Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High7.3Kiota is an OpenAPI based HTTP Client code generator.Apr 22, 2026
- Critical9.8An attacker can send a notify request that causes a new secondary domain to be added to the bind backend, but causes said backend to update its configuration to an inv…Apr 22, 2026
- Critical10.0WWBN AVideo is an open source video platform.Apr 21, 2026
- Low2.0A vulnerability was determined in Bagisto up to 2.3.15.Apr 21, 2026
- Medium5.6The Home Assistant Command-line interface (hass-cli) is a command-line tool for Home Assistant.Apr 21, 2026
- Low2.0A vulnerability has been found in WebSystems WebTOTUM 2026.Apr 21, 2026
- High8.8In Dolibarr ERP & CRM <= 22.0.4, PHP code detection and editing permission enforcement in the Website module is not applied consistently to all input parameters, allow…Apr 21, 2026
- Critical9.9Spinnaker is an open source, multi-cloud continuous delivery platform.Apr 20, 2026
- Low2.0A weakness has been identified in Pagekit CMS up to 1.0.18.Apr 20, 2026
- Low1.9A security flaw has been discovered in erponline.xyz ERP Online up to 4.0.0.Apr 20, 2026
- Critical9.2Vvveb prior to 1.0.8.1 contains a code injection vulnerability in the installation endpoint where the subdir POST parameter is written unsanitized into the env.php con…Apr 20, 2026
- Critical9.8SGLang's reranking endpoint (/v1/rerank) achieves Remote Code Execution (RCE) when a model file containing a malcious tokenizer.chat_template is loaded, as the Jinja2…Apr 20, 2026
- Low2.0A vulnerability was found in Qibo CMS 1.0.Apr 20, 2026
- Low2.0A security flaw has been discovered in Yifang CMS up to 2.0.5.Apr 20, 2026
- Low1.9A weakness has been identified in BichitroGan ISP Billing Software 2025.3.20.Apr 20, 2026
- Medium4.8A security flaw has been discovered in BichitroGan ISP Billing Software 2025.3.20.Apr 20, 2026
- Low1.9A vulnerability was identified in BichitroGan ISP Billing Software 2025.3.20.Apr 20, 2026
- Medium5.5A vulnerability was determined in 1024bit extend-deep up to 0.1.6.Apr 20, 2026
- Low2.0A vulnerability has been found in langgenius dify up to 1.13.3.Apr 20, 2026
- High7.5ProjectDiscovery Nuclei 3 before 3.8.0 allows DSL expression injection.Apr 20, 2026
- Medium5.5A vulnerability was determined in modelscope agentscope up to 1.0.18.Apr 20, 2026
- Low2.0A flaw has been found in langflow-ai langflow up to 1.8.3.Apr 20, 2026
- Medium6.9A vulnerability was determined in brikcss merge up to 1.3.0.Apr 20, 2026
- Low2.0A vulnerability was found in ComfyUI up to 0.13.0.Apr 20, 2026
- Low2.0A vulnerability has been found in ComfyUI up to 0.13.0.Apr 20, 2026