Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium6.9A vulnerability was determined in jQWidgets up to 24.0.1.Aug 24, 2026
- Critical9.5TrueConf Server Code Injection VulnerabilityKEVEPSS 1.7%Aug 19, 2026
- High8.8Microsoft SharePoint Code Injection VulnerabilityKEVEPSS 2.1%Aug 11, 2026
- Critical9.8IBM Langflow Code Injection VulnerabilityKEVEPSS 28.7%Jul 17, 2026
- High7.2SonicWall SMA1000 Appliances Code Injection VulnerabilityKEVEPSS 11.8%Jul 14, 2026
- Medium5.4GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.11 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed…May 14, 2026
- High8.8Apache ActiveMQ Improper Input Validation VulnerabilityKEVEPSS 15.5%Apr 7, 2026
- Critical9.3Langflow Code Injection VulnerabilityKEVEPSS 24.8%Mar 19, 2026
- High8.8Google Chromium V8 Improper Restriction of Operations Within the Bounds of a Memory Buffer VulnerabilityKEVEPSS 1.1%Mar 13, 2026
- Critical9.3Lantronix EDS5000 Code Injection VulnerabilityKEVEPSS 20.0%Mar 11, 2026
- Critical9.8Ivanti Endpoint Manager Mobile (EPMM) Code Injection VulnerabilityKEVEPSS 98.6%Jan 29, 2026
- Critical9.8Ivanti Endpoint Manager Mobile (EPMM) Code Injection VulnerabilityKEVEPSS 98.7%Jan 29, 2026
- Critical9.8Cisco Unified Communications Products Code Injection VulnerabilityKEVEPSS 4.5%Jan 21, 2026
- Critical9.8Hewlett Packard Enterprise (HPE) OneView Code Injection VulnerabilityKEVEPSS 90.2%Dec 16, 2025
- High8.8A Server-Side Template Injection (SSTI) vulnerability exists in the Frappe ERPNext through 15.89.0 Print Format rendering mechanism.Dec 15, 2025
- High8.8An SSTI (Server-Side Template Injection) vulnerability exists in the get_address_display method of Frappe ERPNext through 15.89.0.Dec 15, 2025
- Medium4.3An SSTI (Server-Side Template Injection) vulnerability exists in the get_terms_and_conditions method of Frappe ERPNext through 15.89.0.Dec 15, 2025
- Medium4.3An SSTI (Server-Side Template Injection) vulnerability exists in the get_contract_template method of Frappe ERPNext through 15.89.0.Dec 15, 2025
- High8.8An SSTI (Server-Side Template Injection) vulnerability exists in the get_dunning_letter_text method of Frappe ERPNext through 15.89.0.Dec 15, 2025
- High8.4Lightning Flow Scanner provides a A CLI plugin, VS Code Extension and GitHub Action for analysis and optimization of Salesforce Flows.Dec 12, 2025
- Low2.0A security vulnerability has been detected in Qualitor up to 8.24.73.Dec 12, 2025
- Critical9.4Ray-Project Ray Code Injection VulnerabilityKEVEPSS 62.5%Nov 26, 2025
- High8.0Dassault Systèmes DELMIA Apriso Code Injection VulnerabilityKEVEPSS 79.3%Aug 4, 2025
- Critical9.2Laravel Livewire Code Injection VulnerabilityKEVEPSS 97.3%Jul 17, 2025
- High8.8Microsoft SharePoint Code Injection VulnerabilityKEVEPSS 100.0%Jul 8, 2025