Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Critical9.3AVideo is a video-sharing Platform.Mar 20, 2026
- High8.7SQLBot is an intelligent data query system based on a large language model and RAG.Mar 20, 2026
- Medium6.8Admidio is an open-source user management solution.Mar 20, 2026
- Medium5.1Kargo manages and automates the promotion of software artifacts.Mar 20, 2026
- Medium5.3SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application.Mar 19, 2026
- High7.1SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application.Mar 19, 2026
- Low2.3OpenClaw versions prior to 2026.2.22 fail to consistently validate redirect chains against configured mediaAllowHosts allowlists during MSTeams media downloads.Mar 19, 2026
- Low2.3OpenClaw versions prior to 2026.2.22 contain incomplete IPv4 special-use range validation in the isPrivateIpv4() function, allowing requests to RFC-reserved ranges to…Mar 19, 2026
- High7.2OpenEMR is a free and open source electronic health records and medical practice management application.Mar 19, 2026
- Critical9.8Server-side request forgery (ssrf) in Azure Cloud Shell allows an unauthorized attacker to elevate privileges over a network.Mar 19, 2026
- High8.6Server-side request forgery (ssrf) in Microsoft Purview allows an unauthorized attacker to elevate privileges over a network.Mar 19, 2026
- Critical10.0Server-side request forgery (ssrf) in Microsoft Purview allows an unauthorized attacker to elevate privileges over a network.Mar 19, 2026
- Critical9.9Server-side request forgery (ssrf) in Microsoft Exchange allows an authorized attacker to elevate privileges over a network.Mar 19, 2026
- High7.5Server-side request forgery (ssrf) in Microsoft Bing allows an unauthorized attacker to perform tampering over a network.Mar 19, 2026
- High7.5The backend database management connection test feature in wgcloud v3.6.3 has a server-side request forgery (SSRF) vulnerability.Mar 19, 2026
- Medium5.3BMC FootPrints ITSM versions 20.20.02 through 20.24.01.001 contain a blind server-side request forgery vulnerability in the externalfeed/RSS API component that allows…EPSS 12.9%Mar 19, 2026
- Medium5.3BMC FootPrints ITSM versions 20.20.02 through 20.24.01.001 contain a blind server-side request forgery vulnerability in the searchWeb API component that allows authent…EPSS 17.4%Mar 19, 2026
- Medium5.3OpenClaw versions prior to 2026.3.1 contain a server-side request forgery vulnerability in web_search citation redirect resolution that uses a private-network-allowing SSRF policy.Mar 19, 2026
- High8.6Kan is an open-source project management tool.Mar 19, 2026
- Medium5.8A flaw was identified in Keycloak, an identity and access management solution, where it improperly follows HTTP redirects when processing certain client configuration requests.Mar 18, 2026
- Medium6.1OpenClaw versions prior to 2026.3.2 contain a DNS pinning bypass vulnerability in strict URL fetch paths that allows attackers to circumvent SSRF guards when environme…EPSS 0.2%Mar 18, 2026
- Critical9.1### Impact Spinnaker updated URL Validation logic on user input to provide sanitation on user inputted URLs for clouddriver.Mar 17, 2026
- Low2.1A weakness has been identified in frdel/agent0ai agent-zero 0.9.7.Mar 17, 2026
- Low2.0A vulnerability was determined in taoofagi easegen-admin up to 8f87936ac774065b92fb20aab55b274a6ea76433.Mar 16, 2026
- Medium4.3Mattermost versions 11.3.x <= 11.3.0, 11.2.x <= 11.2.2, 10.11.x <= 10.11.10 fail to canonicalize IPv4-mapped IPv6 addresses before reserved IP validation which allows…Mar 16, 2026