Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- High7.3Vifm 0.8.1-beta through 0.14.4 reuses a pre-existing IPC FIFO in the shared temporary directory without checking ownership, allowing local users to execute commands as…EPSS 0.1%Oct 13, 2026
- High7.0KDE Dolphin 24.08.0 through 26.08.2 contains an OS command injection vulnerability that allows attackers to execute commands by supplying crafted folder names substituted into theEPSS 1.0%Oct 13, 2026
- Low2.7Shaarli through 0.16.9 contains a server-side request forgery vulnerability that allows authenticated users to make the server request internal addresses by fetching bookmark thumbEPSS 0.3%Oct 13, 2026
- High7.5Claude Code: Plugin Hash Pin Bypass Allows Bypass of Hash PinningEPSS 0.2%Oct 13, 2026
- High8.8Microsoft Security Advisory CVE-2026-96235 - .NET and Visual Studio Remote Code Execution VulnerabilityEPSS 0.7%Oct 13, 2026
- High7.5Microsoft Security Advisory CVE-2026-96232 - .NET and Visual Studio Information Disclosure VulnerabilityEPSS 0.7%Oct 13, 2026
- Medium6.5Microsoft Security Advisory CVE-2026-96229 - .NET and Visual Studio Information Disclosure VulnerabilityEPSS 0.8%Oct 13, 2026
- High8.8Microsoft Security Advisory CVE-2026-85363 - .NET and Visual Studio Remote Code Execution VulnerabilityEPSS 0.7%Oct 13, 2026
- Critical9.4Microsoft Security Advisory CVE-2026-88092 - ASP.NET Core Security Feature Bypass VulnerabilityEPSS 0.8%Oct 13, 2026
- High8.7Qwik is a performance-focused JavaScript framework.EPSS 0.5%Oct 13, 2026
- High8.8Microsoft Security Advisory CVE-2026-96224 - .NET and Visual Studio Remote Code Execution VulnerabilityEPSS 0.7%Oct 13, 2026
- UnknownMalicious code in sysdiagd (PyPI)Oct 13, 2026
- UnknownA vulnerability was found in libsndfile up to 1.2.2.EPSS 0.4%Oct 13, 2026
- Medium6.1The unstructured library provides open-source components for ingesting and pre-processing images and text documents, such as PDFs, HTML, Word docs, and many more.EPSS 0.2%Oct 13, 2026
- Critical9.3TanStack Router is a client-first, server-capable, fully type-safe router and full-stack framework for the web.EPSS 0.5%Oct 13, 2026
- UnknownSecurity update for gimpOct 13, 2026
- High7.5Dio: Cross-origin redirect leaks sensitive request headers inEPSS 0.4%Oct 13, 2026
- High7.1An integer underflow in OpenVPN version 2.7_alpha3 through 2.7.7 on Windows and Android allows remote authenticated servers to cause a denial of service or memory disc…EPSS 0.5%Oct 13, 2026
- High8.8Leantime: Any Authenticated User Can Self-Escalate to Admin via Unauthorized JSON-RPC MethodsEPSS 0.3%Oct 13, 2026
- Medium4.2JupyterLab: Command link trust prompt in JupyterLab can trust a document other than the one clickedEPSS 0.1%Oct 13, 2026
- High7.6OpenVPN 2.7_alpha1 through 2.7.7 allows remote authenticated users to impersonate others via a crafted certificate subject fieldEPSS 0.2%Oct 13, 2026
- UnknownCVE-2026-95117 affecting package ntp 4.2.8p17-3Oct 13, 2026
- High8.8Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.EPSS 0.3%Oct 13, 2026
- High8.8Use after free in V8 in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.EPSS 0.3%Oct 13, 2026
- High8.8Use after free in DOM in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.EPSS 0.3%Oct 13, 2026