Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium4.3Nix before 2.35.3 and Lix before 2.95.4 on macOS allow a Seatbelt sandbox escape (for an unconfined build) because a certain size threshold is mishandled.EPSS 0.1%Oct 14, 2026
- Critical10.0Adobe Experience Manager | Incorrect Authorization (CWE-863)EPSS 0.7%Oct 13, 2026
- Critical9.9Adobe Experience Manager | Incorrect Authorization (CWE-863)EPSS 0.6%Oct 13, 2026
- Critical10.0Adobe Experience Manager | Incorrect Authorization (CWE-863)EPSS 0.8%Oct 13, 2026
- Critical10.0Adobe Experience Manager | Incorrect Authorization (CWE-863)EPSS 0.8%Oct 13, 2026
- High7.2Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass.EPSS 0.4%Oct 13, 2026
- High8.8Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.EPSS 0.8%Oct 13, 2026
- Medium4.3Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.EPSS 0.4%Oct 13, 2026
- Medium6.5Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.EPSS 0.8%Oct 13, 2026
- High8.8Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.EPSS 0.7%Oct 13, 2026
- High8.3Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass.Oct 13, 2026
- Critical9.8Adobe Commerce | Incorrect Authorization (CWE-863)EPSS 0.6%Oct 13, 2026
- Critical9.9Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes.EPSS 0.7%Oct 13, 2026
- High8.7The Ignition Perspective module does not properly validate session privileges when determining Designer-level access.EPSS 0.5%Oct 13, 2026
- Critical9.6Incorrect authorization in Updater in Google Chrome prior to 155.0.8059.79 allowed a local attacker to execute arbitrary code outside the sandbox via a local program.EPSS 0.1%Oct 13, 2026
- High8.6Incorrect authorization in Mojo in Google Chrome on on Windows prior to 155.0.8059.79 allowed a local attacker to potentially execute arbitrary code outside the sandbo…EPSS 0.1%Oct 13, 2026
- Medium4.3SFTPGo is an open source, event-driven file transfer solution.EPSS 0.2%Oct 13, 2026
- High7.4IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow a remote attacker to bypass security restrictions due to incorrect authorization.EPSS 0.3%Oct 13, 2026
- High8.6Photoshop Desktop is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user.EPSS 0.2%Oct 13, 2026
- Critical9.6ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user.EPSS 0.3%Oct 13, 2026
- High8.4ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user.EPSS 0.4%Oct 13, 2026
- Medium5.4IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 is affected by a privilege escalation vulnerability with the restConnector-2.0 feature enabled.EPSS 0.2%Oct 13, 2026
- Low3.5Indico is a feature-rich event management system.EPSS 0.3%Oct 13, 2026
- High7.5ColdFusion is affected by an Incorrect Authorization vulnerability that could lead to disclosure of sensitive memory.EPSS 0.5%Oct 13, 2026
- Critical9.6ColdFusion is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass.EPSS 0.3%Oct 13, 2026