Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Low1.9A vulnerability was detected in MaxSite CMS up to 109.3.Apr 26, 2026
- Low1.9A weakness has been identified in MaxSite CMS up to 109.3.Apr 26, 2026
- Low1.9A vulnerability was found in Datacom DM4100 1.3.6.1.4.1.3709.Apr 25, 2026
- Low1.9A vulnerability has been found in Datacom DM4100 1.3.6.1.4.1.3709.Apr 25, 2026
- Low1.9A flaw has been found in BIVOCOM TR321 21.1.1.50.Apr 25, 2026
- Low1.9A vulnerability was detected in BDCOM P3310D 0.4.2 10.1.0F Build 86345.Apr 25, 2026
- Low1.9A security vulnerability has been detected in BDCOM P3310D 0.4.2 10.1.0F Build 86345.Apr 25, 2026
- Low1.9A weakness has been identified in BDCOM P3310D 0.4.2 10.1.0F Build 86345.Apr 25, 2026
- Low1.9A security flaw has been discovered in BDCOM P3310D 0.4.2 10.1.0F Build 86345.Apr 25, 2026
- Low2.0A vulnerability was found in projeto-siga siga 11.0.3.18.Apr 25, 2026
- High8.2Versions of the package simple-git before 3.36.0 are vulnerable to Remote Code Execution (RCE) due to an incomplete fix for [CVE-2022-25912](https://security.snyk.io/v…Apr 25, 2026
- High7.4Skim is a fuzzy finder designed to through files, lines, and commands.Apr 24, 2026
- High8.8Improper Input Validation, Improper Control of Generation of Code ('Code Injection') vulnerability in Apache ActiveMQ, Apache ActiveMQ Broker, Apache ActiveMQ All.Apr 24, 2026
- High8.8Improper Input Validation, Improper Control of Generation of Code ('Code Injection') vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ.Apr 24, 2026
- High8.8Flowise is a drag & drop user interface to build a customized large language model flow.Apr 23, 2026
- Critical9.4Flowise is a drag & drop user interface to build a customized large language model flow.Apr 23, 2026
- High8.1Contour is a Kubernetes ingress controller using Envoy proxy.Apr 23, 2026
- Medium6.4ntfy before 2.22.0 allows SSRF because of an unanchored regular expression for web push endpoint URLs.Apr 23, 2026
- Critical9.9Improper Control of Generation of Code ('Code Injection') vulnerability in Funnelforms LLC FunnelFormsPro allows Remote Code Inclusion.This issue affects FunnelFormsPr…Apr 23, 2026
- Critical9.8A critical remote code execution vulnerability exists in the unauthenticated REST API endpoint /99/ImportSQLTable in H2O-3 version 3.46.0.9 and prior.Apr 23, 2026
- Critical9.1Froxlor is open source server administration software.Apr 23, 2026
- Critical9.0Luanti (formerly Minetest) is an open source voxel game-creation platform.Apr 23, 2026
- Critical9.2Rclone is a command-line program to sync files and directories to and from different cloud storage providers.Apr 23, 2026
- High7.3Kiota is an OpenAPI based HTTP Client code generator.Apr 22, 2026
- Critical9.8An attacker can send a notify request that causes a new secondary domain to be added to the bind backend, but causes said backend to update its configuration to an inv…Apr 22, 2026