Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium6.3FreeRDP 3.0.0 before 3.32.0 allows HTTP header injection in its proxy because a lone LF in the target portion of a routing token (Cookie: msts=) is not rejected and is…Oct 14, 2026
- Medium6.9In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the vertx-mail-client does not sanitize CR (\r) or LF (\n) characters…Oct 14, 2026
- Medium6.8Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1 directly accepts Apache configuration file data during service setup or re-initialization.EPSS 0.2%Oct 8, 2026
- Medium6.9An input validation and output encoding vulnerability exists in the web management interface of Brocade Fabric OS versions before 10.0.1.EPSS 0.2%Oct 8, 2026
- Low2.1A vulnerability was determined in ST Engineering iDirect iDX and Evo iDX.EPSS 0.4%Sep 21, 2026
- Medium5.3Reverse::Proxy versions before 0.04 for Perl allow HTTP request smuggling via a percent-decoded PATH_INFO written unencoded to the upstream request line.EPSS 0.4%Aug 23, 2026
- High7.6A flaw was found in sg3_utils.EPSS 0.3%Jul 28, 2026
- Medium6.5Netty is an asynchronous, event-driven network application framework.EPSS 0.3%Dec 16, 2025
- High7.5Oracle E-Business Suite Server-Side Request Forgery (SSRF) VulnerabilityKEVEPSS 95.9%Oct 11, 2025
- High7.5Synacor Zimbra Collaboration Suite (ZCS) Command Injection VulnerabilityKEVEPSS 93.9%Apr 20, 2022
- Medium6.1An issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through 3.7.3.EPSS 5.3%Mar 23, 2019
- Medium6.1An issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through 3.7.3.EPSS 5.4%Mar 13, 2019
12 records · page 1 of 1
PreviousNext