Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- UnknownVU#157374: XSS vulnerability in Shopware 6 enables Admin Token Theft and RCEOct 14, 2026
- UnknownCVE-2026-96681 is listed by VU#166125: Bisheng has authentication bypass vulnerabilities.Oct 14, 2026
- UnknownCVE-2026-96679 is listed by VU#166125: Bisheng has authentication bypass vulnerabilities.Oct 14, 2026
- UnknownCVE-2026-100156 is listed by VU#166125: Bisheng has authentication bypass vulnerabilities.Oct 14, 2026
- UnknownVU#382143: Lowcoder Query Library API contains cross-tenant authorization bypass allowing for data exfiltrationOct 14, 2026
- UnknownCVE-2026-103537 is listed by VU#162329: Multiple vulnerabilities in Thelia 2.6.0 and 2.6.1.Oct 13, 2026
- UnknownCVE-2026-103535 is listed by VU#162329: Multiple vulnerabilities in Thelia 2.6.0 and 2.6.1.Oct 13, 2026
- UnknownCVE-2026-103529 is listed by VU#162329: Multiple vulnerabilities in Thelia 2.6.0 and 2.6.1.Oct 13, 2026
- UnknownCVE-2026-103528 is listed by VU#162329: Multiple vulnerabilities in Thelia 2.6.0 and 2.6.1.Oct 13, 2026
- UnknownCVE-2026-103527 is listed by VU#162329: Multiple vulnerabilities in Thelia 2.6.0 and 2.6.1.Oct 13, 2026
- UnknownCVE-2026-103526 is listed by VU#162329: Multiple vulnerabilities in Thelia 2.6.0 and 2.6.1.Oct 13, 2026
- UnknownCVE-2026-103524 is listed by VU#162329: Multiple vulnerabilities in Thelia 2.6.0 and 2.6.1.Oct 13, 2026
- UnknownCVE-2026-103523 is listed by VU#162329: Multiple vulnerabilities in Thelia 2.6.0 and 2.6.1.Oct 13, 2026
- UnknownCVE-2026-103522 is listed by VU#162329: Multiple vulnerabilities in Thelia 2.6.0 and 2.6.1.Oct 13, 2026
- UnknownCVE-2026-103521 is listed by VU#162329: Multiple vulnerabilities in Thelia 2.6.0 and 2.6.1.Oct 13, 2026
- UnknownVU#553437: InsydeH2O IHISI SMM is vulnerable to unsafe memory write operationsOct 1, 2026
- UnknownVU#762428: Authlib library contains a signature‑verification bypass vulnerabilitySep 28, 2026
- UnknownCVE-2026-82989 is listed by VU#234131: ViewSonic vCast media streaming service allows unauthenticated screen exfiltration and device compromise.Sep 25, 2026
- UnknownCVE-2026-82988 is listed by VU#234131: ViewSonic vCast media streaming service allows unauthenticated screen exfiltration and device compromise.Sep 25, 2026
- UnknownCVE-2026-82987 is listed by VU#234131: ViewSonic vCast media streaming service allows unauthenticated screen exfiltration and device compromise.Sep 25, 2026
- UnknownCVE-2026-18320 is listed by VU#699627: Readwise Reader for Android, version 8.7.2, contains multiple XSS vulnerabilities.Sep 25, 2026
- UnknownCVE-2026-18312 is listed by VU#699627: Readwise Reader for Android, version 8.7.2, contains multiple XSS vulnerabilities.Sep 25, 2026
- UnknownCVE-2026-18311 is listed by VU#699627: Readwise Reader for Android, version 8.7.2, contains multiple XSS vulnerabilities.Sep 25, 2026
- UnknownVU#676317: Norwegian Cruise Line door access controller contains an improper authentication vulnerabilitySep 24, 2026
- UnknownVU#754548: Cinnamon's Kotaemon contains improper authorization checks in Kotaemon multi‑user chat handlersSep 23, 2026
29 records · page 1 of 2
PreviousNext