Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium5.3Mantis Bug Tracker (MantisBT) is an open source issue tracker.May 19, 2026
- Medium5.3In the AWS Secrets Manager and SSM Parameter Store secrets backends of prior to 9.28.0, the team-scoping logic could resolve a containing a (e.g.May 19, 2026
- High8.2LIVE555 before 2026.04.22 contains an authorization bypass vulnerability in RTSP session command handling that allows attackers to replay valid Session tokens from una…May 19, 2026
- High8.7Sparx Pro Cloud Server is vulnerable to Broken Access Control within communication with the database.May 19, 2026
- Medium4.6HCL Connections contains a broken access control vulnerability that may allow unauthorized user to update data in certain scenarios.May 18, 2026
- Medium4.3Mattermost versions 11.5.x <= 11.5.1, 10.11.x <= 10.11.13, 11.4.x <= 11.4.3 fail to check public/private permissions which allows members without these permissions to…EPSS 0.3%May 18, 2026
- Medium4.3Mattermost versions 11.5.x <= 11.5.1, 10.11.x <= 10.11.13 fail to check if {{team_id}} was being changed when updating playbooks, allowing users with only {{Manage Pla…EPSS 0.1%May 18, 2026
- Medium4.3Mattermost versions 11.5.x <= 11.5.1, 10.11.x <= 10.11.13, 11.4.x <= 11.4.3 Fail to enforce slash command trigger-word uniqueness during command updates which allows a…EPSS 0.3%May 18, 2026
- Medium4.3Mattermost Plugins versions <=11.5 11.1.5 10.13.11 11.3.4.0 fail to appropriately check for valid namespaces which allows plugin users to create subscriptions to group…EPSS 0.3%May 18, 2026
- Medium4.3Mattermost Plugins versions <=11.5 11.1.5 10.13.11 11.3.4.0 fail to have API-level checks on which groups the user can create issues or attach comments to which allows…EPSS 0.3%May 18, 2026
- Medium4.3Mattermost versions 11.5.x <= 11.5.1, 10.11.x <= 10.11.13 fail to validate that the RefreshedToken differs from the original invite token during remote cluster invite…EPSS 0.1%May 18, 2026
- Medium4.3Mattermost versions 11.5.x <= 11.5.1, 10.11.x <= 10.11.13, 11.4.x <= 11.4.3 fail to validate that a remote cluster has access to a channel before processing membership…EPSS 0.3%May 18, 2026
- Low3.5Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline.May 15, 2026
- High7.3Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline.May 15, 2026
- High8.8Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline.May 15, 2026
- Medium6.5Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline.May 15, 2026
- Medium5.4Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline.May 15, 2026
- Medium5.4Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline.May 15, 2026
- Medium4.3Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline.May 15, 2026
- High8.7phpMyFAQ before 4.1.2 contains an information disclosure vulnerability in the getIdFromSolutionId() method that lacks permission filtering, allowing unauthenticated at…May 15, 2026
- High7.1phpMyFAQ before 4.1.2 contains an authorization bypass vulnerability in AbstractAdministrationController::userHasPermission() that fails to terminate execution after s…May 15, 2026
- Medium5.3phpMyFAQ before 4.1.2 contains an insufficient authorization vulnerability in admin-api routes that allows authenticated ordinary users to access administrative endpoi…May 15, 2026
- Medium4.3SiYuan is an open-source personal knowledge management system.May 14, 2026
- High8.1Live Helper Chat is an open-source application that enables live support websites.May 14, 2026
- Medium4.3etcd is a distributed key-value store for the data of a distributed system.May 14, 2026