Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Critical9.8math-codegen generates code from mathematical expressions.May 8, 2026
- High8.8Account users are allowed by default to register templates to be downloaded directly to the primary storage for deploying instances using the KVM hypervisor.May 8, 2026
- Critical9.81C-Bitrix through 25.100.500 allows Remote Code Execution because an actor with SOURCE/WRITE permissions for the Translate Module can upload and execute code by sendin…EPSS 1.5%May 8, 2026
- High7.3A SSTI (server side template injection) vulnerability in the custom template export function in yeti-platform yeti before 2.1.12 allows attackers to execute code on th…EPSS 3.9%May 8, 2026
- Low1.9A flaw has been found in SourceCodester Pharmacy Sales and Inventory System 1.0.May 8, 2026
- Critical9.4electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client.May 8, 2026
- High8.6LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format.May 8, 2026
- Critical10.0OpenLearnX is an open-source, decentralized learning and assessment platform.May 8, 2026
- Medium5.3Nuclei is a vulnerability scanner built on a simple YAML-based DSL.May 8, 2026
- Low2.1A security vulnerability has been detected in SourceCodester Pizzafy Ecommerce System 1.0.May 8, 2026
- Medium4.7i18nextify is a JavaScript library that adds website internationalization via a script tag, without source code changes.May 7, 2026
- High7.8GitPython is a python library used to interact with Git repositories.May 7, 2026
- High7.8Notepad Next is a cross-platform, reimplementation of Notepad++.May 7, 2026
- Critical9.8ChestnutCMS v1.5.10 has a SQL injection vulnerability.May 7, 2026
- Critical9.8NPM package next-npm-version1.0.1 is vulnerable to Command injection.EPSS 1.5%May 7, 2026
- Critical9.8Other issue in the WebRTC component.May 7, 2026
- Critical9.8Remote Code Execution Vulnerability in Hitachi Storage Navigator and the maintenance console in Hitachi Virtual Storage Platform G130, G150, G350, G370, G700, G900, F3…EPSS 0.5%May 7, 2026
- High8.8Math.js is an extensive math library for JavaScript and Node.js.May 7, 2026
- Medium4.2Script injection in UI in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who convinced a user to engage in specific UI gestures to inject arbitrary scr…May 6, 2026
- Medium6.6Vulnerability in the Oracle Cloud Native Environment Command Line Interface product of Oracle Open Source Projects.May 6, 2026
- High8.8A remote code execution vulnerability exists in Notification Settings on GeoVision GV-ASWeb 6.2.0.May 6, 2026
- Critical9.8ERPNext v15.103.1 and before is vulnerable to Server-Side Template Injection (SSTI).May 5, 2026
- High8.7Frappe Framework ERPNext 13.4.0 contains a sandbox escape vulnerability in RestrictedPython that allows authenticated users with System Manager role to execute arbitra…EPSS 0.6%May 5, 2026
- Critical9.0Nginx UI is a web user interface for the Nginx web server.May 4, 2026
- High7.1n8n is an open source workflow automation platform.May 4, 2026