Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High8.3Wallos is an open-source, self-hostable personal subscription tracker.Mar 24, 2026
- High7.1Wallos is an open-source, self-hostable personal subscription tracker.Mar 24, 2026
- High7.7Wallos is an open-source, self-hostable personal subscription tracker.Mar 24, 2026
- Critical9.1LoLLMs WEBUI provides the Web user interface for Lord of Large Language and Multi modal Systems.Mar 24, 2026
- High7.4Vikunja is an open-source self-hosted task management platform.Mar 24, 2026
- Medium5.4Vikunja is an open-source self-hosted task management platform.Mar 24, 2026
- Medium5.5A security vulnerability has been detected in DefaultFuction Jeson-Customer-Relationship-Management-System up to 1b4679c4d06b90d31dd521c2b000bfdec5a36e00.Mar 24, 2026
- Medium6.8Connect-CMS is a content management system.Mar 23, 2026
- High8.2WWBN AVideo is an open source video platform.Mar 23, 2026
- High8.6WWBN AVideo is an open source video platform.Mar 23, 2026
- Low2.1A vulnerability was identified in kalcaddle kodbox 1.64.Mar 23, 2026
- Critical9.1WWBN AVideo is an open source video platform.Mar 23, 2026
- Medium4.3WWBN AVideo is an open source video platform.Mar 22, 2026
- Medium5.5A vulnerability was determined in trueleaf ApiFlow 0.9.7.Mar 21, 2026
- High7.2The Content Syndication Toolkit plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.3 via the redux_p AJAX action…Mar 21, 2026
- Low3.8The Post Affiliate Pro plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.28.0.Mar 21, 2026
- High7.2The Performance Monitor plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.0.6.EPSS 0.4%Mar 21, 2026
- High8.3The MimeTypes Link Icons plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 3.2.20.EPSS 0.3%Mar 21, 2026
- High7.2The WowOptin: Next-Gen Popup Maker plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.4.29.Mar 21, 2026
- Medium5.5WWBN AVideo is an open source video platform.Mar 21, 2026
- High8.7Budibase is a low code platform for creating internal tools, workflows, and admin panels.Mar 20, 2026
- Medium4.3Frigate is a network video recorder (NVR) with realtime local object detection for IP cameras.Mar 20, 2026
- Low3.7PinchTab is a standalone HTTP server that gives AI agents direct control over a Chrome browser.Mar 20, 2026
- Medium5.7CKAN MCP Server is a tool for querying CKAN open data portals.Mar 20, 2026
- High8.6WWBN AVideo is an open source video platform.Mar 20, 2026