Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- Critical9.8Flowise is a drag & drop user interface to build a customized large language model flow.EPSS 1.2%Apr 23, 2026
- Medium5.3nimiq-blockchain provides persistent block storage for Nimiq's Rust implementation.EPSS 0.4%Apr 22, 2026
- Critical9.6nimiq-block contains block primitives to be used in Nimiq's Rust implementation.EPSS 0.3%Apr 22, 2026
- Medium5.5A logic error in the cut utility of uutils coreutils causes the program to incorrectly interpret the literal two-byte string '' (two single quotes) as an empty delimiter.EPSS 0.2%Apr 22, 2026
- Low3.3A logic error in the env utility of uutils coreutils causes a failure to correctly parse command-line arguments when utilizing the -S (split-string) option.EPSS 0.1%Apr 22, 2026
- Medium5.5An argument parsing error in the kill utility of uutils coreutils incorrectly interprets kill -1 as a request to send the default signal (SIGTERM) to PID -1.EPSS 0.2%Apr 22, 2026
- Medium4.4The comm utility in uutils coreutils incorrectly consumes data from non-regular file inputs before performing comparison operations.EPSS 0.1%Apr 22, 2026
- Medium6.5Insufficient validation of Chrome extension identifiers in Raindrop.io Bookmark Manager Web App 5.6.76.0 allows attackers to obtain sensitive user data via a crafted request.EPSS 0.4%Apr 22, 2026
- Medium6.5Vulnerability in Spring Spring Security.EPSS 0.2%Apr 22, 2026
- High7.2mailcow: dockerized is an open source groupware/email suite based on docker.EPSS 0.4%Apr 21, 2026
- Medium5.3Other issue in the JavaScript Engine component.EPSS 0.3%Apr 21, 2026
- Medium5.3Other issue in the Networking: DNS component.EPSS 0.2%Apr 21, 2026
- High8.2Zervit's portable HTTP/web server is vulnerable to remote DoS attacks when a configuration reset request is made.EPSS 0.3%Apr 21, 2026
- Medium5.3The Responsive Blocks – Page Builder for Blocks & Patterns plugin for WordPress is vulnerable to Unauthenticated Open Email Relay in all versions up to, and including, 2.2.0.EPSS 0.4%Apr 21, 2026
- High8.8Neko is a a self-hosted virtual browser that runs in Docker and uses WebRTC In versions 3.0.0 through 3.0.10 and 3.1.0 through 3.1.1, any authenticated user can immedi…EPSS 0.6%Apr 21, 2026
- Critical9.9Spinnaker is an open source, multi-cloud continuous delivery platform.EPSS 0.8%Apr 20, 2026
- High7.2Dell PowerProtect Data Domain, versions 8.5 through 8.6 contain an improper input validation vulnerability.EPSS 0.4%Apr 20, 2026
- High7.2Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2025 release version 8.3.1.0 through 8.3.1.20, LTS2024 release versions 7.13.1.0 through 7.13.1.60 cont…EPSS 0.4%Apr 20, 2026
- Low2.1A vulnerability was detected in Cockpit-HQ Cockpit up to 2.13.5.EPSS 0.4%Apr 20, 2026
- Critical9.3NovumOS is a custom 32-bit operating system written in Zig and x86 Assembly.EPSS 0.2%Apr 18, 2026
- Medium6.1Stirling-PDF is a locally hosted web application that facilitates various operations on PDF files.EPSS 0.2%Apr 17, 2026
- High7.3Software installed and run as a non-privileged user may conduct improper GPU system calls to gain write permission to read-only wrapped user-mode memory and files.EPSS 0.1%Apr 17, 2026
- High7.1A Denial of Service (DoS) vulnerability exists in the Protobuf PHP library during the parsing of untrusted input.EPSS 0.4%Apr 16, 2026
- High7.2Due to improper input validation in one of the Eaton Intelligent Power Protector (IPP) XML, it is possible for an attacker with admin privileges and access to the loca…EPSS 0.3%Apr 16, 2026
- High8.8Composer is a dependency manager for PHP.EPSS 1.9%Apr 15, 2026