Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- UnknownApache brpc Improper Neutralization of Special Elements used in a Command ('Command Injection')KEVEPSS 25.5%May 1, 2026
- UnknownSolarWinds web_help_desk Weak AuthenticationKEVEPSS 60.6%May 1, 2026
- UnknownGrafana Snapshot Feature Remote API Denial of ServiceKEVEPSS 83.0%May 1, 2026
- Critical9.3Synway smg_gateway_management_software Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')KEVEPSS 5.7%Apr 30, 2026
- Unknownastro \@astrojs\/cloudflare Server-Side Request Forgery (SSRF)KEVEPSS 0.9%Apr 30, 2026
- Unknownliquidfiles liquidfiles Authentication Bypass by Primary WeaknessKEVEPSS 0.8%Apr 30, 2026
- UnknownUse of Weak CredentialsKEVEPSS 1.4%Apr 30, 2026
- Unknownvitest.dev vitest Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')KEVEPSS 2.4%Apr 30, 2026
- Unknownlfprojects mlflow Path Traversal: '\..\filename'KEVEPSS 89.7%Apr 30, 2026
- Critical9.3Weaver e-office Unrestricted Upload of File with Dangerous TypeKEVEPSS 0.8%Apr 30, 2026
- High8.7Weaver e-cology Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')KEVEPSS 0.7%Apr 30, 2026
- Unknownblocksera cryptocurrency_widgets_pack Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')KEVEPSS 4.8%Apr 30, 2026
- Critical9.8Cockpit v2.13.5 and earlier is vulnerable to arbitrary code execution via the filter parameter within multiple endpoints.KEVEPSS 0.7%Apr 29, 2026
- UnknownJoomSport – for Sports: Team & League 'sortf' SQL InjectionKEVEPSS 1.3%Apr 29, 2026
- High8.1ProFTPD ProFTPD Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')KEVEPSS 7.3%Apr 28, 2026
- Critical9.2opencats opencats Improper Control of Generation of Code ('Code Injection')KEVEPSS 3.4%Apr 28, 2026
- Critical9.3WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function VulnerabilityKEVEPSS 98.5%Apr 28, 2026
- Critical9.3BerriAI LiteLLM SQL Injection VulnerabilityKEVEPSS 5.8%Apr 27, 2026
- UnknownQinglong Case-sensitive Path Matching Authentication BypassKEVApr 26, 2026
- UnknownWeaver e-cology Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')KEVEPSS 0.5%Apr 26, 2026
- High7.5Linux Kernel 'rxgk' Local Privilege EscalationKEVEPSS 0.6%Apr 24, 2026
- High8.8Improper Input Validation, Improper Control of Generation of Code ('Code Injection') vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ.KEVEPSS 4.1%Apr 24, 2026
- Medium5.3Exposure of Sensitive Information to an Unauthorized ActorKEVEPSS 0.7%Apr 23, 2026
- Critical10.0Paperclip is a Node.js server and React UI that orchestrates a team of AI agents to run a business.KEVEPSS 7.4%Apr 23, 2026
- Critical9.2Rclone is a command-line program to sync files and directories to and from different cloud storage providers.KEVEPSS 3.2%Apr 23, 2026