Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Critical9.8Oracle E-Business Suite Improper Privilege Management VulnerabilityKEVEPSS 0.8%May 28, 2026
- Critical9.1IBM Aspera HSTS for CP4I 1.5.1 through 1.5.19 is affected by an authentication bypass vulnerability.May 27, 2026
- Critical9.8Improper Authentication vulnerability in Apache OFBiz via Password-Change Logic Flaw Leading to Remote Code Execution This issue affects Apache OFBiz: before 24.09.06.May 19, 2026
- Medium5.3Improper Authentication vulnerability in Apache OFBiz.May 19, 2026
- Critical10.0Improper authentication in Azure Local Disconnected Operations allows an unauthorized attacker to elevate privileges over a network.May 18, 2026
- Critical10.0Cisco Catalyst SD-WAN Controller Authentication Bypass VulnerabilityKEVEPSS 91.8%May 14, 2026
- Critical10.0Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass VulnerabilityKEVEPSS 88.5%Feb 25, 2026
- Low3.1When doing SSH-based transfers using either SCP or SFTP, and asked to do public key authentication, curl would wrongly still ask and authenticate using a locally running SSH agent.Jan 8, 2026
- High8.2An issue was discovered in Wekan The Open Source kanban board system up to version 18.15, fixed in 18.16.Dec 15, 2025
- Medium5.4An issue was discovered in allauth-django before 65.13.0.Dec 15, 2025
- High7.5Oracle E-Business Suite Server-Side Request Forgery (SSRF) VulnerabilityKEVEPSS 95.9%Oct 11, 2025
- Critical9.8Oracle E-Business Suite Unspecified VulnerabilityKEVEPSS 99.7%Oct 4, 2025
- Critical9.9FOG is a free open-source cloning/imaging/rescue suite/inventory management system.Sep 6, 2025
- Medium6.5Microsoft SharePoint Improper Authentication VulnerabilityKEVEPSS 99.1%Jul 8, 2025
- Critical10.0Quest KACE Systems Management Appliance (SMA) Improper Authentication VulnerabilityKEVEPSS 2.5%Jun 24, 2025
- High7.2ConnectWise ScreenConnect Improper Authentication VulnerabilityKEVEPSS 3.5%Apr 25, 2025
- Critical9.8SonicWall SonicOS SSLVPN Improper Authentication VulnerabilityKEVEPSS 95.1%Jan 9, 2025
- Critical9.8ProjectSend Improper Authentication VulnerabilityKEVEPSS 91.8%Nov 26, 2024
- High8.8Microsoft Windows Task Scheduler Privilege Escalation VulnerabilityKEVEPSS 14.2%Nov 12, 2024
- Critical9.1PTZOptics PT30X-SDI/NDI Cameras Authentication Bypass VulnerabilityKEVEPSS 58.8%Sep 17, 2024
- Critical9.8Ivanti Virtual Traffic Manager Authentication Bypass VulnerabilityKEVEPSS 100.0%Aug 13, 2024
- High7.2VMware ESXi Authentication Bypass VulnerabilityKEVEPSS 26.8%Jun 25, 2024
- Critical9.8Microsoft Exchange Server Privilege Escalation VulnerabilityKEVEPSS 12.6%Feb 13, 2024
- High8.2Ivanti Connect Secure and Policy Secure Authentication Bypass VulnerabilityKEVEPSS 100.0%Jan 10, 2024
- Critical9.8ownCloud Improper Authentication VulnerabilityKEVEPSS 42.9%Nov 21, 2023