Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium5.5Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by a Server-Side Request Forgery (SSRF) vulnerabilit…EPSS 0.2%Mar 11, 2026
- High8.8Flowise is a drag & drop user interface to build a customized large language model flow.Mar 10, 2026
- Medium6.5LinkAce is a self-hosted archive to collect website links.Mar 10, 2026
- High8.2MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira).Mar 10, 2026
- High7.5Server-Side Request Forgery (SSRF) vulnerability in pdfmake versions 0.3.0-beta.2 through 0.3.5 allows a remote attacker to obtain sensitive information via the src/UR…Mar 10, 2026
- High7.5Server-side request forgery (ssrf) in Azure IoT Explorer allows an unauthorized attacker to perform spoofing over a network.Mar 10, 2026
- High8.8Server-side request forgery (ssrf) in Azure MCP Server allows an authorized attacker to elevate privileges over a network.Mar 10, 2026
- Medium6.4SAP NetWeaver Application Server for ABAP provides an ABAP Report for testing purposes, which allows to send HTTP requests to arbitrary internal or external endpoints.Mar 10, 2026
- Critical9.8vLLM is an inference and serving engine for large language models (LLMs).Mar 9, 2026
- Critical9.0Budibase is a low code platform for creating internal tools, workflows, and admin panels.Mar 9, 2026
- Medium5.5A server-side request forgery (SSRF) vulnerability in IKEA Dirigera v2.866.4 allows an attacker to exfiltrate private keys by sending a crafted request.Mar 9, 2026
- Critical9.8An issue pertaining to CWE-918: Server-Side Request Forgery was discovered in oslabs-beta ThermaKube master.EPSS 0.3%Mar 9, 2026
- Low2.1A vulnerability was detected in Bytedesk up to 1.3.9.Mar 9, 2026
- Low2.1A security vulnerability has been detected in Bytedesk up to 1.3.9.Mar 9, 2026
- Low2.0A security vulnerability has been detected in ContiNew Admin up to 4.2.0.Mar 8, 2026
- Low2.1A vulnerability was detected in xuxueli xxl-job up to 3.3.2.Mar 8, 2026
- Low2.1A vulnerability was detected in bufanyun HotGo up to 2.0.Mar 8, 2026
- Low2.1A weakness has been identified in welovemedia FFmate up to 2.0.15.Mar 7, 2026
- High7.5WeKnora is an LLM-powered framework designed for deep document understanding and semantic retrieval.Mar 7, 2026
- High7.5PinchTab is a standalone HTTP server that gives AI agents direct control over a Chrome browser.Mar 7, 2026
- Critical9.1Soft Serve is a self-hostable Git server for the command line.Mar 7, 2026
- High8.8Wallos is an open-source, self-hostable personal subscription tracker.Mar 7, 2026
- Medium5.3Wallos is an open-source, self-hostable personal subscription tracker.Mar 7, 2026
- High8.7Wallos is an open-source, self-hostable personal subscription tracker.Mar 7, 2026
- Medium5.3Homarr is an open-source dashboard.Mar 7, 2026