Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- High7.0Gibbon versions before v30.0.01 are affected by an authenticated SQL Injection vulnerability by abusing the Tracking/graphing https://github.com/GibbonEdu/core/blob/c4…May 9, 2026
- Critical9.8Postiz is an AI social media scheduling tool.EPSS 0.8%May 8, 2026
- High8.4PraisonAI is a multi-agent teams system.EPSS 0.2%May 8, 2026
- Critical9.8electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client.EPSS 2.5%May 8, 2026
- Critical9.8electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client.EPSS 2.5%May 8, 2026
- Medium5.9A reflected HTML injection vulnerability was identified in the GitHub Enterprise Server Management Console login page that could allow credential theft.EPSS 0.3%May 7, 2026
- High7.9A server-side request forgery (SSRF) vulnerability was identified in the GitHub Enterprise Server notebook viewer that allowed an attacker to access internal services…EPSS 0.9%May 7, 2026
- Medium6.3A denial of service vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to cause service disruption by sending crafted re…EPSS 0.7%May 7, 2026
- Medium6.3An authentication bypass vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to create a local user account, bypassing th…EPSS 0.4%May 7, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: kcm: fix zero-frag skb in frag_list on partial sendmsg error Syzkaller reported a warning in kcm_wr…EPSS 0.2%May 6, 2026
- Medium6.5Fiber is a web framework for Go.EPSS 0.4%May 5, 2026
- Medium5.5A security flaw has been discovered in YunaiV yudao-cloud up to 2026.01.EPSS 0.7%May 3, 2026
- Low2.1A vulnerability was identified in YunaiV yudao-cloud up to 2026.01.EPSS 0.3%May 3, 2026
- Unknownlfprojects mlflow Path Traversal: '\..\filename'KEVEPSS 89.7%Apr 30, 2026
- Critical9.0Jenkins GitHub Plugin 1.46.0 and earlier improperly processes the current job URL as part of JavaScript implementing validation of the feature "GitHub hook trigger for…EPSS 0.5%Apr 29, 2026
- Medium4.3A missing permission check in Jenkins GitHub Branch Source Plugin 1967.vdea_d580c1a_b_a_ and earlier allows attackers with Overall/Read permission to connect to an att…EPSS 0.3%Apr 29, 2026
- Low1.9A security vulnerability has been detected in OSPG binwalk up to 2.4.3.EPSS 0.2%Apr 27, 2026
- Critical10.0Gemini CLI: Remote Code Execution via workspace trust and tool allowlisting bypassesEPSS 0.2%Apr 24, 2026
- High7.4Skim is a fuzzy finder designed to through files, lines, and commands.EPSS 0.4%Apr 24, 2026
- High7.8In the Linux kernel, the following vulnerability has been resolved: mm: blk-cgroup: fix use-after-free in cgwb_release_workfn() cgwb_release_workfn() calls css_put(wb-…EPSS 0.2%Apr 24, 2026
- High8.9A server-side request forgery (SSRF) vulnerability was identified in GitHub Enterprise Server that allowed an attacker to extract sensitive environment variables from…EPSS 0.6%Apr 21, 2026
- High7.2An improper authorization vulnerability in scoped user-to-server (ghu_) token authorization in GitHub Enterprise Server allows an authenticated attacker to access priv…EPSS 0.5%Apr 21, 2026
- Medium5.3An improper authorization vulnerability was identified in GitHub Enterprise Server that allowed an authenticated attacker to determine the names of private repositorie…EPSS 0.5%Apr 21, 2026
- High7.5An incorrect regular expression vulnerability was identified in GitHub Enterprise Server that allowed an attacker to bypass OAuth redirect URI validation.EPSS 0.7%Apr 21, 2026
- Medium5.3An authorization bypass vulnerability was identified in GitHub Enterprise Server that allowed an attacker with admin access on one repository to modify the secret scan…EPSS 0.5%Apr 21, 2026