ipl/web is a set of common web components for php projects. Rated low severity (CVSS 3.9), this vulnerability is remotely exploitable. No vendor patch available.
PHP
CSRF
NVD
GitHub
CVSS 3.1
3.9
EPSS
0.2%
The com.cascadialabs.who (aka Who - Caller ID, Spam Block) application 15.0 for Android places sensitive information in the system log. Rated low severity (CVSS 3.3), this vulnerability is low attack complexity. No vendor patch available.
Information Disclosure
Google
Who
NVD
CVSS 3.1
3.3
EPSS
0.2%
Biscuit is an authorization token with decentralized verification, offline attenuation and strong security policy enforcement based on a logic language. Rated low severity (CVSS 3.0), this vulnerability is remotely exploitable. No vendor patch available.
Information Disclosure
NVD
GitHub
CVSS 3.1
3.0
EPSS
0.3%