Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High8.8The script in Use It Flow administration website before 10.0.0 is vulnerable to Remote Code Execution.EPSS 0.6%Mar 16, 2026
- High8.8Chamilo LMS is a learning management system.Mar 16, 2026
- High7.5LibreChat RAG API, version 0.7.0, contains a log-injection vulnerability that allows attackers to forge log entries.Mar 16, 2026
- Low2.0A vulnerability was found in Lagom WHMCS Template up to 2.3.7.Mar 16, 2026
- Low1.9A security flaw has been discovered in CMS Made Simple up to 2.2.21.Mar 16, 2026
- Low2.0A vulnerability was determined in UEditor up to 1.4.3.2.Mar 16, 2026
- Medium5.1A vulnerability was determined in Aureus ERP up to 1.3.0-BETA2.Mar 16, 2026
- Medium4.8A security flaw has been discovered in Tecnick TCExam up to 16.6.0.Mar 16, 2026
- Low1.9A vulnerability was identified in Tecnick TCExam 16.5.0.Mar 16, 2026
- Low2.0A vulnerability was found in Wavlink WL-NU516U1 240425.Mar 16, 2026
- Low1.9A vulnerability has been found in Worksuite HR, CRM and Project Management up to 5.5.25.Mar 16, 2026
- High7.8A Code Injection vulnerability affecting SOLIDWORKS Desktop from Release 2025 through Release 2026 could allow an attacker to execute arbitrary code on the user's mach…Mar 16, 2026
- Medium6.4AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting.Mar 16, 2026
- High8.7SimpleEval is a library for adding evaluatable expressions into python projects.Mar 16, 2026
- High8.6"Functions" module in Raytha CMS allows privileged users to write custom code to add functionality to application.EPSS 0.5%Mar 16, 2026
- High8.8A command injection vulnerability exists in mlflow/mlflow versions before v3.7.0, specifically in the file at lines 161-167.EPSS 1.5%Mar 16, 2026
- High7.2Improper Control of Generation of Code ('Code Injection') vulnerability in ILLID Advanced Woo Labels advanced-woo-labels allows Remote Code Inclusion.This issue affect…Mar 13, 2026
- Critical9.1Improper Control of Generation of Code ('Code Injection') vulnerability in Yannick Lefebvre Modal Dialog modal-dialog allows Remote Code Inclusion.This issue affects M…Mar 13, 2026
- Critical9.8Locutus brings stdlibs of other programming languages to JavaScript for educational purposes.Mar 13, 2026
- Critical10.0SandboxJS is a JavaScript sandboxing library.Mar 13, 2026
- High8.8HMS Networks Ewon Flexy with firmware before 15.0s4, Cosy+ with firmware 22.xx before 22.1s6, and Cosy+ with firmware 23.xx before 23.0s3 have improper neutralization…Mar 13, 2026
- Critical9.1A vulnerability allowing an authenticated user with the Backup Administrator role to perform remote code execution (RCE) in high availability (HA) deployments of Veeam…EPSS 1.4%Mar 12, 2026
- Critical9.9A vulnerability allowing an authenticated domain user to perform remote code execution (RCE) on the Backup Server.EPSS 1.2%Mar 12, 2026
- Medium5.3A vulnerability was determined in OpenClaw 2026.2.19-2.Mar 12, 2026
- Low2.1A security vulnerability has been detected in itsourcecode Payroll Management System 1.0.Mar 12, 2026