Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Low2.0A vulnerability was detected in YiFang CMS 2.0.5.Mar 8, 2026
- Low2.0A security vulnerability has been detected in YiFang CMS 2.0.5.Mar 8, 2026
- Low2.0A weakness has been identified in 1024-lab/lab1024 SmartAdmin up to 3.29.Mar 8, 2026
- Low2.0A security flaw has been discovered in 1024-lab/lab1024 SmartAdmin up to 3.29.Mar 8, 2026
- Low1.9A vulnerability was determined in Wavlink WL-WN579X3-C 231124.Mar 8, 2026
- Low2.1A vulnerability was detected in SourceCodester Loan Management System 1.0.Mar 8, 2026
- High7.2The Easy PHP Settings plugin for WordPress is vulnerable to PHP Code Injection in all versions up to, and including, 1.0.4 via the method.Mar 7, 2026
- High8.1Locutus brings stdlibs of other programming languages to JavaScript for educational purposes.Mar 6, 2026
- Critical9.8Mesa is an open-source Python library for agent-based modeling, simulating complex systems and exploring emergent behaviors.Mar 6, 2026
- Medium6.1The WP All Import – Drag & Drop Import for CSV, XML, Excel & Google Sheets plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘filepath’ para…Mar 6, 2026
- High8.8changedetection.io is a free open source web page change detection tool.Mar 6, 2026
- High7.8Natro Macro is an open-source Bee Swarm Simulator macro written in AutoHotkey.Mar 6, 2026
- High8.8Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts.Mar 6, 2026
- High7.2Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data to create charts.Mar 6, 2026
- Low2.1A vulnerability was found in HSC Cybersecurity Mailinspector up to 5.3.2-3.Mar 6, 2026
- High8.8An issue in Aranda Service Desk Web Edition (ASDK API 8.6) allows authenticated attackers to achieve remote code execution due to improper validation of uploaded files.Mar 5, 2026
- High8.5Improper Control of Generation of Code ('Code Injection') vulnerability in Crocoblock JetEngine jet-engine allows Remote Code Inclusion.This issue affects JetEngine: f…Mar 5, 2026
- Critical9.0Improper Control of Generation of Code ('Code Injection') vulnerability in Marketing Fire Widget Options widget-options allows Code Injection.This issue affects Widget…Mar 5, 2026
- Critical9.9Improper Control of Generation of Code ('Code Injection') vulnerability in Builderall Builderall Builder for WordPress builderall-cheetah-for-wp allows Code Injection.…Mar 5, 2026
- Critical9.4Craft is a content management system (CMS).Mar 4, 2026
- High8.1A vulnerability has been identified in a standardized wireless roaming protocol that could enable a malicious actor to install an attacker-controlled Group Temporal Ke…Mar 4, 2026
- High7.8Insecure permissions in App-Auto-Patch v3.4.2 create a race condition which allows attackers to write arbitrary files.Mar 4, 2026
- High8.8Weintek cMT-3072XH2 easyweb v2.1.53, OS v20231011 was discovered to contain an authenticated command injection vulnerability via the HMI Name parameter.Mar 3, 2026
- High8.8An issue was discovered in Nokia Impact before Mobile 23_FP1.Mar 3, 2026
- Critical9.8Remote Code Execution Vulnerability in NashornScriptEngineCreator is reported in Apache Ranger versions <= 2.7.0.Mar 3, 2026