Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High8.8Improper Control of Generation of Code ('Code Injection'), Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') vulnerability in Apache OFBiz.EPSS 0.7%May 19, 2026
- Medium6.5Improper Control of Generation of Code ('Code Injection') vulnerability in email services of Apache OFBiz.EPSS 0.6%May 19, 2026
- Medium6.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'), Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), I…EPSS 0.7%May 19, 2026
- Critical9.8Microsoft Edge (Chromium-based) Remote Code Execution VulnerabilityEPSS 1.0%May 18, 2026
- Medium5.4GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.11 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed…EPSS 0.2%May 14, 2026
- High8.8Apache ActiveMQ Improper Input Validation VulnerabilityKEVEPSS 15.5%Apr 7, 2026
- Critical9.8lodash vulnerable to Code Injection via imports key namesMar 31, 2026
- High7.1Wazuh wazuh-agent and wazuh-manager versions 2.1.0 before 4.8.0 contain multiple shell injection and untrusted search path vulnerabilities that allow attackers to exec…EPSS 1.6%Mar 27, 2026
- Critical9.3Langflow Code Injection VulnerabilityKEVEPSS 24.8%Mar 19, 2026
- High8.8Google Chromium V8 Improper Restriction of Operations Within the Bounds of a Memory Buffer VulnerabilityKEVEPSS 1.1%Mar 13, 2026
- Critical9.3Lantronix EDS5000 Code Injection VulnerabilityKEVEPSS 20.0%Mar 11, 2026
- Critical9.8Ivanti Endpoint Manager Mobile (EPMM) Code Injection VulnerabilityKEVEPSS 98.6%Jan 29, 2026
- Critical9.8Ivanti Endpoint Manager Mobile (EPMM) Code Injection VulnerabilityKEVEPSS 98.7%Jan 29, 2026
- Critical9.8Cisco Unified Communications Products Code Injection VulnerabilityKEVEPSS 4.5%Jan 21, 2026
- High7.8pnpm is a package manager.EPSS 1.0%Jan 7, 2026
- Critical9.8Hewlett Packard Enterprise (HPE) OneView Code Injection VulnerabilityKEVEPSS 90.2%Dec 16, 2025
- High8.8A Server-Side Template Injection (SSTI) vulnerability exists in the Frappe ERPNext through 15.89.0 Print Format rendering mechanism.EPSS 0.5%Dec 15, 2025
- High8.8An SSTI (Server-Side Template Injection) vulnerability exists in the get_address_display method of Frappe ERPNext through 15.89.0.EPSS 0.6%Dec 15, 2025
- Medium4.3An SSTI (Server-Side Template Injection) vulnerability exists in the get_terms_and_conditions method of Frappe ERPNext through 15.89.0.EPSS 0.3%Dec 15, 2025
- Medium4.3An SSTI (Server-Side Template Injection) vulnerability exists in the get_contract_template method of Frappe ERPNext through 15.89.0.EPSS 0.3%Dec 15, 2025
- High8.8An SSTI (Server-Side Template Injection) vulnerability exists in the get_dunning_letter_text method of Frappe ERPNext through 15.89.0.EPSS 0.6%Dec 15, 2025
- High8.4Lightning Flow Scanner provides a A CLI plugin, VS Code Extension and GitHub Action for analysis and optimization of Salesforce Flows.EPSS 0.2%Dec 12, 2025
- Low2.0A security vulnerability has been detected in Qualitor up to 8.24.73.EPSS 0.3%Dec 12, 2025
- Critical9.8Insecure permissions in the scheduled tasks feature of MineAdmin v3.x allows attackers to execute arbitrary commands and execute a full account takeover.EPSS 0.5%Dec 12, 2025
- Medium6.9Code Injection using Electron Fuses in waveterm on MacOS allows TCC Bypass.EPSS 0.2%Dec 12, 2025