Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- Medium5.5A stack overflow was addressed with improved input validation.EPSS 0.2%Mar 25, 2026
- High8.4A validation issue existed in the entitlement verification.EPSS 0.2%Mar 25, 2026
- Medium5.3This issue was addressed with improved input validation.EPSS 0.2%Mar 25, 2026
- High8.7Injection vulnerabilities due to validation/sanitisation of user-supplied input in ActiveMatrix BusinessWorks and Enterprise Administrator allows information disclosur…Mar 24, 2026
- Medium6.9NiceGUI is a Python-based UI framework.EPSS 0.7%Mar 24, 2026
- High8.8An Improper Input Validation vulnerability in UniFi Network Server may allow unauthorized access to an account if the account owner is socially engineered into clickin…EPSS 0.4%Mar 24, 2026
- Low2.9Astro is a web framework.EPSS 0.4%Mar 24, 2026
- Critical9.8CWE-20 vulnerability in MolotovCherry Android-ImageMagick7.This issue affects Android-ImageMagick7: before 7.1.2-11.Mar 24, 2026
- High7.5Freeciv21 is a free open source, turn-based, empire-building strategy game.EPSS 1.2%Mar 24, 2026
- High7.1A Denial-of-Service (DoS) vulnerability in the httpd component of TP-Link's TD-W8961N v4.0 due to improper input sanitization, allows crafted requests to trigger a pro…EPSS 0.3%Mar 23, 2026
- Low1.9A vulnerability was identified in PyTorch 2.10.0.Mar 22, 2026
- Medium5.3The Appmax plugin for WordPress is vulnerable to Improper Input Validation in all versions up to, and including, 1.0.3.Mar 21, 2026
- Medium5.3The REST API TO MiniProgram plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.1.2.Mar 21, 2026
- High8.7Socket.IO is an open source, real-time, bidirectional, event-based, communication framework.EPSS 0.7%Mar 20, 2026
- Medium5.4Calling gethostbyaddr or gethostbyaddr_r with a configured nsswitch.conf that specifies the library's DNS backend in the GNU C library version 2.34 to version 2.43 cou…Mar 20, 2026
- High7.1The webbrowser.open() API would accept leading dashes in the URL which could be handled as command line options for certain web browsers.Mar 20, 2026
- Medium4.3Zimbra Collaboration (ZCS) 10.0 and 10.1 contains an LDAP injection vulnerability in the Mailbox SOAP service within a FolderAction operation.EPSS 0.4%Mar 20, 2026
- High8.2Discourse is an open-source discussion platform.EPSS 0.4%Mar 20, 2026
- High8.8Insufficient validation of untrusted input in Navigation in Google Chrome prior to 146.0.7680.153 allowed a remote attacker who had compromised the renderer process to…Mar 20, 2026
- Low1.2Missing required cryptographic step in the TLS 1.3 client HelloRetryRequest handshake logic in wolfSSL could lead to a compromise in the confidentiality of TLS-protect…EPSS 0.4%Mar 19, 2026
- High8.6SQLBot is an intelligent data query system based on a large language model and RAG.EPSS 0.8%Mar 19, 2026
- Critical9.8ormar is a async mini ORM for Python.EPSS 1.2%Mar 19, 2026
- High8.8A security issue was discovered in ingress-nginx where a combination of Ingress annotations can be used to inject configuration into nginx.Mar 19, 2026
- Low2.3openapi-to-java-records-mustache-templates allows users to generate Java Records from OpenAPI specifications.EPSS 0.5%Mar 18, 2026
- Low2.1Out-of-bounds array write in Xpdf 4.06 and earlier, due to incorrect validation of the "N" field in ICCBased color spaces.Mar 18, 2026