Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High7.5go-ntlmssp is a Go package that provides NTLM/Negotiate authentication over HTTP.Apr 24, 2026
- Medium4.3Xibo is an open source digital signage platform with a web content management system and Windows display player software.Apr 24, 2026
- Medium4.9Xibo is an open source digital signage platform with a web content management system and Windows display player software.Apr 24, 2026
- Medium5.4Xibo is an open source digital signage platform with a web content management system and Windows display player software.Apr 24, 2026
- High8.1Xibo is an open source digital signage platform with a web content management system and Windows display player software.Apr 24, 2026
- Critical10.0Server-side request forgery (ssrf) in Microsoft Entra ID Entitlement Management allows an unauthorized attacker to perform spoofing over a network.Apr 23, 2026
- Critical9.8Deserialization of untrusted data in Microsoft Bing allows an unauthorized attacker to execute code over a network.Apr 23, 2026
- Critical9.3Url redirection to untrusted site ('open redirect') in M365 Copilot allows an unauthorized attacker to elevate privileges over a network.Apr 23, 2026
- High7.5Server-side request forgery (ssrf) in Microsoft Dynamics 365 (Online) allows an unauthorized attacker to perform spoofing over a network.Apr 23, 2026
- High8.0Uncontrolled search path element in Microsoft Power Apps allows an unauthorized attacker to execute code over a network.Apr 23, 2026
- Critical10.0Server-side request forgery (ssrf) in Microsoft Purview allows an unauthorized attacker to elevate privileges over a network.Apr 23, 2026
- Critical9.6Improper certificate validation in Microsoft Partner Center allows an unauthorized attacker to elevate privileges over a network.EPSS 0.4%Apr 23, 2026
- High8.3Race in GPU in Google Chrome on Windows prior to 147.0.7727.117 allowed a remote attacker to potentially perform a sandbox escape via a crafted video file.Apr 23, 2026
- High7.3Kiota is an OpenAPI based HTTP Client code generator.Apr 22, 2026
- Critical9.8In Progress® Telerik® UI for AJAX versions 2024.4.1114 through 2026.1.421, the RadFilter control is vulnerable to insecure deserialization when restoring filter state…Apr 22, 2026
- High7.5In Progress® Telerik® UI for AJAX prior to 2026.1.421, RadAsyncUpload contains an uncontrolled resource consumption vulnerability that allows file uploads to exceed th…Apr 22, 2026
- Medium5.9Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Microsoft Active Directory).Apr 21, 2026
- Critical9.1Improper verification of cryptographic signature in ASP.NET Core allows an unauthorized attacker to elevate privileges over a network.Apr 21, 2026
- High8.8The method "sock_recvfrom_into()" of "asyncio.ProacterEventLoop" (Windows only) was missing a boundary check for the data buffer when using nbytes parameter.Apr 21, 2026
- Low2.3Potential read out of bounds case with wolfSSHd on Windows while handling a terminal resize request.EPSS 0.2%Apr 20, 2026
- Critical9.3EasyFlow .NET developed by Digiwin has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, modify, and d…Apr 20, 2026
- Critical9.3EasyFlow .NET developed by Digiwin has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, modify, and d…Apr 20, 2026
- High8.0DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem.Apr 17, 2026
- Medium6.9DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem.Apr 17, 2026
- Medium4.3DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem.Apr 17, 2026