Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- Medium5.3Nezha 1.7.0 before 2.3.15 Cross-Tenant Server-ID Enumeration via getServerConfigEPSS 0.2%Oct 16, 2026
- Medium6.3Nezha 2.1.0 before 2.3.15 Host Header Injection via MCP Transfer ToolsEPSS 0.2%Oct 16, 2026
- High7.1Nezha 1.0.0 before 2.3.15 Memory Exhaustion via File Manager WebSocketEPSS 0.3%Oct 16, 2026
- High7.1Nezha 2.0.13 before 2.3.15 Denial of Service via /api/v1/ws/transfer WebSocketEPSS 0.3%Oct 16, 2026
- High8.8FreeRDP before 3.32.0 Heap Out-of-Bounds Write in AVC444 YUV444 CombineEPSS 0.3%Oct 16, 2026
- High7.8FreeRDP before 3.32.0 Heap Buffer Overflow via Persistent Cache v2 ParserEPSS 0.1%Oct 16, 2026
- High8.8FreeRDP 3.29.0 before 3.32.0 Heap Overflow via audin Apple BackendsEPSS 0.3%Oct 16, 2026
- High7.3FreeRDP before 3.32.0 Heap Buffer Overflow via persistent_cache_read_entry_v3EPSS 0.1%Oct 16, 2026
- High8.7FreeRDP 3.0.0 before 3.32.0 Unauthenticated Memory Exhaustion via NLA Frame ParserEPSS 0.3%Oct 16, 2026
- High7.1FreeRDP 2.0.0 before 3.32.0 Memory Exhaustion via Static Channel ReassemblyEPSS 0.2%Oct 16, 2026
- Medium5.0FreeRDP 3.30.0 before 3.32.0 Heap Over-Read via Windows cliprdr FILECONTENTS_SIZEEPSS 0.1%Oct 16, 2026
- Medium6.3FreeRDP 3.0.0 before 3.32.0 Out-of-Bounds Read via RAIL Window TitleEPSS 0.2%Oct 16, 2026
- Medium6.0FreeRDP from 3.30.0 before 3.32.0 Resource Exhaustion via rdpecam StartStreamsRequestEPSS 0.2%Oct 16, 2026
- Medium6.9FreeRDP before 3.32.0 NULL Dereference via Zero-Length WebSocket PingEPSS 0.2%Oct 16, 2026
- UnknownMalicious code in xmd-baileys (npm)Oct 16, 2026
- UnknownMalicious code in @developmentyora/yorakids (npm)Oct 16, 2026
- UnknownMalicious code in @developmentyora/baileyss (npm)Oct 16, 2026
- UnknownMalicious code in asistenyorstore (npm)Oct 16, 2026
- UnknownMalicious code in @celestial-community/baileys (npm)Oct 16, 2026
- Medium5.4A potential vulnerability was reported in some Lenovo Tablets that could allow a user with physical access to an unlocked tablet to bypass device protections and execu…Oct 16, 2026
- High7.0A potential improper authorization vulnerability was reported in Lenovo Baiying PC Client, distributed exclusively in the Chinese market, that could allow a local auth…Oct 16, 2026
- Medium6.8A potential out-of-bounds write vulnerability was reported in the Lenovo Energy Management driver that could allow a local authenticated user to cause a blue screen error.EPSS 0.1%Oct 16, 2026
- Medium6.9A vulnerability was determined in bitcoinj up to 0.17.EPSS 0.3%Oct 16, 2026
- Unknownpython313-xhtml2pdf-0.2.24-1.1 on GA mediaOct 16, 2026
- Unknownpython313-markdown2-2.5.5-2.1 on GA mediaOct 16, 2026