Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- Medium6.9Nginx UI is a web user interface for the Nginx web server.EPSS 0.5%Mar 30, 2026
- High7.5OpenAirInterface V2.2.0 AMF crashes when it fails to decode the message.EPSS 0.5%Mar 30, 2026
- Medium5.3MRCMS V3.1.2 contains an unauthenticated directory enumeration vulnerability in the file management module.EPSS 0.5%Mar 30, 2026
- Medium6.5A flaw in Node.js URL processing causes an assertion failure in native code when is called with a malformed internationalized domain name (IDN) containing invalid char…EPSS 0.3%Mar 30, 2026
- High7.5The SureForms – Contact Form, Payment Form & Other Custom Form Builder plugin for WordPress is vulnerable to Payment Amount Bypass in all versions up to, and including, 2.5.2.Mar 28, 2026
- Medium5.3The PyPI package is a pure Python implementation of ECC (Elliptic Curve Cryptography) with support for ECDSA (Elliptic Curve Digital Signature Algorithm), EdDSA (Edwar…EPSS 0.5%Mar 27, 2026
- High7.5Forge (also called ) is a native implementation of Transport Layer Security in JavaScript.EPSS 0.4%Mar 27, 2026
- Medium6.5Statamic is a Laravel and Git powered content management system (CMS).EPSS 0.4%Mar 27, 2026
- High7.5A Business Logic vulnerability exists in SourceCodester Pharmacy Product Management System 1.0 in the add-stock.php file.EPSS 0.4%Mar 27, 2026
- High7.5A Business Logic vulnerability exists in SourceCodester Pharmacy Product Management System 1.0 in the add-stock.php file.EPSS 0.5%Mar 27, 2026
- Critical9.4OpenBao is an open source identity-based secrets management system.EPSS 0.4%Mar 27, 2026
- Low1.2GlobaLeaks is free and open-source whistleblowing software.EPSS 0.3%Mar 27, 2026
- Critical9.6In its design for automatic terminal command execution, AI Code offers two options: Execute safe commands and execute all commands.EPSS 0.7%Mar 27, 2026
- High7.2A buffer overflow vulnerability exists in the ONVIF GetStreamUri function of LSC Indoor Camera V7.6.32.EPSS 0.5%Mar 27, 2026
- High7.3A user with permission "update world" in any Venueless world is able to exfiltrate chat messages from direct messages or channels in other worlds on the same server du…Mar 27, 2026
- High7.5ManageSieve AUTHENTICATE command crashes when using literal as SASL initial response.EPSS 0.7%Mar 27, 2026
- High7.5When sending invalid base64 SASL data, login process is disconnected from the auth server, causing all active authentication sessions to fail.EPSS 0.4%Mar 27, 2026
- Medium5.8OpenFGA is a high-performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar.EPSS 0.3%Mar 27, 2026
- Medium6.5Kirby CMS through 5.1.4 allows an authenticated user with 'Editor' permissions to cause a persistent Denial of Service (DoS) via a malformed image upload.EPSS 0.6%Mar 26, 2026
- Critical9.8HCL Aftermarket DPC is affected by Improper Input Validation which allows an attacker to inject executable code and can carry out attacks such as XSS, SQL Injection, C…EPSS 1.0%Mar 26, 2026
- Medium5.5A security flaw has been discovered in 648540858 wvp-GB28181-pro up to 2.7.4.Mar 26, 2026
- High7.5LiquidJS is a Shopify / GitHub Pages compatible template engine in pure JavaScript.EPSS 0.5%Mar 26, 2026
- High7.5LiquidJS is a Shopify / GitHub Pages compatible template engine in pure JavaScript.EPSS 0.6%Mar 26, 2026
- High7.5NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system.EPSS 0.8%Mar 25, 2026
- High7.5A denial-of-service issue was addressed with improved input validation.EPSS 0.7%Mar 25, 2026