Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Critical9.9Improper Control of Generation of Code ('Code Injection') vulnerability in Themeisle Woody ad snippets insert-php allows Code Injection.This issue affects Woody ad sni…Mar 25, 2026
- High8.5Improper Control of Generation of Code ('Code Injection') vulnerability in Saad Iqbal Post Snippets post-snippets allows Remote Code Inclusion.This issue affects Post…Mar 25, 2026
- Critical9.8thumbler through 1.1.2 allows OS command injection via the input, output, time, or size parameter in the thumbnail() function because user input is concatenated into a…Mar 25, 2026
- Critical9.8textract through 2.5.0 is vulnerable to OS Command Injection via the file path parameter in multiple extractors.Mar 25, 2026
- Critical9.8pdf-image (npm package) through version 2.0.0 allows OS command injection via the pdfFilePath parameter.Mar 25, 2026
- Medium6.5Vikunja is an open-source self-hosted task management platform.Mar 24, 2026
- Medium6.5Vikunja is an open-source self-hosted task management platform.Mar 24, 2026
- High8.8Intake is a package for finding, investigating, loading and disseminating data.Mar 24, 2026
- Critical9.9Langflow is a tool for building and deploying AI-powered agents and workflows.Mar 24, 2026
- Critical10.0Improper Control of Generation of Code ('Code Injection') vulnerability in dendibakh perf-ninja (labs/misc/pgo/lua modules).Mar 24, 2026
- Low2.0A vulnerability has been found in projectworlds Lawyer Management System 1.0.Mar 24, 2026
- Low1.9A security flaw has been discovered in bolo-blog up to 2.6.4.Mar 24, 2026
- Critical9.3A critical remote code execution (RCE) vulnerability has been reported in PTC Windchill and PTC FlexPLM.Mar 23, 2026
- High8.8Connect-CMS is a content management system.Mar 23, 2026
- Low2.0A vulnerability was identified in projectworlds Lawyer Management System 1.0.Mar 23, 2026
- Low1.9A vulnerability was determined in code-projects Exam Form Submission 1.0.Mar 23, 2026
- High8.8A command injection vulnerability exists in DigitalOcean Droplet Agent through 1.3.2.Mar 23, 2026
- High8.8WWBN AVideo is an open source video platform.Mar 23, 2026
- Low1.9A vulnerability was determined in code-projects Exam Form Submission 1.0.Mar 23, 2026
- Low1.9A vulnerability was found in code-projects Exam Form Submission 1.0.Mar 23, 2026
- Low1.9A vulnerability has been found in code-projects Exam Form Submission 1.0.Mar 23, 2026
- Low1.9A flaw has been found in code-projects Exam Form Submission 1.0.Mar 23, 2026
- High7.3The ReviewX – WooCommerce Product Reviews with Multi-Criteria, Reminder Emails, Google Reviews, Schema & More plugin for WordPress is vulnerable to arbitrary method ca…EPSS 0.4%Mar 23, 2026
- Low2.0A security vulnerability has been detected in yangzongzhuan RuoYi up to 4.8.2.Mar 23, 2026
- Low2.1A vulnerability was detected in code-projects Exam Form Submission 1.0.Mar 22, 2026