Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- Medium6.5Wasmtime: WASI hard links bypass wasmtime-wasi's FilePerms for destinationEPSS 0.2%Oct 16, 2026
- Low3.3gstreamer1-plugins-good: gstreamer1-plugins-good: Information disclosure via out-of-bounds read in qtdemux_parse_chnlEPSS 0.3%Oct 16, 2026
- Medium4.3gstreamer1-plugins-good: gstreamer1-plugins-good: information disclosure via out-of-bounds read during MP4 parsingEPSS 0.2%Oct 16, 2026
- UnknownRank Math SEO PRO 3.0.123 - Unauthenticated Embedded Malicious CodeOct 16, 2026
- Critical9.8The MailOptin – Popup, Optin Forms & Email Newsletters for Mailchimp, HubSpot, AWeber Etc.KEVEPSS 0.4%Oct 16, 2026
- Medium4.3Fastcache by Host.it <= 1.7.5 - Missing Authorization to Authenticated (Subscriber+) Arbitrary .htaccess Page-Cache Block Modification via updateSettings() admin_action_update HookEPSS 0.2%Oct 16, 2026
- High7.5sync 2026-10-16T15:41:51ZEPSS 0.3%Oct 16, 2026
- High7.5JavaCV: Integer Overflow in IPCameraFrameGrabber Causes Infinite-Loop DoSEPSS 0.3%Oct 16, 2026
- UnknownA heap buffer overflow in the stbl_AddSize function (isomedia/stbl_write.c) of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service (DoS) via supplying a cra…EPSS 0.2%Oct 16, 2026
- High7.1A flaw was found in WildFly.EPSS 0.3%Oct 15, 2026
- UnknownCVE-2026-8311Oct 15, 2026
- UnknownCVE-2026-5819Oct 15, 2026
- High7.0A potential authentication bypass vulnerability was reported in some Lenovo tablets that could allow a user with physical access to gain unauthorized device access.EPSS 0.3%Oct 15, 2026
- UnknownCVE-2026-2937Oct 15, 2026
- High8.6A potential vulnerability was reported in the Lenovo Legion Zone application, distributed exclusively in the Chinese market, that could allow an attacker on the same l…EPSS 0.3%Oct 15, 2026
- UnknownCVE-2026-107316Oct 15, 2026
- UnknownCVE-2026-107172Oct 15, 2026
- UnknownCVE-2025-3778Oct 15, 2026
- Medium6.0A potential vulnerability was reported in Lenovo Smart Camera C33, distributed exclusively in the Chinese market, that could allow an unauthorized remote user to discl…EPSS 0.2%Oct 15, 2026
- Medium5.9A potential improper certificate validation vulnerability was reported in Lenovo Smart Camera C33, distributed exclusively in the Chinese market, that could allow an a…EPSS 0.1%Oct 15, 2026
- High7.1BISHENG through 3.0.0-beta4 contains an insecure direct object reference vulnerability that allows authenticated low-privileged users to read other users' parsed docum…EPSS 0.2%Oct 15, 2026
- High7.1CRMEB 5.6.1 through 6.0.0 contains an insecure direct object reference vulnerability that allows authenticated storefront users to read and claim other users' orders v…EPSS 0.2%Oct 15, 2026
- Medium5.3SendPortal sendportal-core through 4.0.1 contains an authorization bypass vulnerability that allows authenticated workspace members to attach subscribers to other work…EPSS 0.3%Oct 15, 2026
- Critical9.1MacCMS v10 through 2026.1000.4056 does not limit attempts on the six-digit password recovery code, allowing unauthenticated attackers to take over member accounts.EPSS 0.3%Oct 15, 2026
- Medium5.3zhontai Admin.Core through 10.1.0 contains an authorization bypass vulnerability that allows authenticated users to ignore department DataScope restrictions by supplyi…EPSS 0.3%Oct 15, 2026