Catalog

Findings

Filter the merged record by severity, source, stack, and weakness type.

SearchSeveritySourceStackWeaknessSort

Known exploited only

Reset

Medium5.3Plane is an open-source project management tool.CVE-2026-102988 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.2%Oct 13, 2026
UnknownPraisonAI: PGVector and Cassandra knowledge stores interpolate vector dimensions into DDLCVE-2026-60090 · CVE.org · GitHub Advisory Database · OSV.dev · PyPIOct 8, 2026
High7.4Improper neutralization of special elements in data query logic in Microsoft Discovery Studio allows an unauthorized attacker to disclose information over a network.CVE-2026-62906 · microsoft · discovery studio · CVE.org · FIRST EPSS · NIST NVD · MicrosoftEPSS 0.9%Sep 3, 2026
Medium6.9phpMyFAQ is an open source FAQ web application.CVE-2026-34973 · phpmyfaq · phpmyfaq · CVE.org · NIST NVDApr 2, 2026
High8.1Azure Data Explorer MCP Server is a Model Context Protocol (MCP) server that enables AI assistants to execute KQL queries and explore Azure Data Explorer (ADX/Kusto) d…CVE-2026-33980 · pab1it0 · azure data explorer mcp server · CVE.org · NIST NVD · Azure, MicrosoftMar 27, 2026
High7.7An Authenticated NoSQL Injection vulnerability found in UniFi Network Application could allow a malicious actor with authenticated access to the network to escalate privileges.CVE-2026-22558 · CVE.org · NIST NVD · UbiquitiMar 19, 2026
Medium5.3Non-relational SQL injection vulnerability (NoSQLi) in the Wakyma web application, specifically in the endpoint 'vets.wakyma.com/pets/print-tags'.CVE-2026-3023 · wakyma · wakyma · CVE.org · NIST NVDMar 16, 2026
High7.1Non-relational SQL injection vulnerability (NoSQLi) in the Wakyma web application, specifically in the endpoint 'vets.wakyma.com/hospitalization/generate-hospitalization-summary'.CVE-2026-3022 · wakyma · wakyma · CVE.org · NIST NVDMar 16, 2026
High7.1Non-relational SQL injection vulnerability (NoSQLi) in the Wakyma web application, specifically in the endpoint 'vets.wakyma.com/centro/equipo/empleado'.CVE-2026-3021 · wakyma · wakyma · CVE.org · NIST NVDMar 16, 2026
Critical9.3Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js.CVE-2026-32248 · parseplatform · parse-server · CVE.org · NIST NVD · Node.jsMar 12, 2026
High8.1Graphiti is a framework for building and querying temporal context graphs for AI agents.CVE-2026-32247 · getzep · graphiti · CVE.org · NIST NVDMar 12, 2026
Medium5.3Sylius is an Open Source eCommerce Framework on Symfony.CVE-2026-31825 · sylius · sylius · CVE.org · NIST NVDMar 10, 2026
Critical9.3Feathersjs is a framework for creating web APIs and real-time applications with TypeScript or JavaScript.CVE-2026-29793 · feathersjs · feathers · CVE.org · NIST NVDMar 10, 2026
High8.7Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js.CVE-2026-30941 · parseplatform · parse-server · CVE.org · NIST NVD · Node.jsMar 10, 2026
Medium6.9Rocket.Chat is an open-source, secure, fully customizable communications platform.CVE-2026-30833 · rocket.chat · rocket.chat · CVE.org · NIST NVDMar 6, 2026
High7.8The NVDA Dev & Test Toolbox is an NVDA add-on for gathering tools to help NVDA development and testing.CVE-2026-28211 · CVE.org · NIST NVDFeb 26, 2026
High7.1New API is a large language mode (LLM) gateway and artificial intelligence (AI) asset management system.CVE-2026-25591 · newapi · new api · CVE.org · NIST NVDFeb 24, 2026