Catalog

Findings

Filter the merged record by severity, source, stack, and weakness type.

SearchSeveritySourceStackWeaknessSort

Known exploited only

Reset

Medium4.7A flaw was found in the clevis PKCS#11 pin.CVE-2026-109970 · CVE.org · FIRST EPSS · NIST NVD · Debian, Debian 12EPSS 0.1%Oct 14, 2026
Medium5.5Insertion of sensitive information into externally-accessible file or directory in Windows Storage allows an authorized attacker to disclose information locally.CVE-2026-96944 · microsoft · windows 11 24h2 · CVE.org · NIST NVD · Microsoft, WindowsOct 13, 2026
Medium5.5A vulnerability was detected in code-projects Online Ticket Reservation System 1.0.CVE-2026-108937 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.3%Oct 12, 2026
High7.5A flaw was found in the vllm-orchestrator-gateway component.CVE-2026-15574 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.4%Jul 13, 2026
Medium5.9Honeywell Control Network Module (CNM) contains insertion of sensitive information into an unintended directory.CVE-2026-5434 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.3%May 21, 2026
High8.7JWT tokens that were used by workers in Kubernetes Executors have been exposed to users who had read only access to Kuberentes Pods.CVE-2026-27173 · apache · apache-airflow-providers-cncf-kubernetes · CVE.org · NIST NVD · Apache, KubernetesMay 19, 2026
High8.7WordPress Plugin Backup Migration 1.2.8 contains an information disclosure vulnerability that allows unauthenticated attackers to download complete database backups by…CVE-2023-54346 · CVE.org · FIRST EPSS · NIST NVD · WordPressEPSS 0.3%May 5, 2026
Medium5.5A security vulnerability has been detected in CodeAstro Online Job Portal 1.0.CVE-2026-7071 · CVE.org · NIST NVDApr 27, 2026
Medium5.5A vulnerability was found in code-projects Simple ChatBox 1.0.CVE-2026-6160 · CVE.org · NIST NVDApr 13, 2026
High8.7Across DR-810 contains an unauthenticated file disclosure vulnerability that allows remote attackers to download the rom-0 backup file containing sensitive information…CVE-2019-25706 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.5%Apr 12, 2026
Medium5.3Chamilo LMS is a learning management system.CVE-2026-33705 · chamilo · chamilo lms · CVE.org · NIST NVDApr 10, 2026
Medium5.5IBM QRadar SIEM 7.5.0 through 7.5.0 Update Package 14 stores potentially sensitive information in configuration files that could be read by a local user.CVE-2025-36051 · ibm · qradar security information and event manager · CVE.org · FIRST EPSS · NIST NVD · IBMEPSS 0.1%Mar 19, 2026
Medium6.5HCL AION is affected by a vulnerability where internal filesystem paths may be exposed through application responses or system behaviour.CVE-2025-52642 · hcltech · aion · CVE.org · FIRST EPSS · NIST NVDEPSS 0.1%Mar 16, 2026
Critical9.3ZKTeco ZKTime.Net 3.0.1.6 contains an insecure file permissions vulnerability that allows unprivileged users to escalate privileges by modifying executable files.CVE-2016-20024 · CVE.org · FIRST EPSS · NIST NVD · MicrosoftEPSS 0.7%Mar 16, 2026
High8.8A vulnerability allowing local privilege escalation on Windows-based Veeam Backup & Replication servers.CVE-2026-21672 · CVE.org · FIRST EPSS · NIST NVD · Microsoft, VeeamEPSS 0.2%Mar 12, 2026