Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Low2.0ImageMagick before 6.9.13-57 and 7.x before 7.1.2-32 Undefined Behavior in INFO, JSON and YAML EncodersEPSS 0.1%Oct 12, 2026
- High8.5Server-side request forgery in Progress MarkLogic Server Linux cloud deploymentsOct 12, 2026
- High8.5Server-side request forgery in Progress MarkLogic Server Azure deploymentsOct 12, 2026
- Critical9.1Thirty bees through 1.7.0 Account Takeover via PasswordController Guest CheckoutEPSS 0.3%Oct 12, 2026
- Critical9.4Authentication Bypass via Spoofed Remote-User Header in HTTP Basic AuthenticationOct 12, 2026
- Medium6.1Insufficient Neutralization of Formula Elements in CSV ExportsOct 12, 2026
- Medium5.4Duplicate Identity / Identity Shadowing across CustomerUser backendsOct 12, 2026
- Medium4.3Cross-Site Request Forgery in Administrative ActionsOct 12, 2026
- Medium5.1Open Asset Import Library Assimp PLY File getNextBlock out-of-boundsEPSS 0.2%Oct 11, 2026
- Medium5.3Furion .NET Framework StringRenderExtensions.cs String.Replace sql injectionEPSS 0.3%Oct 11, 2026
- Medium5.3Lippu Docx Reader Office Viewer App path traversalEPSS 0.3%Oct 11, 2026
- Critical9.4OpenSpug File Transfer transfer os command injectionEPSS 1.7%Oct 11, 2026
- Medium6.9Studio-Saelix Sencho Login Endpoint login improper authenticationEPSS 0.4%Oct 11, 2026
- Unknownxen/netfront: drop RX packets with a short Ethernet headerEPSS 0.2%Oct 9, 2026
- High8.7Exposure of sensitive information to an unauthorized actor in Azure API Center allows an unauthorized attacker to disclose information over a network.EPSS 0.4%Oct 8, 2026
- Medium4.2Authentication Bypass Using an Alternate Path or Channel in MalcolmEPSS 0.2%Oct 8, 2026
- Critical9.8IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 is vulnerable to buffer overflow.EPSS 0.3%Oct 8, 2026
- High7.5IBM DataPower Gateway Improper Verification of Cryptographic SignatureEPSS 0.2%Oct 8, 2026
- Critical9.8IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 vulnerable to buffer overflow.EPSS 0.3%Oct 8, 2026
- High8.4In Brocade ASCG before 3.5.0, a local unauthorized user on the ASCG VM who can issue a request to the SANnav host network namespace can extract stored management crede…EPSS 0.1%Oct 8, 2026
- Medium5.3An unauthenticated network-based attacker can query specific internal management endpoints on Brocade ASCG versions before 3.5.0 to enumerate the configuration details…EPSS 0.1%Oct 8, 2026
- High7.6An unauthenticated remote attacker can modify the TLS client trust store in Brocade ASCG versions before 3.5.0.EPSS 0.1%Oct 8, 2026
- High8.6A vulnerability in the SupportLink API authentication component of Brocade ASCG versions prior to 3.5.0 allows an attacker to bypass authentication across deployments…EPSS 0.2%Oct 8, 2026
- High7.7When Brocade ASCG before 3.5.0 processes support bundle archives ingested from remote compromised endpoints, the application fails to sanitize path traversal sequences…EPSS 0.3%Oct 8, 2026
- High8.7An authentication flaw exists in the Brocade ASCG administrative management service component.EPSS 0.2%Oct 8, 2026