Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium5.3A weakness has been identified in Wavlink WL-WN579A3 220323.Apr 19, 2026
- Critical9.4protobufjs compiles protobuf definitions into JavaScript (JS) functions.Apr 18, 2026
- Critical9.9Firebird is an open-source relational database management system.Apr 17, 2026
- Low2.0A flaw has been found in lukevella rallly up to 4.7.4.Apr 17, 2026
- Low2.0A vulnerability was detected in classroombookings up to 2.17.0.Apr 17, 2026
- Critical9.0SiYuan is an open-source personal knowledge management system.Apr 16, 2026
- High8.8OWASP BLT is a QA testing and vulnerability disclosure platform that encompasses websites, apps, git repositories, and more.Apr 15, 2026
- High8.0Weblate is a web based localization tool.Apr 15, 2026
- Critical9.8Slah CMS v1.5.0 and below was discovered to contain a remote code execution (RCE) vulnerability in the session() function at config.php.Apr 15, 2026
- Critical9.9OpenRemote is an open-source IoT platform.Apr 15, 2026
- Medium5.4The Avada (Fusion) Builder plugin for WordPress is vulnerable to Arbitrary WordPress Action Execution in all versions up to, and including, 3.15.1.EPSS 0.3%Apr 15, 2026
- High8.1The example example_xcom that was included in airflow documentation implemented unsafe pattern of reading value from xcom in the way that could be exploited to allow U…EPSS 0.6%Apr 15, 2026
- Medium4.0Podman is a tool for managing OCI containers and pods.Apr 14, 2026
- Medium4.9October is a Content Management System (CMS) and web platform.Apr 14, 2026
- Critical9.8A vulnerability was identified in OpenAI Codex CLI v0.23.0 and before that enables code execution through malicious MCP (Model Context Protocol) configuration files.EPSS 6.6%Apr 14, 2026
- Medium6.5The The Germanized for WooCommerce plugin for WordPress is vulnerable to arbitrary shortcode execution via 'account_holder' parameter in all versions up to, and including, 3.20.5.Apr 14, 2026
- Critical9.8PraisonAI is a multi-agent teams system.Apr 14, 2026
- High8.4PraisonAI is a multi-agent teams system.Apr 14, 2026
- High7.4MaxKB is an open-source AI assistant for enterprise.Apr 14, 2026
- Low2.0SAP Landscape Transformation contains a vulnerability in an RFC-exposed function module that could allow a high privileged adversary to inject arbitrary ABAP code and…Apr 14, 2026
- Medium6.1Due to a Code Injection vulnerability in SAP NetWeaver Application Server Java (Web Dynpro Java), an unauthenticated attacker could supply crafted input that is interp…Apr 14, 2026
- Medium5.3A vulnerability was found in aandrew-me ytDownloader up to 3.20.2.Apr 13, 2026
- Low2.0A security vulnerability has been detected in DbGate up to 7.1.4.Apr 13, 2026
- High8.8In Phpgurukul Online Course Registration v3.1, an arbitrary file upload vulnerability was discovered within the profile picture upload functionality on the /my-profile.php page.EPSS 0.3%Apr 13, 2026
- Critical9.8An issue in the pickle protocol of Pyro v3.x allows attackers to execute arbitrary code via supplying a crafted pickled string message.Apr 13, 2026