Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- Unknownopenai-codex-0.162.1-2.1 on GA mediaOct 15, 2026
- High8.3Nginx UI OTP secure-session step-up is missing on sensitive mutation routesEPSS 0.2%Oct 12, 2026
- High7.8ZDI-26-650: (Pwn2Own) OpenAI Codex External Control of Configuration Setting Remote Code Execution VulnerabilityEPSS 0.1%Sep 10, 2026
- High7.8ZDI-26-649: (Pwn2Own) OpenAI Codex Improper Neutralization of Control Sequences Remote Code Execution VulnerabilityEPSS 0.3%Sep 10, 2026
- High7.8ZDI-26-648: (Pwn2Own) OpenAI Codex External Control of System or Configuration Setting Remote Code Execution VulnerabilityEPSS 0.1%Sep 10, 2026
- Critical9.8ZDI-26-651: (Pwn2Own) OpenAI Codex External Control of System or Configuration Setting Remote Code Execution VulnerabilityEPSS 0.4%Sep 1, 2026
- High7.2CodexBar prior to 0.32.0 contains an insecure temporary file handling vulnerability that allows local attackers to access sensitive credentials or tamper with build ar…EPSS 0.2%Jun 1, 2026
- High7.5CodexBar prior to 0.32.0 contains a privilege escalation vulnerability in the CLI installer that allows local attackers to execute arbitrary commands as root by exploi…EPSS 0.5%Jun 1, 2026
- High8.2CodexBar prior to 0.32.0 contains a session cookie leakage vulnerability that allows network attackers to intercept imported browser session cookies by exploiting impr…EPSS 0.3%Jun 1, 2026
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodexThemes TheGem Theme Elements (for Elementor) allows DOM-Base…EPSS 0.2%Apr 27, 2026
- Critical9.8A vulnerability was identified in OpenAI Codex CLI v0.23.0 and before that enables code execution through malicious MCP (Model Context Protocol) configuration files.EPSS 6.6%Apr 14, 2026
- High8.8Library CMS 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to bypass authentication by injecting SQL code through the username parameter.EPSS 0.5%Mar 26, 2026
- High7.1School Management System CMS 1.0 contains an SQL injection vulnerability in the admin login functionality that allows attackers to bypass authentication by injecting S…EPSS 0.5%Mar 26, 2026
- High8.8Wecodex Hotel CMS 1.0 contains an SQL injection vulnerability in the admin login functionality that allows unauthenticated attackers to bypass authentication by injecting SQL code.EPSS 0.5%Mar 26, 2026
- High8.8Wecodex Restaurant CMS 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through t…EPSS 0.5%Mar 26, 2026
- High8.8Shipping System CMS 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to bypass authentication by injecting SQL code through the username parameter.EPSS 0.5%Mar 26, 2026
- High8.7Cloud CLI (aka Claude Code UI) is a desktop and mobile UI for Claude Code, Cursor CLI, Codex, and Gemini-CLI.EPSS 4.5%Mar 11, 2026
- High8.8Cloud CLI (aka Claude Code UI) is a desktop and mobile UI for Claude Code, Cursor CLI, Codex, and Gemini-CLI.EPSS 0.6%Mar 11, 2026
- High8.7Cloud CLI (aka Claude Code UI) is a desktop and mobile UI for Claude Code, Cursor CLI, Codex, and Gemini-CLI.EPSS 0.7%Mar 11, 2026
- High8.8Deserialization of Untrusted Data vulnerability in Codexpert, Inc WC Affiliate wc-affiliate allows Object Injection.This issue affects WC Affiliate: from n/a through <= 2.16.EPSS 0.4%May 23, 2025
- Medium4.3The TheGem theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ajaxApi() function in all versions up to, and including,EPSS 0.4%May 13, 2025
- High8.8The TheGem theme for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the thegem_get_logo_url() function in all versions up to, and includinEPSS 1.2%May 13, 2025
- Unknowncodextrous b2j_contact Improper Input ValidationKEVEPSS 3.6%Apr 12, 2021
23 records · page 1 of 1
PreviousNext