Catalog

Findings

Filter the merged record by severity, source, stack, and weakness type.

SearchSeveritySourceStackWeaknessSort

Known exploited only

Medium5.3In Tornado before 6.5.5, cookie attribute injection could occur because the domain, path, and samesite arguments to .RequestHandler.set_cookie were not checked for cra…CVE-2026-35536 · tornadoweb · tornado · CVE.org · NIST NVDApr 3, 2026
Medium6.1SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application.CVE-2026-29106 · suitecrm · suitecrm · CVE.org · NIST NVDMar 19, 2026
Medium5.5This vulnerability is caused by a CWE‑159: "Improper Handling of Invalid Use of Special Elements" weakness, which leads to an unrecoverable inconsistency in the CLFS.sys driver.CVE-2026-2636 · CVE.org · NIST NVDFeb 25, 2026
Low3.6ssh in OpenSSH before 10.1 allows control characters in usernames that originate from certain possibly untrusted sources, potentially leading to code execution when a…CVE-2025-61984 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.5%Oct 6, 2025