Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Critical9.8SGLangs multimodal generation runtime is vulnerable to unauthenticated remote code execution when the --enable-custom-logit-processor option is enabled, as Python obje…EPSS 0.9%May 18, 2026
- Critical9.8SGLangs multimodal generation runtime scheduler's ROUTER socket binds to 0.0.0.0 by default and contains a sink that calls pickle.loads() on incoming messages, enablin…EPSS 0.6%May 18, 2026
- Medium5.5A security flaw has been discovered in h2oai h2o-3 up to 7402.EPSS 0.8%May 17, 2026
- Critical10.0Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data VulnerabilityKEVEPSS 43.2%Mar 4, 2026
- Critical9.8SolarWinds Web Help Desk Deserialization of Untrusted Data VulnerabilityKEVEPSS 84.2%Jan 28, 2026
- Critical9.8Microsoft SharePoint Deserialization of Untrusted Data VulnerabilityKEVEPSS 29.2%Jan 13, 2026
- Low2.1A security vulnerability has been detected in milvus up to 2.6.7.EPSS 0.4%Jan 5, 2026
- Low2.0A vulnerability was determined in PluXml up to 5.8.22.EPSS 0.5%Jan 2, 2026
- Critical9.8MooreThreads torch_musa through all versions contains an unsafe deserialization vulnerability in torch_musa.utils.compare_tool.EPSS 0.7%Dec 15, 2025
- Critical10.0Barracuda Service Center, as implemented in the RMM solution, in versions prior to 2025.1.1, exposes a .NET Remoting service that is insufficiently protected against d…EPSS 0.7%Dec 10, 2025
- High8.8Ladybug adds message-based debugging, unit, system, and regression testing to Java applications.EPSS 0.3%Dec 9, 2025
- Critical10.0Meta React Server Components Remote Code Execution VulnerabilityKEVEPSS 99.8%Dec 3, 2025
- Critical9.8Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data VulnerabilityKEVEPSS 100.0%Oct 14, 2025
- Critical9.8SolarWinds Web Help Desk Deserialization of Untrusted Data VulnerabilityKEVEPSS 89.5%Sep 22, 2025
- Critical9.8Fortra GoAnywhere MFT Deserialization of Untrusted Data VulnerabilityKEVEPSS 99.8%Sep 18, 2025
- Critical9.0Sitecore Multiple Products Deserialization of Untrusted Data VulnerabilityKEVEPSS 60.6%Sep 3, 2025
- Critical9.4N-able N-Central Insecure Deserialization VulnerabilityKEVEPSS 1.9%Aug 13, 2025
- Critical9.8Microsoft SharePoint Deserialization of Untrusted Data VulnerabilityKEVEPSS 100.0%Jul 19, 2025
- Critical9.0Dassault Systèmes DELMIA Apriso Deserialization of Untrusted Data VulnerabilityKEVEPSS 96.9%Jun 2, 2025
- High8.8RoundCube Webmail Deserialization of Untrusted Data VulnerabilityKEVEPSS 99.0%Jun 1, 2025
- Critical9.1SAP NetWeaver Deserialization VulnerabilityKEVEPSS 12.7%May 12, 2025
- High7.2ConnectWise ScreenConnect Improper Authentication VulnerabilityKEVEPSS 3.5%Apr 25, 2025
- Critical9.8Apache Tomcat Path Equivalence VulnerabilityKEVEPSS 99.9%Mar 10, 2025
- Critical9.9Wazuh Server Deserialization of Untrusted Data VulnerabilityKEVEPSS 93.8%Feb 10, 2025
- High8.6Trimble Cityworks Deserialization VulnerabilityKEVEPSS 31.1%Feb 6, 2025