Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Low2.0Sandboxie-Plus is an open source sandbox-based isolation software for Windows.May 5, 2026
- High8.8Sandboxie-Plus is an open source sandbox-based isolation software for Windows.May 5, 2026
- High7.3Sandboxie-Plus is an open source sandbox-based isolation software for Windows.May 5, 2026
- High7.3Sandboxie-Plus is an open source sandbox-based isolation software for Windows.May 5, 2026
- High8.8Sandboxie-Plus is an open source sandbox-based isolation software for Windows.May 5, 2026
- Critical9.3Sandboxie-Plus is an open source sandbox-based isolation software for Windows.May 5, 2026
- High8.2Sandboxie is an open source sandbox-based isolation software for Windows.May 5, 2026
- High8.2ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx.May 5, 2026
- Medium6.3OpenClaw versions 2026.4.10 before 2026.4.14 contain a missing authorization vulnerability in the Microsoft Teams SSO invoke handler that fails to apply sender allowlist checks.May 5, 2026
- High8.8A privilege escalation vulnerability exists during the installation of Norton Secure VPN via the Microsoft Store.EPSS 0.1%May 4, 2026
- Low2.1A vulnerability was found in code-projects Gym Management System In PHP and Windows NT 1.0.May 4, 2026
- High8.6CTMS and CPAS developed by Sunnet has an Arbitrary File Upload vulnerability, allowing privileged remote attackers to upload and execute web shell backdoors, thereby e…May 2, 2026
- High8.7CTMS developed by Sunnet has a SQL Injection vulnerability, allowing authenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete database contents.May 2, 2026
- Medium6.8CVE-2026-40951 is a memory corruption vulnerability on Secure Access Windows clients prior to 14.50.Apr 30, 2026
- Medium6.8CVE-2026-40949 is a buffer overflow vulnerability in the Secure Access Windows client prior to 14.50.Apr 30, 2026
- Medium5.9CVE-2026-33452 is a buffer overflow vulnerability in the Secure Access Windows client prior to 14.50.Apr 30, 2026
- High8.5CVE-2026-33451 is an arbitrary read/write vulnerability in the Secure Access Windows client prior to 14.50.Apr 30, 2026
- High7.3A vulnerability in B1 Free Archiver v1.5.86 allows files extracted from downloaded archives to bypass Windows Mark of the Web (MotW) protections.EPSS 0.3%Apr 29, 2026
- Medium6.8Netskope was notified about a potential gap in the Endpoint DLP Module for Netskope Client on Windows systems.Apr 29, 2026
- Medium4.3Jenkins Microsoft Entra ID (previously Azure AD) Plugin 666.v6060de32f87d and earlier does not restrict the redirect URL after login, allowing attackers to perform phi…Apr 29, 2026
- High7.7Ollama for Windows contains a Remote Code Execution vulnerability in its update mechanism due to improper handling of attacker‑controlled HTTP response headers.Apr 29, 2026
- High7.7Ollama for Windows does not perform integrity or authenticity verification of downloaded update executables.Apr 29, 2026
- Medium4.3Integer overflow in ANGLE in Google Chrome on Windows prior to 147.0.7727.138 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.Apr 28, 2026
- High7.3Insecure preserved inherited permissions vulnerability in Cerberus FTP Server on Windows allows Privilege Escalation.This issue has been resolved in Cerberus FTP Server: 2026.1Apr 27, 2026
- Critical9.9Exposure of sensitive information to an unauthorized actor in Azure IOT Central allows an authorized attacker to elevate privileges over a network.EPSS 0.7%Apr 24, 2026