Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium6.5IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a local attacker to obta…EPSS 0.1%Oct 8, 2026
- Medium4.3In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.10, and 9.4.15, a user who does not hold the "admin" or "power" Splunk roles could create or edit scripted loo…EPSS 0.2%Oct 7, 2026
- Medium5.3Incorrect authorization in Omnibox in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to obtain sensitive infor…EPSS 0.2%Oct 6, 2026
- Medium6.1Incorrect authorization in Core in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass system access rest…EPSS 0.2%Oct 6, 2026
- High8.8Incorrect authorization in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via a crafted HTML page.EPSS 0.3%Oct 6, 2026
- High8.8Incorrect authorization in WebProtect in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive information v…EPSS 0.3%Oct 6, 2026
- Medium5.3Payload is a free and open source headless content management system.EPSS 0.2%Oct 6, 2026
- Critical9.3Payload is a free and open source headless content management system.EPSS 0.2%Oct 6, 2026
- High7.8A flaw was found in sudo.EPSS 0.1%Sep 23, 2026
- Medium5.3An access control vulnerability was discovered in the Smart Polling configuration functionality due to insufficient validation of user privileges.EPSS 0.4%Sep 8, 2026
- Medium6.4An access control vulnerability was discovered in the Credentials Manager functionality due to insufficient validation of user privileges.EPSS 0.4%Sep 8, 2026
- Medium6.5Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain an Incorrect Authorization vulnerability in the REST API.EPSS 0.4%Sep 3, 2026
- High7.5Trilium is an open-source hierarchical note-taking application.EPSS 0.4%Aug 27, 2026
- High7.1NetworkManager did not apply the private_user restriction to the 802-1x.ca-path and phase2-ca-path directory-valued connection properties.EPSS 0.1%Aug 24, 2026
- Critical9.3Improper input validation in FreeRTOS-Kernel before 11.3.1 might allow an unprivileged task on MPU-enabled ports to execute code in privileged kernel context.EPSS 0.2%Aug 21, 2026
- Critical9.9Incus is a system container and virtual machine manager.Aug 21, 2026
- Medium4.3Incus is a system container and virtual machine manager.Aug 21, 2026
- Critical9.8In Spring AI's tool calling support, the per-request tool list is advertised to the model as a boundary but is not fully enforced when a tool call is dispatched.Aug 21, 2026
- High8.7Akaunting 3.1.21 contains an authenticated improper authorization vulnerability in the common BulkActions dispatcher.This issue affects Akaunting: 3.1.21.EPSS 0.3%Aug 19, 2026
- High8.2A flaw was found in FreeIPA.EPSS 0.4%Aug 11, 2026
- Critical9.1Adobe Commerce and Magento Incorrect Authorization VulnerabilityKEVEPSS 87.5%Aug 11, 2026
- High8.8JFrog Artifactory Incorrect Authorization VulnerabilityKEVEPSS 8.6%Jul 27, 2026
- Medium4.3A vulnerability exists in Apache Artemis whereby an application using the STOMP protocol with security credentials that grant either the consume or send permission on…EPSS 0.6%May 28, 2026
- Medium4.3GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.9 before 18.10.7, 18.11 before 18.11.4, and 19.0 before 19.0.1 that under certain conditi…EPSS 0.3%May 28, 2026
- Critical10.0free5GC is an open-source implementation of the 5G core network.EPSS 0.4%May 27, 2026