Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- Critical9.8Fortinet FortiSandbox OS Command Injection VulnerabilityKEVEPSS 47.4%Apr 14, 2026
- Medium4.3Microsoft Windows Protection Mechanism Failure VulnerabilityKEVEPSS 4.9%Apr 14, 2026
- High8.6Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')KEVEPSS 0.4%Apr 13, 2026
- Unknownmjdm majordomo Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')KEVEPSS 7.8%Apr 13, 2026
- Medium6.5Microsoft SharePoint Server Improper Input Validation VulnerabilityKEVEPSS 43.4%Apr 12, 2026
- Unknownusememos memos Server-Side Request Forgery (SSRF)KEVEPSS 2.9%Apr 12, 2026
- UnknownNETGEAR dgn2200_firmware Improper AuthenticationKEVEPSS 2.1%Apr 12, 2026
- Medium6.5Arcane is an interface for managing Docker containers, images, networks, and volumes.KEVEPSS 0.7%Apr 10, 2026
- High8.8LiteLLM through 2026-04-08 allows remote attackers to execute arbitrary code via bytecode rewriting at the /guardrails/test_custom_code URI.KEVEPSS 3.4%Apr 10, 2026
- UnknownTP-Link archer_ax3000_firmware Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')KEVEPSS 1.1%Apr 10, 2026
- High8.8Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')KEVEPSS 0.3%Apr 9, 2026
- High7.5Apache Tomcat Missing Encryption of Sensitive Data VulnerabilityKEVEPSS 6.6%Apr 9, 2026
- Critical9.8The Quick Playground plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.3.1.KEVEPSS 8.1%Apr 9, 2026
- Critical9.3Marimo Remote Code Execution VulnerabilityKEVEPSS 37.9%Apr 9, 2026
- UnknownLangflow Langflow Missing Authentication for Critical FunctionKEVEPSS 33.3%Apr 9, 2026
- UnknownSPIP saisies Improper Control of Generation of Code ('Code Injection')KEVEPSS 5.6%Apr 9, 2026
- UnknownImproper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')KEVEPSS 51.1%Apr 9, 2026
- Critical9.8The Users manager – PN plugin for WordPress is vulnerable to Privilege Escalation via Arbitrary User Meta Update in all versions up to and including 1.1.15.KEVEPSS 1.3%Apr 8, 2026
- Critical9.8WPEverest everest_forms Deserialization of Untrusted DataKEVEPSS 3.0%Apr 8, 2026
- Medium6.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')KEVEPSS 0.4%Apr 8, 2026
- UnknownApache kafka Server-Side Request Forgery (SSRF)KEVEPSS 68.8%Apr 8, 2026
- Unknownartica pandora_fms Missing Authentication for Critical FunctionKEVEPSS 4.8%Apr 8, 2026
- Unknownpandorafms pandora_fms Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')KEVEPSS 91.0%Apr 8, 2026
- Medium6.3Vite is a frontend tooling framework for JavaScript.KEVEPSS 1.0%Apr 7, 2026
- High8.2Vite is a frontend tooling framework for JavaScript.KEVEPSS 1.5%Apr 7, 2026