Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High7.5A vulnerability in the finger daemon of HPE NonStop TCP/IP UTILITIES could allow an unauthenticated remote attacker to cause a denial of service.Oct 15, 2026
- Medium5.3HPE NonStop TCP/IP UTILITIES - Denial of Service vulnerabilityOct 15, 2026
- High8.7FreeRDP shadow server from 3.0.0 before 3.32.0 dispatches input PDUs during the Confirm Active state before authentication, allowing unauthenticated attackers to injec…Oct 14, 2026
- Medium5.3FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations.Oct 14, 2026
- Medium6.5FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations.Oct 14, 2026
- Low3.7FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations.Oct 14, 2026
- High7.4FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations.Oct 14, 2026
- Medium5.5A security vulnerability has been detected in cemtan sar2html 4.0.0.Oct 14, 2026
- High8.2OpenAEV is an open source platform allowing organizations to plan, schedule and conduct cyber adversary simulation campaign and tests.Oct 14, 2026
- Critical9.2Dgraph is an open source distributed GraphQL database.Oct 14, 2026
- High8.2dbt enables data analysts and engineers to transform their data using the same practices that software engineers use to build applications.Oct 14, 2026
- Critical9.3Lantronix XPress-DR and XPress-DR-I (CoBos-family) firmware through 8.1.0.0 contains a missing authentication vulnerability that allows remote attackers to read and pe…Oct 14, 2026
- Critical9.2Report One MyReport Updater through 2.1.1 exposes an unauthenticated gRPC service on TCP port 9095 that allows remote attackers to redirect the SYSTEM updater by invok…Oct 14, 2026
- Medium6.3frp 0.41.0 through 0.71.1 contains a missing authentication vulnerability that allows unauthenticated remote attackers to access pprof debug endpoints because handlers…Oct 14, 2026
- High8.6SmsForwarder through 3.5.0 contains a missing authentication vulnerability in its AndServer HTTP server that allows unauthenticated network attackers to invoke remote-control APIs.Oct 14, 2026
- Critical9.2NullHub through 2026.5.29 contains a missing authentication vulnerability that allows unauthenticated attackers to access the /api/* management API because the auth_to…Oct 14, 2026
- Medium6.9SWIFI-SE2KIC firmware versions 2.0.22 and prior are vulnerable to a Missing Authentication for Critical Function vulnerability that could allow an attacker on the loca…EPSS 0.2%Oct 13, 2026
- Medium6.9SWIFI-SE2KIC firmware versions 2.0.22 and prior are vulnerable to a Missing Authentication for Critical Function vulnerability that could allow an attacker on the loca…EPSS 0.2%Oct 13, 2026
- High8.7Multiple Kasa devices contain an improper authentication vulnerability in the local device-management protocol.EPSS 0.3%Oct 13, 2026
- Critical9.8A flaw in Portal for ArcGIS allows unauthenticated access to certain Portal Administrator API endpoints under specific conditions.EPSS 0.3%Oct 13, 2026
- Medium6.9FJ-OMS oms-erp through PRE contains a missing authentication vulnerability that allows unauthenticated attackers to delete and rebuild product search indexes by callin…EPSS 0.4%Oct 13, 2026
- High7.5A Missing Authentication for Critical Function vulnerability in Ivanti Xtraction before version 2026.4 allows a remote unauthenticated attacker to create, modify, trusted site.EPSS 0.7%Oct 13, 2026
- High7.7CVFS contained a missing authentication condition affecting command execution.EPSS 0.2%Oct 13, 2026
- Critical9.8The Metasploit Framework Web Service REST API (msf-ws) exposes the credential store through Msf::WebServices::CredentialServlet.EPSS 0.4%Oct 13, 2026
- High8.8ZITADEL 3.0.0 before 4.18.0 Unauthenticated Username Change via Login V1Oct 12, 2026
114 records · page 1 of 5
PreviousNext