Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Critical9.8Microsoft Security Advisory CVE-2026-105016 - Microsoft QUIC Remote Code Execution VulnerabilityEPSS 1.0%Oct 13, 2026
- Medium6.9code-projects Matrimonial System matrimony.sql file accessEPSS 0.3%Oct 12, 2026
- Medium6.9Tink-go 2.8.0 Keyset Validation Bypass via NewHandleWithNoSecretsEPSS 0.2%Oct 12, 2026
- High7.1Improper XML external entity restriction in Progress MarkLogic ServerOct 12, 2026
- High7.1Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain an out-of-bounds write vulnerability in certain language-processing functionality.Oct 12, 2026
- High7.1Progress MarkLogic Server 12.x releases before 12.1.0 contain an out-of-bounds read vulnerability in certain query-processing functionality.Oct 12, 2026
- Medium6.1Cross-site scripting in Progress MarkLogic ServerOct 12, 2026
- Medium6.5Quarkus REST Data Panache provides a way to automatically generate REST endpoints for data entities.EPSS 0.2%Oct 12, 2026
- High8.8ZITADEL 3.0.0 before 4.18.0 Unauthenticated Username Change via Login V1EPSS 0.4%Oct 12, 2026
- Medium5.3Heym v0.0.5 before v0.0.113 Broken Access Control via Workflow Execution TokensEPSS 0.2%Oct 12, 2026
- Critical9.2LibreNMS before 26.9.0 LDAP Filter Injection Authentication Bypass via Authorization HeaderEPSS 0.5%Oct 12, 2026
- Medium5.3LibreNMS before 26.9.0 Stored XSS via wireless sensor descriptionEPSS 0.2%Oct 12, 2026
- High8.6Adminer before 6.1.1 RCE via UTF-8 BOM SQLite ATTACH BypassEPSS 0.6%Oct 12, 2026
- Medium5.3SurrealDB 3.0.0 before 3.3.0 Missing Authentication in revoke RPC MethodEPSS 0.3%Oct 12, 2026
- Medium5.3SurrealDB before 3.3.0 Field Permission Bypass via LIVE SELECT WHERE ClauseEPSS 0.2%Oct 12, 2026
- Low2.3Network-AI before 5.15.2 CORS Origin Validation Error in MCP SSE TransportEPSS 0.1%Oct 12, 2026
- Medium5.1Admidio 4.0.12 through 4.3.17 and 5.0.0 before 5.0.15 Reflected XSS via system/redirect.phpEPSS 0.2%Oct 12, 2026
- Medium5.3Grav Guestbook before 0.5.2 Stored XSS via AJAX Pagination and Admin ViewsEPSS 0.2%Oct 12, 2026
- High8.6Grav API Plugin before 1.0.36 Privilege Escalation via Scalar Access GrantsEPSS 0.4%Oct 12, 2026
- High8.6Grav Login Plugin 2.7.0 before 3.9.9 2FA Bypass via Profile Update FormEPSS 0.4%Oct 12, 2026
- Low2.1Craft CMS 5.0.0 before 5.10.14 DOM XSS via returnUrl in 2FA VerificationEPSS 0.2%Oct 12, 2026
- Medium6.3Parse Server 8.2.2 before 8.6.94 and 9.0.0 before 9.10.1-alpha.14 GraphQL Schema Disclosure via Persisted QueriesEPSS 0.2%Oct 12, 2026
- High7.1Open WebUI 0.11.0 before 0.11.4 Denial of Service via Automation Recurrence RulesEPSS 0.3%Oct 12, 2026
- High7.6Open WebUI 0.6.27 before 0.11.4 Session Token Disclosure via OAuth-Mode ConnectionsEPSS 0.3%Oct 12, 2026
- Medium5.3Open WebUI 0.9.6 before 0.11.4 Information Disclosure via Unscoped Directory IDEPSS 0.2%Oct 12, 2026