Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Critical9.9KEDA is a Kubernetes-based Event Driven Autoscaling component.Oct 14, 2026
- High7.0util-linux is a random collection of Linux utilities.Oct 14, 2026
- UnknownGitea Runner passes workflow-controlled container options into Docker job container configuration while privileged mode is disabled.Oct 14, 2026
- High8.5MyReport Updater through 2.1.1 contains a local privilege escalation vulnerability that allows low-privileged users to make the SYSTEM updater service install attacker…Oct 14, 2026
- High7.5The Membership & User Roles for WooCommerce (Automatic Role Changer) plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 20260828.EPSS 0.3%Oct 13, 2026
- High7.5The Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email Automation plugin for WordPress is vulnerable to Privilege Escalation via Log Re-execu…EPSS 0.5%Oct 13, 2026
- High8.8No cwe for this issue in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.EPSS 0.7%Oct 13, 2026
- High8.8Privilege escalation in the Panning and Zooming component.EPSS 0.2%Oct 13, 2026
- High8.8Privilege escalation in the WebExtensions component.EPSS 0.2%Oct 13, 2026
- High8.8Privilege escalation in the Application Update component.EPSS 0.2%Oct 13, 2026
- High7.1The macOS version of the DigiD app is not signed with Hardened Runtime.EPSS 0.1%Oct 13, 2026
- Medium4.4IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to modify the BOOTP table due to improper authorization.EPSS 0.1%Oct 13, 2026
- High8.7Frappe ERPNext before 15.111.0 and 16.x before 16.22.0 contains a privilege escalation vulnerability in a record-creation endpoint that takes the record type from the…EPSS 0.2%Oct 12, 2026
- High7.2IBM Maximo Application Suite - Location Service for Esri Component 9.2, 9.1, and 9.0 is vulnerable to improper access control due to a schema-less Custom Resource Definition.EPSS 0.3%Oct 12, 2026
- Critical9.6Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 allow a remote attacker with delegated database-administrator privileges to perfo…EPSS 0.3%Oct 12, 2026
- Critical9.9Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 allow a remote attacker with query-execution access to invoke an XQuery evaluatio…EPSS 0.4%Oct 12, 2026
- High8.6Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 can evaluate user-controlled values supplied to certain higher-order XQuery funct…EPSS 0.2%Oct 12, 2026
- High8.4Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain an authorization flaw that could allow a remote attacker with administrat…EPSS 0.3%Oct 12, 2026
- Critical9.9Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain an XQuery injection flaw in a deprecated Management API package path.EPSS 0.3%Oct 12, 2026
- Critical9.9Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain an authorization flaw in certain forest-management operations.EPSS 0.3%Oct 12, 2026
- High8.6Grav API Plugin before 1.0.36 Privilege Escalation via Scalar Access GrantsOct 12, 2026
- High7.5Brocade Fabric OS versions before 10.0.1 contain an authorization logic vulnerability in the AAA (Authentication, Authorization, and Accounting) integration framework…EPSS 0.2%Oct 8, 2026
- High7.7In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15 on Linux, a local user who can run commands as the user account running Splunk Enterprise could…EPSS 0.1%Oct 7, 2026
- Critical9.4Zammad GmbH Zammad Improper Privilege Management VulnerabilityKEVEPSS 0.5%Sep 30, 2026
- High8.6UVdesk core-framework before 1.1.7 contains an improper privilege management vulnerability in the editAgent endpoint that allows agents with agent-management privilege…EPSS 0.4%Sep 21, 2026
63 records · page 1 of 3
PreviousNext