Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- High8.1Locutus brings stdlibs of other programming languages to JavaScript for educational purposes.Mar 6, 2026
- Critical9.8Mesa is an open-source Python library for agent-based modeling, simulating complex systems and exploring emergent behaviors.Mar 6, 2026
- Medium6.1The WP All Import – Drag & Drop Import for CSV, XML, Excel & Google Sheets plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘filepath’ para…Mar 6, 2026
- High8.8changedetection.io is a free open source web page change detection tool.Mar 6, 2026
- High7.8Natro Macro is an open-source Bee Swarm Simulator macro written in AutoHotkey.Mar 6, 2026
- High8.8Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts.Mar 6, 2026
- High7.2Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts.Mar 6, 2026
- Low2.1A vulnerability was found in HSC Cybersecurity Mailinspector up to 5.3.2-3.Mar 6, 2026
- High8.8An issue in Aranda Service Desk Web Edition (ASDK API 8.6) allows authenticated attackers to achieve remote code execution due to improper validation of uploaded files.EPSS 0.6%Mar 5, 2026
- High8.5Improper Control of Generation of Code ('Code Injection') vulnerability in Crocoblock JetEngine jet-engine allows Remote Code Inclusion.This issue affects JetEngine: f…Mar 5, 2026
- Critical9.0Improper Control of Generation of Code ('Code Injection') vulnerability in Marketing Fire Widget Options widget-options allows Code Injection.This issue affects Widget…Mar 5, 2026
- Critical9.9Improper Control of Generation of Code ('Code Injection') vulnerability in Builderall Builderall Builder for WordPress builderall-cheetah-for-wp allows Code Injection.…EPSS 0.5%Mar 5, 2026
- Critical9.4Craft is a content management system (CMS).Mar 4, 2026
- High8.1A vulnerability has been identified in a standardized wireless roaming protocol that could enable a malicious actor to install an attacker-controlled Group Temporal Ke…Mar 4, 2026
- High7.8Insecure permissions in App-Auto-Patch v3.4.2 create a race condition which allows attackers to write arbitrary files.EPSS 0.2%Mar 4, 2026
- High8.8Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 was discovered to contain an authenticated command injection vulnerability via the HMI Name parameter.EPSS 1.3%Mar 3, 2026
- High8.8An issue was discovered in Nokia Impact before Mobile 23_FP1.EPSS 0.2%Mar 3, 2026
- Critical9.8Remote Code Execution Vulnerability in NashornScriptEngineCreator is reported in Apache Ranger versions <= 2.7.0.EPSS 1.3%Mar 3, 2026
- High8.8AFFiNE is an open-source, all-in-one workspace and an operating system.EPSS 0.6%Mar 2, 2026
- High8.8The Master Addons for Elementor Premium plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.1.3 via the 'JLTMA_Widget_A…Mar 2, 2026
- Critical9.8An issue was discovered in goform/formsetUsbUnload in Tenda AC15V1.0 V15.03.05.18_multi.Mar 2, 2026
- Critical9.8An issue in Twenty CRM v1.15.0 and before allows a remote attacker to execute arbitrary code via the local.driver.ts module.Mar 2, 2026
- High7.2sourcecodester Personnel Property Equipment System v1.0 is vulnerable to arbitrary code execution in ip/ppes/admin/admin_change_picture.php.Mar 2, 2026
- Critical9.8An issue was discovered in Tenda W20E V4.0br_V15.11.0.6.Mar 2, 2026
- Low2.1A vulnerability was detected in itsourcecode University Management System 1.0.Mar 2, 2026