Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Low1.9A vulnerability was detected in code-projects Online Shoe Store 1.0.Apr 9, 2026
- Low2.1A flaw has been found in code-projects Simple IT Discussion Forum 1.0.Apr 9, 2026
- Low2.1A vulnerability was detected in code-projects Simple Laundry System 1.0.Apr 9, 2026
- Low2.0A flaw has been found in SourceCodester Sales and Inventory System 1.0.Apr 8, 2026
- Medium5.3A vulnerability was detected in openstatusHQ openstatus up to 1b678e71a85961ae319cbb214a8eae634059330c.Apr 8, 2026
- Low2.0A security vulnerability has been detected in code-projects Easy Blog Site 1.0.Apr 8, 2026
- High8.8PraisonAI is a multi-agent teams system.Apr 8, 2026
- High7.8Vim is an open source, command line text editor.Apr 8, 2026
- High8.7Zammad is a web based open source helpdesk/customer support system.Apr 8, 2026
- Critical9.8A vulnerability was identified in stata-mcp prior to v1.13.0 where insufficient validation of user-supplied Stata do-file content can lead to command execution.Apr 8, 2026
- Critical9.3Movable Type provided by Six Apart Ltd.Apr 8, 2026
- Medium5.7GitLab has remediated an issue in GitLab EE affecting all versions from 18.0.0 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that in Code Quality reports…EPSS 0.4%Apr 8, 2026
- Critical9.0SiYuan is a personal knowledge management system.Apr 7, 2026
- Medium6.9A security flaw has been discovered in PowerJob 5.1.0/5.1.1/5.1.2.Apr 7, 2026
- Critical9.1Dual DHCP DNS Server 8.01 improperly accepts and caches UDP DNS responses without validating that the response originates from a legitimate configured upstream DNS server.EPSS 0.5%Apr 7, 2026
- Critical10.0ChurchCRM is an open-source church management system.Apr 7, 2026
- Medium6.1yaffa v2.0.0 is vulnerable to Cross Site Scripting (XSS).EPSS 0.3%Apr 7, 2026
- High8.8Daylight Studio FuelCMS v1.5.2 was discovered to contain an authenticated remote code execution (RCE) vulnerability in the Blocks module.Apr 7, 2026
- Critical9.8Koha Library before 23.05.10 fails to sanitize user-controllable filenames prior to unzipping, leading to remote code execution.EPSS 1.8%Apr 7, 2026
- High8.6Dolibarr ERP/CRM versions prior to 23.0.2 contain an authenticated remote code execution vulnerability in the dol_eval_standard() function that fails to apply forbidde…EPSS 15.5%Apr 7, 2026
- High8.8Apache ActiveMQ Improper Input Validation VulnerabilityKEVEPSS 15.5%Apr 7, 2026
- Low2.1A vulnerability was identified in code-projects Online Hotel Booking 1.0.Apr 7, 2026
- Critical9.8dye is a portable and respectful color library for shell scripts.Apr 6, 2026
- Critical9.3Workbench is a suite of tools for administrators and developers to interact with Salesforce.com organizations via the Force.com APIs.Apr 6, 2026
- Low2.1A vulnerability was determined in Cyber-III Student-Management-System up to 1a938fa61e9f735078e9b291d2e6215b4942af3f.Apr 6, 2026