Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High7.5CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass.EPSS 0.5%Oct 13, 2026
- Medium5.3CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass.EPSS 0.4%Oct 13, 2026
- High7.5CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass.EPSS 0.6%Oct 13, 2026
- Medium5.9CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass.EPSS 0.6%Oct 13, 2026
- High7.5CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass.EPSS 0.6%Oct 13, 2026
- High7.5CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass.EPSS 0.5%Oct 13, 2026
- High7.5CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass.EPSS 0.5%Oct 13, 2026
- High7.5CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass.EPSS 0.6%Oct 13, 2026
- High7.5CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass.EPSS 0.6%Oct 13, 2026
- Medium6.7Heap-based buffer overflow in SQL Server allows an authorized attacker to execute code locally.EPSS 0.2%Oct 13, 2026
- Medium5.3The auth0/java-jwt library may terminate a thread if it receives a JWT with a timestamp claim (exp, nbf, iat) containing an out-of-range value.EPSS 0.3%Oct 13, 2026
- Medium6.0The Okta Credential Provider for Windows does not validate a serialized credential buffer before interpreting it as a Kerberos logon structure.EPSS 0.1%Oct 13, 2026
- High8.4ColdFusion is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user.EPSS 0.3%Oct 13, 2026
- Critical9.0ColdFusion is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user.EPSS 0.6%Oct 13, 2026
- High8.8ColdFusion is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user.EPSS 0.8%Oct 13, 2026
- High7.5ColdFusion is affected by an Improper Input Validation vulnerability that could result in an application denial-of-service.EPSS 0.5%Oct 13, 2026
- Medium6.5Quarkus REST Data Panache provides a way to automatically generate REST endpoints for data entities.Oct 12, 2026
- High8.6Improper input validation in parsing sheifd in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 allows local attackers to potentially execute arbitrary code.EPSS 0.2%Oct 12, 2026
- High8.6Improper input validation in getting cover image in libsimba.heifdec.media.samsung.so prior to SMR Oct-2026 Release 1 allows local attackers to potentially execute arbitrary code.EPSS 0.2%Oct 12, 2026
- CriticalHazelcast allows arbitrary member memory access by low-privileged clientEPSS 0.4%Oct 8, 2026
- Medium6.8An Improper Input Validation vulnerability for the registered case credentials in Brocade ASCG before v3.0 could allow a local authenticated user to provide invalid in…EPSS 0.1%Oct 8, 2026
- Medium4.3In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, a user that holds a role with the run_collect capability could use the collect Search Processi…EPSS 0.2%Oct 7, 2026
- Medium4.1In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, a user that holds a role with the edit_user capability could create a native Splunk username t…EPSS 0.2%Oct 7, 2026
- Medium4.3In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, a user that holds a role with the run_collect capability could use the collect Search Processi…EPSS 0.2%Oct 7, 2026
- Medium5.4Improper input validation in Omnibox in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin…EPSS 0.2%Oct 6, 2026