Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Low2.1A vulnerability was detected in code-projects Exam Form Submission 1.0.Mar 22, 2026
- Low1.9A vulnerability was determined in Wavlink WL-WN578W2 221110.Mar 22, 2026
- Low2.1A vulnerability has been found in Foundation Agents MetaGPT up to 0.8.1.Mar 21, 2026
- Low2.1A weakness has been identified in PbootCMS up to 3.2.12.Mar 21, 2026
- Medium6.5The Task Manager plugin for WordPress is vulnerable to arbitrary shortcode execution via the 'search' AJAX action in all versions up to, and including, 3.0.2.Mar 21, 2026
- Medium5.6The The Contact Form, Survey, Quiz & Popup Form Builder – ARForms plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 1.7.2.EPSS 0.3%Mar 21, 2026
- Low2.1A vulnerability was found in Mindinventory MindSQL up to 0.2.1.Mar 20, 2026
- Critical9.8The Kali Forms plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.4.9 via the 'form_process' function.Mar 20, 2026
- High8.1dynaconf is a configuration management tool for Python.Mar 20, 2026
- Low2.0A security flaw has been discovered in atjiu pybbs 6.0.0.Mar 20, 2026
- Low2.0A vulnerability was identified in atjiu pybbs 6.0.0.Mar 20, 2026
- Critical9.8SysAK v2.0 and before is vulnerable to command execution via aaa;cat /etc/passwd.EPSS 0.5%Mar 20, 2026
- Critical9.8Mesop is a Python-based UI framework that allows users to build web applications.Mar 20, 2026
- Low1.9A flaw has been found in itsourcecode University Management System 1.0.Mar 20, 2026
- High7.2SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application.Mar 19, 2026
- High8.8SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application.Mar 19, 2026
- Critical9.3Langflow Code Injection VulnerabilityKEVEPSS 24.8%Mar 19, 2026
- Critical9.8An issue in DedeCMS v.5.7.118 and before allows a remote attacker to execute arbitrary code via the array_filter componentMar 19, 2026
- Critical9.8OS command injection in the CWMP client (/ftl/bin/cwmp) of Small Cell Sercomm SCE4255W (FreedomFi Englewood) firmware before DG3934v3@2308041842 allows remote attacker…EPSS 1.3%Mar 19, 2026
- Critical9.8An issue in wgcloud v.2.3.7 and before allows a remote attacker to execute arbitrary code via the test connection functionMar 19, 2026
- Medium6.5jsPDF is a library to generate PDFs in JavaScript.Mar 18, 2026
- Low1.9A flaw has been found in itsourcecode University Management System 1.0.Mar 18, 2026
- Low2.0A vulnerability was detected in Portabilis i-Educar 2.11.Mar 18, 2026
- Low2.0A vulnerability was identified in TRENDnet TEW-824DRU 1.010B01/1.04B01.Mar 18, 2026
- High8.6This High severity RCE (Remote Code Execution) vulnerability was introduced in versions 9.6.0, 10.0.0, 10.1.0, 10.2.0, 11.0.0, 11.1.0, 12.0.0, and 12.1.0 of Bamboo Data Center.EPSS 0.6%Mar 17, 2026