026-1-26 allows a remote attacker to execute arbitrary code i…Mar 3, 2026
- Medium5.7ClipBucket v5 is an open source video sharing platform.Feb 27, 2026
- High8.2A NestJS application using @nestjs/platform-fastify can allow bypass of authentication/authorization middleware when Fastify path-normalization options are enabled.Feb 27, 2026
- Medium6.5n authorization flaw in Foreman's GraphQL API allows low-privileged users to access metadata beyond their assigned permissions.EPSS 0.4%Feb 27, 2026
- Medium5.4The installers for multiple products provided by Soliton Systems K.K.Feb 27, 2026
- Low1.2Discourse is an open source discussion platform.Feb 26, 2026
- Low1.3Discourse is an open source discussion platform.Feb 26, 2026
- High7.1Zulip is an open-source team collaboration tool.Feb 26, 2026
- Medium4.3Discourse is an open source discussion platform.Feb 26, 2026
- High7.5Discourse is an open source discussion platform.Feb 26, 2026
- Low1.2Fleet is open source device management software.Feb 26, 2026
- High8.8WireGuard Portal (or wg-portal) is a web-based configuration portal for WireGuard server management.Feb 26, 2026
- Medium5.7OpenEMR is a free and open source electronic health records and medical practice management application.Feb 25, 2026
- Critical9.1RustFS is a distributed object storage system built in Rust.Feb 25, 2026
- High7.0OpenEMR is a free and open source electronic health records and medical practice management application.Feb 25, 2026
- Medium4.3A permission cache poisoning vulnerability in Devolutions Server allows authenticated users to bypass permissions to access entries.This issue affects Devolutions Serv…EPSS 0.2%Feb 24, 2026
- High7.1An Improper Input Validation vulnerability exists in Apache Superset that allows an authenticated user with SQLLab access to bypass the read-only verification check wh…Feb 24, 2026
- High7.1An Improper Authorization vulnerability exists in Apache Superset that allows a low-privileged user to bypass data access controls.Feb 24, 2026
- Critical9.4Kargo manages and automates the promotion of software artifacts.Feb 20, 2026
- Low2.1A vulnerability was identified in Dromara RuoYi-Vue-Plus up to 5.5.3.Feb 20, 2026
- Medium5.4Cilium is a networking, observability, and security solution with an eBPF-based dataplane.Feb 20, 2026