Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- Medium6.1OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems.EPSS 0.3%Apr 3, 2026
- High8.7RAGFlow is an open-source RAG (Retrieval-Augmented Generation) engine.EPSS 0.6%Apr 3, 2026
- High8.7Hirschmann HiOS devices versions prior to 08.1.00 and 07.1.01 contain a denial of service vulnerability in the EtherNet/IP stack where improper handling of packet leng…EPSS 0.9%Apr 3, 2026
- Low1.1A vulnerability has been found in NASA cFS up to 7.0.0.Apr 3, 2026
- Low2.7Ella Core is a 5G core designed for private networks.EPSS 0.3%Apr 2, 2026
- High7.1vLLM is an inference and serving engine for large language models (LLMs).EPSS 0.5%Apr 2, 2026
- Low2.1Signal K Server is a server application that runs on a central hub in a boat.EPSS 0.4%Apr 2, 2026
- Medium5.4phpMyFAQ is an open source FAQ web application.EPSS 0.3%Apr 2, 2026
- High7.8SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to bypass subject sanitization and forge security tags using Unicode lookalike characters.EPSS 0.3%Apr 2, 2026
- High7.8SEPPmail Secure Email Gateway before version 15.0.3 does not properly authenticate the inner message of S/MIME-encrypted MIME entities, allowing an attacker to control…EPSS 0.4%Apr 2, 2026
- High7.7SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to bypass subject sanitization and forge tags such as [signed OK].EPSS 0.3%Apr 2, 2026
- Medium5.3SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to hide security tags from users by crafting a long subject.EPSS 0.3%Apr 2, 2026
- Medium5.3SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to craft a password-tag that bypasses subject sanitization.EPSS 0.4%Apr 2, 2026
- Medium5.3SEPPmail Secure Email Gateway before version 15.0.3 allows an attacker to upload PGP keys with UIDs that do not match their email address.EPSS 0.4%Apr 2, 2026
- Medium6.3AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python.EPSS 0.4%Apr 1, 2026
- High8.6Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability.EPSS 0.5%Apr 1, 2026
- Medium6.5A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, remote attacker with admin-level privileges to execute arbitrary code…EPSS 0.4%Apr 1, 2026
- Critical9.8A vulnerability in the change password functionality of Cisco Integrated Management Controller (IMC) could allow an unauthenticated, remote attacker to bypass authenti…EPSS 1.0%Apr 1, 2026
- Medium6.5A Business Logic vulnerability exists in SourceCodester Loan Management System v1.0 due to the lack of proper input validation.EPSS 0.5%Apr 1, 2026
- Medium6.1FreeScout is a free help desk and shared inbox built with PHP's Laravel framework.EPSS 0.3%Mar 31, 2026
- Low3.8A vulnerability exists in the SonicWall Email Security appliance due to improper input sanitization that may lead to data corruption, allowing a remote authenticated a…Mar 31, 2026
- Low2.7A denial-of-service (DoS) vulnerability exists due to improper input validation in the SonicWall Email Security appliance, allowing a remote authenticated attacker as…Mar 31, 2026
- Low3.5Admidio is an open-source user management solution.EPSS 0.2%Mar 31, 2026
- High8.3Cato Networks’ Socket versions prior to 25 contain a command injection vulnerability that allows an authenticated attacker with access to the Socket web interface (UI)…EPSS 1.0%Mar 31, 2026
- Medium4.9Tautulli is a Python based monitoring and tracking tool for Plex Media Server.EPSS 0.4%Mar 30, 2026