Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium5.9Multiple TP-Link Wi-Fi range extenders use a custom, reversible XOR-and-dictionary transformation in the HTTP web-management login flow.Oct 14, 2026
- High8.7DataEase is an open source data visualization and analysis tool.Oct 14, 2026
- High8.7DataEase is an open source data visualization and analysis tool.Oct 14, 2026
- High8.7DataEase is an open source data visualization and analysis tool.Oct 14, 2026
- Medium5.4lichess.org is the forever free, adless and open source chess server.Oct 14, 2026
- Low3.7cpp-httplib is a C++ header-only HTTP/HTTPS library.Oct 14, 2026
- High7.5cpp-httplib is a C++ header-only HTTP/HTTPS library.Oct 14, 2026
- High7.6Sentry is an application monitoring and error tracking platform.Oct 14, 2026
- Medium5.1DataEase is an open source data visualization and analysis tool.Oct 14, 2026
- Medium5.1DataEase is an open source data visualization and analysis tool.Oct 14, 2026
- Critical9.2Dgraph is an open source distributed GraphQL database.Oct 14, 2026
- Medium5.6Pipecat is an open-source Python framework for building real-time voice and multimodal conversational agents.Oct 14, 2026
- High8.7In Eclipse Vert.x versions [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Vert.x HTTP/1.x decoder uses a canonicalization for well known HTTP headers, the cano…Oct 14, 2026
- Medium6.9In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the vertx-mail-client does not sanitize CR (\r) or LF (\n) characters…Oct 14, 2026
- High8.6In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], a scope bypass vulnerability exists in Eclipse Vert.x Web's ChainAuthH…Oct 14, 2026
- Medium6.8BentoPDF is a privacy-focused PDF toolkit that runs in the browser.Oct 14, 2026
- High8.2dbt enables data analysts and engineers to transform their data using the same practices that software engineers use to build applications.Oct 14, 2026
- Medium5.3Gogs is an open source self-hosted Git service.Oct 14, 2026
- High7.1Nexent through 2.7.0 Cross-Tenant Knowledge-Base File Read via check_file_accessOct 14, 2026
- Medium6.0Blinko through 1.8.8 Private Attachment Read via /api/file RouteOct 14, 2026
- Medium5.3GrowChief through 0.3.0 Missing Authorization via /users/all-users EndpointOct 14, 2026
- Medium5.3Sure 0.7.0 through 0.7.6-alpha.6 Missing Authorization via Transaction Bulk UpdateOct 14, 2026
- Medium5.3Shopizer through 3.2.5 contains an authorization bypass vulnerability that allows authenticated customers to post reviews as other customers by supplying a customerId field.Oct 14, 2026
- Critical9.2Databasus 3.7.0 through 3.61.0 Account Takeover via Password Reset Brute-ForceOct 14, 2026
- High8.3holaOS through 2026.822.1 Missing Authorization in Channel-Gateway ConnectorsOct 14, 2026