Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Low2.1A vulnerability was identified in Oinone Pamirs up to 7.2.0.May 17, 2026
- Medium4.6Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline.May 15, 2026
- High8.4Improper input validation within the AMD Platform Management Framework (PMF) could allow an attacker to unmap arbitrary memory pages potentially impacting integrity an…EPSS 0.1%May 15, 2026
- High8.7rust-openssl provides OpenSSL bindings for the Rust programming language.May 14, 2026
- Low3.1Insufficient validation of untrusted input in Skia in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to perfo…May 14, 2026
- Medium5.3Insufficient validation of untrusted input in GPU in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to perfor…May 14, 2026
- Low3.1Insufficient validation of untrusted input in ReadingMode in Google Chrome on Mac prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer pr…May 14, 2026
- Medium4.3Insufficient validation of untrusted input in SiteIsolation in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process…May 14, 2026
- High8.8Insufficient validation of untrusted input in Downloads in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code via a crafted HTML page.May 14, 2026
- Medium5.3Insufficient validation of untrusted input in DataTransfer in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who convinced a user to engage in specifi…May 14, 2026
- High8.7Fleet is open source device management software.May 14, 2026
- High8.6Note Mark is an open-source note-taking application.May 14, 2026
- High8.6A vulnerability in the web UI of Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, could allow an unauthenticated, remote attacker to read arbitrary files that a…EPSS 1.1%May 14, 2026
- Critical9.6soundcloud-rpc is a SoundCloud Client with Discord Rich Presence, Dark Mode, Last.fm and AdBlock support.May 14, 2026
- Medium5.4ShellHub is a centralized SSH gateway.May 13, 2026
- High8.1CubeCart is an ecommerce software solution.May 13, 2026
- Medium5.3MISP is an open source threat intelligence and sharing platform.May 13, 2026
- Critical9.1Netty is an asynchronous, event-driven network application framework.May 13, 2026
- Low1.1A vulnerability in Palo Alto Networks Broker VM allows an authenticated administrator to inject arbitrary content into certain Broker VM fields.EPSS 0.1%May 13, 2026
- Medium6.3A command injection vulnerability was discovered in TeamViewer DEX Platform On-Premises (former 1E DEX Platform On-Premises) prior to version 9.2.May 13, 2026
- Medium5.3protobufjs compiles protobuf definitions into JavaScript (JS) functions.May 13, 2026
- Medium6.0Improper Input Validation in the NAT64 translator in The OpenThread Authors OpenThread before commit 26a882d on all platforms allows an attacker on the adjacent IPv4 n…May 13, 2026
- High7.5Granian is a Rust HTTP server for Python applications.May 12, 2026
- Medium6.2CAI Content Credentials versions c2pa-web@0.7.0, c2pa-v0.78.2 and earlier are affected by an Improper Input Validation vulnerability that could result in an applicatio…May 12, 2026
- Low3.4Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier are affected by an Improper Input Validation vulnerability that co…May 12, 2026