Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High8.8ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user.EPSS 0.2%Oct 13, 2026
- High8.8ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user.EPSS 0.1%Oct 13, 2026
- High8.8ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user.EPSS 0.1%Oct 13, 2026
- High7.8ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user.EPSS 0.2%Oct 13, 2026
- Critical9.9ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user.EPSS 0.4%Oct 13, 2026
- High8.8ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user.EPSS 0.1%Oct 13, 2026
- High8.8ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user.EPSS 0.2%Oct 13, 2026
- High7.7ColdFusion is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass.EPSS 0.4%Oct 13, 2026
- High8.8ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user.EPSS 0.1%Oct 13, 2026
- High8.2ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user.EPSS 0.1%Oct 13, 2026
- High8.8Affected Microsoft products: Microsoft Exchange Server 2016 Cumulative Update 23, Microsoft Exchange Server 2019 Cumulative Update 14, Microsoft Exchange Server 2019 C…Oct 13, 2026
- High8.8Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.EPSS 0.7%Oct 13, 2026
- High8.7The Ignition Perspective module does not properly validate session privileges when determining Designer-level access.EPSS 0.5%Oct 13, 2026
- Medium4.3GitLab has remediated an issue in GitLab EE affecting all versions from 13.6 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions,…EPSS 0.2%Oct 13, 2026
- Medium4.2GitLab has remediated an issue in GitLab EE affecting all versions from 16.11 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions,…EPSS 0.1%Oct 13, 2026
- Medium4.2GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain condition…EPSS 0.2%Oct 13, 2026
- Medium4.3GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.8 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain condition…EPSS 0.2%Oct 13, 2026
- Medium4.2GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain condition…EPSS 0.2%Oct 13, 2026
- Medium4.3GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.0 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain condition…EPSS 0.2%Oct 13, 2026
- Low2.7GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.6 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain condition…EPSS 0.2%Oct 13, 2026
- Medium6.3Parse Server 8.2.2 before 8.6.94 and 9.0.0 before 9.10.1-alpha.14 GraphQL Schema Disclosure via Persisted QueriesEPSS 0.2%Oct 12, 2026
- Medium5.3jshERP through 3.6 contains an incorrect authorization vulnerability in GET /supplier/exportExcel that allows authenticated users to bypass role data scope restriction…EPSS 0.2%Oct 12, 2026
- High7.1LavaLite CMS through 10.1.2 contains an authorization bypass vulnerability that allows authenticated low-privileged users to modify other users' accounts by abusing th…EPSS 0.3%Oct 12, 2026
- Medium5.4An **incorrect authorization** flaw has been found in **network interface handling** in the **Foreman** package.EPSS 0.2%Oct 12, 2026
- Medium5.3GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could haveEPSS 0.2%Oct 12, 2026