Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- Medium4.8Horilla is an HR and CRM software.EPSS 0.4%May 12, 2026
- Low2.1Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js.EPSS 0.3%May 12, 2026
- Medium4.3WWBN AVideo is an open source video platform.EPSS 0.3%May 11, 2026
- Medium5.3WWBN AVideo is an open source video platform.EPSS 0.4%May 11, 2026
- Medium6.4WWBN AVideo is an open source video platform.EPSS 0.3%May 11, 2026
- Medium4.7Zen is a firefox-based browser.EPSS 0.3%May 11, 2026
- Medium5.4Open edX Platform enables the authoring and delivery of online learning at any scale.EPSS 0.3%May 11, 2026
- Medium4.3The check user account lock states feature within the email OTP flow fails to validate user input, allowing an attacker to infer the existence of registered user accounts.EPSS 0.2%May 11, 2026
- Medium5.1Rocket LMS 1.1 contains a persistent cross-site scripting vulnerability in the support ticket module that allows authenticated users to inject malicious script code th…EPSS 0.2%May 10, 2026
- High7.1Brave CMS is an open-source CMS.EPSS 0.4%May 8, 2026
- Medium5.3Masa CMS is affected by an Open Redirect vulnerability due to improper handling of scheme-relative URLs.EPSS 0.5%May 6, 2026
- Medium6.3Jupyter Server is the backend for Jupyter web applications.EPSS 0.2%May 5, 2026
- Medium5.4Traccar is an open source GPS tracking system.EPSS 0.2%May 5, 2026
- Medium5.1n8n is an open source workflow automation platform.EPSS 0.3%May 4, 2026
- Medium4.6OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems.EPSS 0.3%May 4, 2026
- Medium6.1Cross-Site Scripting (XSS) vulnerability was discovered in the GSVoIP web panel version 2.0.90.EPSS 0.4%May 1, 2026
- Medium4.8Cross-Site Scripting (XSS) in V2Board thru 1.7.4.EPSS 0.3%May 1, 2026
- Low2.1SSCMS v7.4.0 contains a reflected cross-site scripting vulnerability in the STL processing endpoint that allows attackers to execute arbitrary JavaScript by crafting m…EPSS 0.3%Apr 30, 2026
- Medium5.1Open redirect vulnerability exists in Multiple laser printers and MFPs which implement Ricoh Web Image Monitor.EPSS 0.4%Apr 30, 2026
- Medium4.3Jenkins Microsoft Entra ID (previously Azure AD) Plugin 666.v6060de32f87d and earlier does not restrict the redirect URL after login, allowing attackers to perform phi…EPSS 0.3%Apr 29, 2026
- Medium6.1pretalx is a conference planning tool.EPSS 0.3%Apr 24, 2026
- Critical9.0FreeScout is a free self-hosted help desk and shared mailbox.EPSS 0.5%Apr 21, 2026
- High8.5FreeScout is a free self-hosted help desk and shared mailbox.EPSS 0.4%Apr 21, 2026
- Medium5.8FreeScout is a free self-hosted help desk and shared mailbox.EPSS 0.4%Apr 21, 2026
- Low3.7ApostropheCMS is an open-source Node.js content management system.EPSS 0.3%Apr 15, 2026