Catalog

Findings

Filter the merged record by severity, source, stack, and weakness type.

SearchSeveritySourceStackWeaknessSort

Known exploited only

Medium6.1The auth0/nextjs-auth0 SDK validates that the returnTo parameter is a same-origin URL.CVE-2026-107369 · CVE.org · NIST NVDOct 13, 2026
Medium6.1Google Chromium Intents Improper Input Validation VulnerabilityCVE-2021-38000 · google · chrome · CISA KEV · CVE.org · FIRST EPSS · chrome, debianKEVEPSS 4.9%Nov 3, 2021
Medium5.4Odoo Version <= 8.0-20160726 and Version 9 is affected by: CWE-601: Open redirection.CVE-2017-5871 · odoo · odoo · NIST NVD · Odoo Security · odooMay 22, 2019
Medium4.7Oracle Fusion Middleware Unspecified VulnerabilityCVE-2012-0518 · oracle · fusion middleware · CISA KEV · CVE.org · FIRST EPSSKEVEPSS 4.7%Oct 16, 2012