Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Critical9.8Server-side request forgery (ssrf) in Microsoft Bing allows an unauthorized attacker to elevate privileges over a network.Apr 3, 2026
- Low2.1A security vulnerability has been detected in mixelpixx Google-Research-MCP 1e062d7bd887bfe5f6e582b6cc288bb897b35cf2/ca613b736ab787bc926932f59cddc69457185a83.Apr 3, 2026
- Critical9.9Budibase is an open-source low-code platform.Apr 3, 2026
- Medium5.1A weakness has been identified in Casdoor 2.356.0.Apr 3, 2026
- Critical9.8Server-side request forgery (ssrf) in Azure Databricks allows an unauthorized attacker to elevate privileges over a network.Apr 3, 2026
- High8.8Server-side request forgery (ssrf) in Azure Custom Locations Resource Provider (RP) allows an authorized attacker to elevate privileges over a network.Apr 3, 2026
- Medium5.5A vulnerability was identified in appsmithorg appsmith up to 1.97.Apr 2, 2026
- Low2.0A vulnerability was determined in Dataease SQLbot up to 1.6.0.Apr 2, 2026
- Medium5.4Postiz is an AI social media scheduling tool.Apr 2, 2026
- High8.6Postiz is an AI social media scheduling tool.Apr 2, 2026
- High8.3Postiz is an AI social media scheduling tool.Apr 2, 2026
- Medium5.0SillyTavern is a locally installed user interface that allows users to interact with text generation large language models, image generation engines, and text-to-speec…Apr 2, 2026
- Medium5.5A vulnerability was determined in huimeicloud hm_editor up to 2.2.3.Apr 2, 2026
- Critical10.0FastMCP is a Pythonic way to build MCP servers and clients.Apr 2, 2026
- Medium6.4The Webmention plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 5.6.2 via the 'Tools::read' function.EPSS 0.2%Apr 2, 2026
- High7.2The Webmention plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 5.6.2 in the 'MF2::parse_authorpage' function vi…EPSS 0.3%Apr 2, 2026
- Low1.9A vulnerability was found in priyankark a11y-mcp up to 1.0.5.Apr 2, 2026
- Medium6.6AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python.Apr 1, 2026
- High7.7Payload is a free and open source headless content management system.Apr 1, 2026
- High7.4Clerk JavaScript is the official JavaScript repository for Clerk authentication.Apr 1, 2026
- Medium6.8Docker Model Runner (DMR) is software used to manage, run, and deploy AI models using Docker.Apr 1, 2026
- Medium6.1A vulnerability in Cisco Nexus Dashboard and Cisco Nexus Dashboard Insights could allow an unauthenticated, remote attacker to conduct a server-side request forgery (S…EPSS 0.2%Apr 1, 2026
- Medium4.3Improper input validation in the gateway health check feature in Devolutions Server allows a low-privileged authenticated user to perform server-side request forgery (…Apr 1, 2026
- Medium6.9Blind server-side request forgery (SSRF) vulnerability in legacy connection methods of document co-authoring features in M-Files Server before 26.3 allow an unauthenti…EPSS 0.2%Apr 1, 2026
- Low2.1A vulnerability was determined in AutohomeCorp frostmourne up to 1.0.Apr 1, 2026