Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium5.7CosyVoice thru commit 6e01309e01bc93bbeb83bdd996b1182a81aaf11e (2025-30-21) contains an insecure deserialization vulnerability (CWE-502) in its model loading component.May 11, 2026
- High7.3CosyVoice thru commit 6e01309e01bc93bbeb83bdd996b1182a81aaf11e (2025-30-21) contains an insecure deserialization vulnerability (CWE-502) in its gRPC server component.May 11, 2026
- Critical9.1Grav is a file-based Web platform.May 11, 2026
- Low1.9A vulnerability was identified in Devs Palace ERP Online up to 4.0.0.May 11, 2026
- Low1.9A security vulnerability has been detected in Devs Palace ERP Online up to 4.0.0.May 11, 2026
- Low1.9A weakness has been identified in Devs Palace ERP Online up to 4.0.0.May 11, 2026
- Low1.9A security flaw has been discovered in Devs Palace ERP Online up to 4.0.0.May 11, 2026
- Low1.9A vulnerability was identified in Devs Palace ERP Online up to 4.0.0.May 11, 2026
- High8.7Aero CMS 0.0.1 contains a PHP code injection vulnerability that allows authenticated attackers to execute arbitrary PHP code by uploading malicious files through the i…May 10, 2026
- High8.7Evolution CMS 3.1.6 contains a remote code execution vulnerability that allows authenticated users with module creation permissions to execute arbitrary system command…May 10, 2026
- High8.7ImpressCMS 1.4.2 contains a remote code execution vulnerability in the autotasks administrative interface that allows authenticated attackers to execute arbitrary PHP…May 10, 2026
- High8.7Sentry 8.2.0 contains a remote code execution vulnerability that allows authenticated superusers to execute arbitrary commands by injecting malicious pickle-serialized…May 10, 2026
- Low1.9A flaw has been found in Devs Palace ERP Online up to 4.0.0.May 10, 2026
- Low1.9A vulnerability was detected in Devs Palace ERP Online up to 4.0.0.May 10, 2026
- Low1.9A security vulnerability has been detected in Devs Palace ERP Online up to 4.0.0.May 10, 2026
- Low1.9A weakness has been identified in Devs Palace ERP Online up to 4.0.0.May 10, 2026
- Low2.0A vulnerability was detected in codelibs Fess up to 15.5.1.May 9, 2026
- Low2.1A vulnerability was detected in JeecgBoot up to 3.9.1.May 9, 2026
- High7.8pyp2spec generates working Fedora RPM spec file for Python projects.May 9, 2026
- Critical9.8Postiz is an AI social media scheduling tool.May 8, 2026
- High8.9Ray is an AI compute engine.May 8, 2026
- Medium5.3Insufficient input validation of the parameter of the plugin allows arbitrary Perl code execution on behalf of the already authenticated account's system user.May 8, 2026
- Critical9.4PraisonAI is a multi-agent teams system.May 8, 2026
- High8.4PraisonAI is a multi-agent teams system.May 8, 2026
- Critical9.9ai-scanner is an AI model safety scanner built on NVIDIA garak.May 8, 2026