Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium6.9OpenSlide through 4.0.1 contains a heap out-of-bounds read vulnerability in the MIRAX reader that allows attackers to read past the slide_positions array via crafted S…EPSS 0.1%Oct 15, 2026
- Medium6.8Open Asset Import Library (assimp) through 6.0.5 contains a NULL pointer dereference vulnerability in the Ogre3D binary mesh importer's OgreBinarySerializer::ReadAnima…EPSS 0.1%Oct 15, 2026
- Medium6.8Assimp through 6.0.5 contains a NULL pointer dereference vulnerability in the Ogre3D importer that allows attackers to crash applications via unvalidated bone indices…EPSS 0.2%Oct 15, 2026
- Medium6.9catdoc through 0.95 contains an out-of-bounds read vulnerability in copy_unicode_string() in src/xlsparse.c that allows attackers to read past buffers via an unchecked…EPSS 0.1%Oct 15, 2026
- Medium6.9catdoc through 0.95 contains an out-of-bounds read vulnerability in the MULRK record handler of process_item() in src/xlsparse.c that allows attackers to read past the…EPSS 0.2%Oct 15, 2026
- Medium6.9CFITSIO through 4.7.0 contains a heap-based out-of-bounds read vulnerability in the HCOMPRESS tile decoder that allows attackers to read past the compressed tile buffe…EPSS 0.1%Oct 15, 2026
- Medium6.9CFITSIO through 4.7.0 contains a heap-based out-of-bounds read vulnerability in the imcompress.c unquantize helpers that allows attackers to read memory before the fit…EPSS 0.1%Oct 15, 2026
- Medium6.9FluidSynth through 2.6.1 contains an out-of-bounds write vulnerability that allows attackers to corrupt heap and stack memory by supplying unvalidated SoundFont modula…EPSS 0.2%Oct 15, 2026
- Medium5.1Aureus ERP through 1.6.0 contains a stored cross-site scripting vulnerability that allows authenticated users to inject scripts via unescaped Operation Type and Locati…EPSS 0.2%Oct 15, 2026
- Medium6.8AdPlug through 2.4 contains a heap out-of-bounds read vulnerability in CdmoLoader::load() in src/dmo.cpp that allows attackers to read past a heap allocation by supply…EPSS 0.1%Oct 15, 2026
- Medium6.8AdPlug through 2.4 contains an out-of-bounds read vulnerability in src/xsm.cpp that allows attackers to read before note_table by supplying a negative note index.EPSS 0.1%Oct 15, 2026
- Medium6.9AdPlug through 2.4 contains a heap-based buffer overflow in CksmPlayer::update() in src/ksm.cpp that writes past the fixed databuf[2048] array without bounds checking.EPSS 0.1%Oct 15, 2026
- High7.5Dolibarr before 23.0.4 contains a PHP object injection vulnerability in jsonOrUnserialize() in functions.lib.php, which calls unserialize() without class restrictions…EPSS 0.5%Oct 15, 2026
- Medium5.3Missing Authorization vulnerability in WP E-Signature Ninja Forms Signature Contract Add-On ninja-signature-contract-forms-add-on allows Exploiting Incorrectly Configu…EPSS 0.2%Oct 15, 2026
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Chill Download Monitor download-monitor allows Stored XSS.This…EPSS 0.2%Oct 15, 2026
- Medium4.3Missing Authorization vulnerability in Hamid Alinia Login with phone number login-with-phone-number allows Exploiting Incorrectly Configured Access Control Security Le…EPSS 0.2%Oct 15, 2026
- Medium5.3Missing Authorization vulnerability in WP Desk Flexible Quantity – Measurement Price Calculator for WooCommerce flexible-quantity-measurement-price-calculator-for-wooc…EPSS 0.2%Oct 15, 2026
- Medium5.3Missing Authorization vulnerability in Planet studio PlanetStudio Payment Gateway planetstudio-payment-gateway allows Exploiting Incorrectly Configured Access Control…EPSS 0.2%Oct 15, 2026
- Medium6.5Insertion of Sensitive Information Into Sent Data vulnerability in ClikIT Infinite Uploads infinite-uploads allows Retrieve Embedded Sensitive Data.This issue affects…EPSS 0.3%Oct 15, 2026
- Medium5.3Missing Authorization vulnerability in WPdreams Ajax Search Lite ajax-search-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue af…EPSS 0.2%Oct 15, 2026
- Medium5.9undici is an HTTP client library for Node.js.EPSS 0.3%Oct 15, 2026
- Medium5.9undici is an HTTP client library for Node.js.EPSS 0.3%Oct 15, 2026
- Medium5.4Missing Authorization vulnerability in WP Chill Strong Testimonials strong-testimonials allows Exploiting Incorrectly Configured Access Control Security Levels.This is…EPSS 0.2%Oct 15, 2026
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brainstorm Force Presto Player presto-player allows Stored XSS.Th…EPSS 0.2%Oct 15, 2026
- High7.5undici is an HTTP client library for Node.js.EPSS 0.3%Oct 15, 2026