Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Low2.4Zen is a firefox-based browser.May 11, 2026
- Medium4.4jq is a command-line JSON processor.May 11, 2026
- High7.3CosyVoice thru commit 6e01309e01bc93bbeb83bdd996b1182a81aaf11e (2025-30-21) contains an insecure deserialization vulnerability (CWE-502) in its gRPC server component.May 11, 2026
- Critical9.4Grav is a file-based Web platform.May 11, 2026
- Low2.1Vulnerability in Wikimedia Foundation AbuseFilter.May 11, 2026
- High7.8pyp2spec generates working Fedora RPM spec file for Python projects.May 9, 2026
- Medium6.3PraisonAI is a multi-agent teams system.May 8, 2026
- Critical9.4PraisonAI is a multi-agent teams system.May 8, 2026
- Critical9.4electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client.May 8, 2026
- High7.1PromptHub is an all-in-one AI toolbox for prompt, skill, and agent management.May 8, 2026
- Critical9.0Improper access control in Azure Managed Instance for Apache Cassandra allows an authorized attacker to execute code over a network.May 7, 2026
- Medium5.3Weblate is a web based localization tool.May 7, 2026
- High8.2Lack of user input validation in the file upload functionality of Open Notebook v1.8.3 allows the application user to access local files content from the docker contai…May 7, 2026
- High7.0Lack of user input validation in the file upload functionality of Open Notebook v1.8.3 allows the application user to create or modify files on the docker container vi…May 7, 2026
- Critical9.2Lack of user input sanitisation in Open Notebook v1.8.3 allows the application user to execute Python code (and subsequently OS commands) on the docker container via S…May 7, 2026
- High8.7An improper input validation, together with an overly permissive default CORS configuration in Open Notebook v1.8.1 allows remote attacker to trick a legitimate user t…May 7, 2026
- Medium6.9CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support.May 7, 2026
- High8.2Admidio is an open-source user management solution.May 7, 2026
- High7.2Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation VulnerabilityKEVEPSS 2.5%May 7, 2026
- Medium4.3Insufficient validation of untrusted input in FedCM in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to leak cross-origin data via a crafted HTML page.May 6, 2026
- Medium6.3Insufficient validation of untrusted input in SiteIsolation in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process…May 6, 2026
- High7.5Insufficient validation of untrusted input in Cast in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to perfor…May 6, 2026
- Medium4.3Insufficient validation of untrusted input in Cast in Google Chrome prior to 148.0.7778.96 allowed an attacker on the local network segment to bypass same origin polic…May 6, 2026
- Medium5.4Insufficient validation of untrusted input in TabGroups in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to perform UI spoofing via malicious network traffic.May 6, 2026
- High8.8Insufficient validation of untrusted input in ChromeDriver in Google Chrome on Windows prior to 148.0.7778.96 allowed a remote attacker to execute arbitrary code via a…May 6, 2026