Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Unknownopenai-codex-0.162.1-2.1 on GA mediaOct 15, 2026
- High8.3Nginx UI OTP secure-session step-up is missing on sensitive mutation routesOct 12, 2026
- High7.8ZDI-26-650: (Pwn2Own) OpenAI Codex External Control of Configuration Setting Remote Code Execution VulnerabilityEPSS 0.1%Sep 10, 2026
- High7.8ZDI-26-649: (Pwn2Own) OpenAI Codex Improper Neutralization of Control Sequences Remote Code Execution VulnerabilityEPSS 0.3%Sep 10, 2026
- High7.8ZDI-26-648: (Pwn2Own) OpenAI Codex External Control of System or Configuration Setting Remote Code Execution VulnerabilityEPSS 0.1%Sep 10, 2026
- Critical9.8ZDI-26-651: (Pwn2Own) OpenAI Codex External Control of System or Configuration Setting Remote Code Execution VulnerabilityEPSS 0.4%Sep 1, 2026
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodexThemes TheGem Theme Elements (for Elementor) allows DOM-Base…Apr 27, 2026
- Critical9.8A vulnerability was identified in OpenAI Codex CLI v0.23.0 and before that enables code execution through malicious MCP (Model Context Protocol) configuration files.EPSS 6.6%Apr 14, 2026
- High8.8Library CMS 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to bypass authentication by injecting SQL code through the username parameter.EPSS 0.5%Mar 26, 2026
- High7.1School Management System CMS 1.0 contains an SQL injection vulnerability in the admin login functionality that allows attackers to bypass authentication by injecting S…EPSS 0.5%Mar 26, 2026
- High8.8Wecodex Hotel CMS 1.0 contains an SQL injection vulnerability in the admin login functionality that allows unauthenticated attackers to bypass authentication by injecting SQL code.EPSS 0.5%Mar 26, 2026
- High8.8Wecodex Restaurant CMS 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through t…EPSS 0.5%Mar 26, 2026
- High8.8Shipping System CMS 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to bypass authentication by injecting SQL code through the username parameter.EPSS 0.5%Mar 26, 2026
- High8.7Cloud CLI (aka Claude Code UI) is a desktop and mobile UI for Claude Code, Cursor CLI, Codex, and Gemini-CLI.Mar 11, 2026
- High8.8Cloud CLI (aka Claude Code UI) is a desktop and mobile UI for Claude Code, Cursor CLI, Codex, and Gemini-CLI.Mar 11, 2026
- High8.7Cloud CLI (aka Claude Code UI) is a desktop and mobile UI for Claude Code, Cursor CLI, Codex, and Gemini-CLI.Mar 11, 2026
16 records · page 1 of 1
PreviousNext