Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- Low2.1A vulnerability has been found in SourceCodester Website Link Extractor 1.0.Feb 25, 2026
- High8.6changedetection.io is a free open source web page change detection tool.Feb 25, 2026
- Medium4.6Mastodon is a free, open-source social network server based on ActivityPub.Feb 24, 2026
- Critical10.0Altec DocLink (now maintained by Beyond Limits Inc.) version 4.0.336.0 exposes insecure .NET Remoting endpoints over TCP and HTTP/SOAP via Altec.RDCHostService.exe usi…Feb 24, 2026
- High8.6WWBN AVideo is an open source video platform.Feb 24, 2026
- Medium4.8Payload is a free and open source headless content management system.Feb 24, 2026
- Medium5.7Craft is a content management system (CMS).Feb 24, 2026
- Low2.1A vulnerability was found in DataLinkDC dinky up to 1.2.5.Feb 24, 2026
- Medium6.9Astro is a web framework.Feb 24, 2026
- Medium5.5A vulnerability has been found in erzhongxmu JEEWMS 3.7.Feb 23, 2026
- Low2.1A security flaw has been discovered in Tiandy Video Surveillance System 视频监控平台 7.17.0.Feb 23, 2026
- Low2.1A weakness has been identified in JeecgBoot 3.9.0.Feb 22, 2026
- Medium6.9OpenClaw is a personal AI assistant.Feb 21, 2026
- High7.7Wallos is an open-source, self-hostable personal subscription tracker.Feb 21, 2026
- High7.1OpenSift is an AI study tool that sifts through large datasets using semantic search and generative AI.Feb 21, 2026
- Medium5.3phpMoAdmin 1.1.5 contains a cross-site request forgery vulnerability that allows attackers to perform unauthorized database operations by crafting malicious requests.EPSS 0.3%Feb 20, 2026
- High7.2Server-Side Request Forgery (SSRF) vulnerability in Laborator Oxygen oxygen allows Server Side Request Forgery.This issue affects Oxygen: from n/a through <= 6.0.8.EPSS 0.2%Feb 20, 2026
- Medium6.6Spinnaker is an open source, multi-cloud continuous delivery platform.EPSS 0.2%Jan 5, 2026
- Critical9.1In grav <1.7.49.5, a SSRF (Server-Side Request Forgery) vector may be triggered via Twig templates when page content is processed by Twig and the configuration allows…EPSS 0.3%Dec 15, 2025
- Low2.1A vulnerability was identified in PowerJob up to 5.1.2.EPSS 0.3%Dec 11, 2025
- High8.6ZITADEL is an open-source identity infrastructure tool.EPSS 0.4%Dec 9, 2025
- Medium5.8A half-blind Server Side Request Forgery (SSRF) vulnerability exists in kube-controller-manager when using the in-tree Portworx StorageClass.EPSS 0.4%Nov 30, 2025
- High7.5Oracle E-Business Suite Server-Side Request Forgery (SSRF) VulnerabilityKEVEPSS 95.9%Oct 11, 2025
- High8.2Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) VulnerabilityKEVEPSS 100.0%Jan 15, 2024
- Medium5.3Microsoft Skype for Business Privilege Escalation VulnerabilityKEVEPSS 90.5%Oct 10, 2023