Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium5.3Plane is an open-source project management tool.EPSS 0.2%Oct 13, 2026
- UnknownPraisonAI: PGVector and Cassandra knowledge stores interpolate vector dimensions into DDLOct 8, 2026
- High7.4Improper neutralization of special elements in data query logic in Microsoft Discovery Studio allows an unauthorized attacker to disclose information over a network.EPSS 0.9%Sep 3, 2026
- Medium6.5Plane is an open-source project management tool.May 20, 2026
- Critical9.2Strapi is an open source headless content management system.May 14, 2026
- Medium5.4ShellHub is a centralized SSH gateway.May 13, 2026
- High7.1Flowsint is an open-source OSINT graph exploration tool designed for cybersecurity investigation, transparency, and verification.May 12, 2026
- Medium6.5kafka-sink-azure-kusto Kafka Connect plugin is the official Microsoft sink for Azure Data Explorer (Kusto).May 11, 2026
- Medium5.1There is a cypher injection issue in LogonTracer prior to v2.0.0.Apr 27, 2026
- Critical9.1Dgraph is an open source distributed GraphQL database.Apr 24, 2026
- Critical9.1Dgraph is an open source distributed GraphQL database.Apr 24, 2026
- Critical9.3Flowise is a drag & drop user interface to build a customized large language model flow.Apr 23, 2026
- Low2.1A vulnerability was detected in Cockpit-HQ Cockpit up to 2.13.5.Apr 20, 2026
- High8.8FastGPT is an AI Agent building platform.Apr 17, 2026
- Critical9.8FastGPT is an AI Agent building platform.Apr 17, 2026
- Medium6.9phpMyFAQ is an open source FAQ web application.Apr 2, 2026
- High8.1Azure Data Explorer MCP Server is a Model Context Protocol (MCP) server that enables AI assistants to execute KQL queries and explore Azure Data Explorer (ADX/Kusto) d…Mar 27, 2026
- High7.7An Authenticated NoSQL Injection vulnerability found in UniFi Network Application could allow a malicious actor with authenticated access to the network to escalate privileges.EPSS 0.6%Mar 19, 2026
- Medium5.3Non-relational SQL injection vulnerability (NoSQLi) in the Wakyma web application, specifically in the endpoint 'vets.wakyma.com/pets/print-tags'.Mar 16, 2026
- High7.1Non-relational SQL injection vulnerability (NoSQLi) in the Wakyma web application, specifically in the endpoint 'vets.wakyma.com/hospitalization/generate-hospitalization-summary'.Mar 16, 2026
- High7.1Non-relational SQL injection vulnerability (NoSQLi) in the Wakyma web application, specifically in the endpoint 'vets.wakyma.com/centro/equipo/empleado'.Mar 16, 2026
- Critical9.3Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js.Mar 12, 2026
- High8.1Graphiti is a framework for building and querying temporal context graphs for AI agents.Mar 12, 2026
- Medium5.3Sylius is an Open Source eCommerce Framework on Symfony.Mar 10, 2026
- Critical9.3Feathersjs is a framework for creating web APIs and real-time applications with TypeScript or JavaScript.Mar 10, 2026
29 records · page 1 of 2
PreviousNext