Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High8.1protobufjs compiles protobuf definitions into JavaScript (JS) functions.May 13, 2026
- High7.2A Remote Code Execution vulnerability in Claris FileMaker Cloud allowed a user with Admin Console privileges to bypass a front-end restriction on OS Script schedule ty…May 12, 2026
- Critical10.0ChurchCRM is an open-source church management system.May 12, 2026
- Medium6.5The The Advanced Custom Fields: Extended plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 0.9.2.3.May 12, 2026
- Critical9.4Scramble generates API documentation for Laravel project.May 12, 2026
- High8.6Wing FTP Server before 8.1.3 contains an authenticated remote code execution vulnerability in the session serialization mechanism that allows authenticated administrat…May 12, 2026
- Critical9.2SPIP versions prior to 4.4.14 contain a remote code execution vulnerability in the public space that is limited to certain nginx configurations, allowing attackers to…May 12, 2026
- High8.7SPIP versions prior to 4.4.14 contain a remote code execution vulnerability in the private space that allows attackers to execute arbitrary code in the context of the web server.May 12, 2026
- High8.8AntSword is a cross-platform website management toolkit.May 12, 2026
- Critical9.9Improper control of generation of code ('code injection') in Microsoft Dynamics 365 (on-premises) allows an authorized attacker to execute code over a network.May 12, 2026
- High8.8Improper control of generation of code ('code injection') in Microsoft Data Formulator allows an unauthorized attacker to execute code over a network.May 12, 2026
- Critical9.8The llm CLI tool thru 0.27.1 contains a critical code injection vulnerability via its --functions command-line argument.May 12, 2026
- Critical9.8Guardrails AI thru 0.6.7 contains a code injection vulnerability (CWE-94) in its Hub package installation mechanism.May 12, 2026
- Critical9.8Cognee thru v0.4.0 contains a critical remote code execution vulnerability in its notebook cell execution API endpoint.May 12, 2026
- Critical9.8The Adversarial Robustness Toolbox (ART) thru 1.20.1 contains a command-line argument injection vulnerability in its Kubeflow component (robustness_evaluation_fgsm_pytorch.py).May 12, 2026
- Critical9.8An issue in Open Source Kubectl MCP Server v1.1.1 allows attackers to execute arbitrary code on a victim system via user interaction with a crafted HTML page.May 12, 2026
- Critical9.8The Adversarial Robustness Toolbox (ART) thru 1.20.1 contains a remote code execution vulnerability in its Kubeflow component.May 12, 2026
- High8.8The superduper project thru v0.10.0 contains a critical remote code execution vulnerability in its query parsing component.May 12, 2026
- Critical9.8PySyft (Syft Datasite/Server) versions 0.9.5 and earlier are vulnerable to remote code execution due to insufficient validation and sandboxing of user-submitted code.May 12, 2026
- Critical9.8The _load_model() function in the neural_magic_training.py script of the optimate project in commit a6d302f912b481c94370811af6b11402f51d377f (2024-07-21) allows arbitr…May 12, 2026
- Medium4.3Due to a Code Injection vulnerability in SAP Application Server ABAP for SAP NetWeaver and ABAP Platform, an authenticated attacker could send specially crafted inputs…May 12, 2026
- High7.2WWBN AVideo is an open source video platform.May 11, 2026
- High7.3An issue in QuickJS-NG v.0.12.1 allows an attacker to execute arbitrary code via the js_mapped_arguments_mark functionMay 11, 2026
- High8.8OWASP BLT is a QA testing and vulnerability disclosure platform that encompasses websites, apps, git repositories, and more.May 11, 2026
- High7.3The flash-attention training framework thru commit e724e2588cbe754beb97cf7c011b5e7e34119e62 (2025-13-04) contains an insecure deserialization vulnerability (CWE-502) i…May 11, 2026