Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium6.6PlaywrightCapture is a simple replacement for splash using playwright.May 13, 2026
- Medium5.9The ftpcp() function in Lib/ftplib.py was not updated when CVE-2021-4189 was fixed.May 13, 2026
- Medium5.8MISP modules are autonomous modules that can be used to extend MISP for new services.May 13, 2026
- Medium4.8A server-side request forgery (SSRF) vulnerability in the IKEv2 implementation of Palo Alto Networks PAN-OS® software allows an unauthenticated attacker to cause the f…EPSS 0.3%May 13, 2026
- High8.6Next.js is a React framework for building full-stack web applications.May 13, 2026
- High7.5libcurl might in some circumstances reuse the wrong connection for SMB(S) transfers.May 13, 2026
- Critical9.9Nginx UI is a web user interface for the Nginx web server.May 12, 2026
- Medium5.0mosparo is the modern solution to protect your online forms from spam.May 12, 2026
- High7.4Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier are affected by a Server-Side Request Forgery (SSRF) vulnerability…May 12, 2026
- High8.2ssrfcheck is a library that checks if a string contains a potential SSRF attack.May 12, 2026
- Medium6.5requests-hardened is a library that overrides the default behaviors of the requests library, and adds new security features.May 12, 2026
- High7.7Xibo is an open source digital signage platform with a web content management system and Windows display player software.May 12, 2026
- High8.2JunoClaw is an agentic AI platform built on Juno Network.May 12, 2026
- High7.1Server-Side Request Forgery vulnerability allows Privilege Escalation via API Checker extension.May 12, 2026
- High8.2Open-WebSearch is a multi-engine MCP server, CLI, and local daemon for agent web search and content retrieval.May 12, 2026
- High8.7Link Preview JS extracts web links information.May 11, 2026
- High7.7WWBN AVideo is an open source video platform.May 11, 2026
- Medium5.4WWBN AVideo is an open source video platform.May 11, 2026
- Medium4.3Geyser is a bridge between Minecraft: Bedrock Edition and Minecraft: Java Edition.May 11, 2026
- Low2.0A security vulnerability has been detected in jishenghua jshERP up to 3.6.May 11, 2026
- Critical9.9FireFighter is an incident management application.May 11, 2026
- Low2.3OpenClaw before 2026.4.20 contains a server-side request forgery vulnerability in browser CDP profile creation that skips strict-mode SSRF policy checks.May 11, 2026
- Medium5.3Flowise is a drag & drop user interface to build a customized large language model flow.May 11, 2026
- High8.5The Open edx Enterprise Service app provides enterprise features to the Open edX platform.May 11, 2026
- Critical9.9Open edX Platform enables the authoring and delivery of online learning at any scale.May 11, 2026