Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium4.3In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, a user that holds a role with the run_collect capability could use the collect Search Processi…EPSS 0.2%Oct 7, 2026
- Medium4.1In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, a user that holds a role with the edit_user capability could create a native Splunk username t…EPSS 0.2%Oct 7, 2026
- Medium4.3In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, a user that holds a role with the run_collect capability could use the collect Search Processi…EPSS 0.2%Oct 7, 2026
- Medium5.4Improper input validation in Omnibox in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin…EPSS 0.2%Oct 6, 2026
- Medium6.5Improper input validation in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin poli…EPSS 0.2%Oct 6, 2026
- Critical9.8Dbit WIFI4 N300 1.0.0 devices allow the management interface to be crashed via a request (from the local Wi-Fi network) that lacks a /api/login username or password field.EPSS 0.4%Oct 6, 2026
- Medium4.3HCL BigFix Service Management is affected by an Improper Input Validation vulnerability, which could allow an attacker to inject unvalidated, malformed data into the a…EPSS 0.2%Oct 1, 2026
- Critical9.5Citrix NetScaler Improper Input Validation VulnerabilityKEVEPSS 1.1%Sep 27, 2026
- Medium4.3HCL Sametime is vulnerable to insufficient input sanitization.EPSS 0.2%Sep 24, 2026
- Critical9.5Arista VeloCloud Orchestrator Improper Input Validation VulnerabilityKEVEPSS 1.1%Sep 22, 2026
- High8.8Backstage is an open framework for building developer portals.EPSS 1.2%Sep 16, 2026
- High8.5RustDesk's Windows clipboard redirection copies a peer-supplied length into a fixed-size caller buffer without an upper bound check.EPSS 0.4%Aug 24, 2026
- High7.5fast-uri is a URI parser for Node.js.EPSS 0.2%Aug 24, 2026
- Medium4.3OliveTin gives access to predefined shell commands from a web interface.EPSS 0.4%Aug 21, 2026
- Critical9.3PTC Windchill and FlexPLM Improper Input Validation VulnerabilityKEVEPSS 46.0%Jun 17, 2026
- High7.1In the Linux kernel, the following vulnerability has been resolved: smb: client: reject userspace cifs.spnego descriptions cifs.spnego key descriptions contain authori…EPSS 0.4%Jun 1, 2026
- High7.5free5GC is an open-source implementation of the 5G core network.EPSS 0.7%May 27, 2026
- High7.5free5GC is an open-source implementation of the 5G core network.EPSS 0.7%May 27, 2026
- High7.7free5GC is an open-source implementation of the 5G core network.EPSS 0.4%May 27, 2026
- High7.5Jenkins Credentials Binding Plugin 720.v3f6decef43ea_ and earlier does not properly sanitize file names for file and zip file credentials, allowing attackers able to p…EPSS 0.6%May 27, 2026
- Critical10.0Ubiquiti UniFi OS Improper Input Validation VulnerabilityKEVEPSS 45.8%May 21, 2026
- Critical9.6Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component.EPSS 0.4%May 19, 2026
- Medium6.5Improper Input Validation vulnerability in Apache OFBiz.EPSS 0.7%May 19, 2026
- Critical9.8Microsoft Edge (Chromium-based) Remote Code Execution VulnerabilityEPSS 1.0%May 18, 2026
- Medium5.4Improper input validation in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature over a network.EPSS 0.4%May 18, 2026