Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium5.8Markdown Preview Enhanced is a Markdown preview extension for Visual Studio Code.Oct 14, 2026
- High7.1F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedded software applications.Oct 14, 2026
- Critical10.0The File Upload to Order WordPress plugin before 1.1.4 does not validate or confine a file path taken from attacker-controlled session data before deleting the file, a…EPSS 0.2%Oct 14, 2026
- High8.7A remote code execution vulnerability in ONLYOFFICE Document Server versions before10.0.0 allows an authenticated attacker with a valid Inbox-compatible JWT to execute…EPSS 1.0%Oct 13, 2026
- Critical9.9An External Control of File Name or Path vulnerability in Ivanti Xtraction before version 2026.4 allows a remote authenticated attacker to redirect application-generat…EPSS 0.8%Oct 13, 2026
- High7.1Frappe Framework before 15.117.0 and 16.x before 16.30.0 contains an arbitrary file read vulnerability in the handling of attributes in outgoing email HTML.EPSS 0.3%Oct 12, 2026
- High8.4An arbitrary file manipulation vulnerability exists in the WebTools management interface of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1.EPSS 0.1%Oct 8, 2026
- High8.1Payload is a free and open source headless content management system.EPSS 0.4%Oct 6, 2026
- High8.1Trilium is an open-source hierarchical note-taking application.EPSS 0.5%Aug 27, 2026
- High8.7exceljs through 4.4.0 contains a path traversal vulnerability in the Workbook.addImage() function that fails to validate file paths.EPSS 0.5%Aug 24, 2026
- High8.2NLTK versions before 3.10.0 contain a path traversal vulnerability in FramenetCorpusReader and NKJPCorpusReader that allows attackers to parse XML files outside the co…EPSS 0.4%Aug 22, 2026
- High7.0OctoPrint provides a web interface for controlling consumer 3D printers.EPSS 0.3%Aug 21, 2026
- High8.8Jenkins Email Extension Plugin 1933.v45cec755423f and earlier allows inlining images as in email content by setting the attribute, without restrictions on the image UR…EPSS 0.5%May 27, 2026
- Critical9.1An arbitrary file rename vulnerability in the /admin/filer.php component of EasyImages 2.0 v2.8.6 and below allows attackers with Administrator privileges to execute a…EPSS 0.6%Dec 11, 2025
- High8.8Microsoft Windows External Control of File Name or Path VulnerabilityKEVEPSS 87.0%Jun 10, 2025
- Medium5.4Microsoft Windows NTLM Hash Disclosure Spoofing VulnerabilityKEVEPSS 62.3%Mar 11, 2025
- High7.1Palo Alto Networks PAN-OS File Read VulnerabilityKEVEPSS 2.0%Feb 12, 2025
- Medium6.5Microsoft Windows NTLMv2 Hash Disclosure Spoofing VulnerabilityKEVEPSS 85.4%Nov 12, 2024
- Critical9.8Juniper Junos OS Path Traversal VulnerabilityKEVEPSS 4.8%May 4, 2020
19 records · page 1 of 1
PreviousNext