Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- Medium5.1immich is a high performance self-hosted photo and video management solution.EPSS 0.2%Apr 15, 2026
- High7.2Chamilo LMS is an open-source learning management system.EPSS 0.4%Apr 14, 2026
- Medium6.1The User Registration & Membership plugin for WordPress is vulnerable to Open Redirect in versions up to and including 5.1.4.EPSS 0.6%Apr 13, 2026
- Medium5.4EspoCRM is an open source customer relationship management application.EPSS 0.2%Apr 13, 2026
- High7.1Pachno 1.0.6 contains an open redirection vulnerability that allows attackers to redirect users to arbitrary external websites by manipulating the return_to parameter.EPSS 0.4%Apr 13, 2026
- Medium5.4Vikunja is an open-source self-hosted task management platform.EPSS 0.3%Apr 10, 2026
- Medium4.7URL Redirection to Untrusted Site ('Open Redirect') vulnerability in John Darrel Hide My WP Ghost hide-my-wp allows Phishing.This issue affects Hide My WP Ghost: from…EPSS 0.3%Apr 8, 2026
- Medium5.4Papra is a minimalistic document management and archiving platform.Apr 7, 2026
- Medium5.1WeGIA is a Web manager for charitable institutions.Apr 6, 2026
- Medium4.3Directus is a real-time API and App dashboard for managing SQL database content.Apr 6, 2026
- Medium6.1Open edX Platform enables the authoring and delivery of online learning at any scale.Apr 6, 2026
- Medium5.1WeGIA is a Web manager for charitable institutions.Apr 6, 2026
- Medium5.1WeGIA is a Web manager for charitable institutions.Apr 6, 2026
- Medium5.1WeGIA is a Web manager for charitable institutions.Apr 6, 2026
- Medium5.4Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists.Apr 6, 2026
- Medium4.7IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10.0 through 10.0.9.1 and IBM Verify Identity Access 11.0 through 11.…EPSS 0.3%Apr 1, 2026
- Low3.6The PaperCut NG/MF (specifically, the embedded application for Konica Minolta devices) is vulnerable to session hijacking.Mar 31, 2026
- Medium6.1Mastodon is a free, open-source social network server based on ActivityPub.Mar 27, 2026
- High8.3OpenBao is an open source identity-based secrets management system.Mar 27, 2026
- Medium5.4Admidio is an open-source user management solution.EPSS 0.3%Mar 20, 2026
- Medium6.1SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application.EPSS 0.3%Mar 19, 2026
- Medium6.1SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application.EPSS 0.3%Mar 19, 2026
- Critical9.3FreeScout is a free help desk and shared inbox built with PHP's Laravel framework.EPSS 0.6%Mar 19, 2026
- High8.8Runtipi is a personal homeserver orchestrator.Mar 16, 2026
- Medium5.1IFTOP developed by WellChoose has a Reflected Cross-site Scripting vulnerability, allowing authenticated remote attackers to execute arbitrary JavaScript codes in user…Mar 11, 2026