Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium5.0Wheels CLI through 4.1.0 does not verify that the local development server answering its HTTP requests belongs to the current project.Oct 15, 2026
- High8.8Netgate pfSense FRR package (pfSense-pkg-frr) 2.0.2_1 and source revision 2.1.2_1 contain an OS command injection vulnerability in the FRR status filter.Oct 15, 2026
- High7.5A stack-based buffer overflow vulnerability in HPE NonStop TELSERV can cause memory corruption that may result in DoS.Oct 15, 2026
- Medium5.9A buffer overflow vulnerability in HPE NonStop TELSERV can cause memory corruption and DoS.Oct 15, 2026
- High7.5Backdrop CMS Core 1.35.x before 1.35.2 and 1.34.x before 1.34.6 mishandles tokens.Oct 15, 2026
- High7.6A vulnerability in HPE NonStop QIOMON allows an out-of-bounds write that can corrupt buffer data.Oct 15, 2026
- High8.7A vulnerability in HPE NonStop CIPSAM allows an out-of-bounds write that can corrupt buffer data.Oct 15, 2026
- High8.7IntentKit 2.6.3 Executor Tool Authorization Bypass via ToolNodeOct 15, 2026
- High7.5A vulnerability in the finger daemon of HPE NonStop TCP/IP UTILITIES could allow an unauthenticated remote attacker to cause a denial of service.Oct 15, 2026
- High8.7Ellucian WebAdvisor 3.2 Unauthenticated XXE InjectionOct 15, 2026
- Medium5.3HPE NonStop TCP/IP UTILITIES - Denial of Service vulnerabilityOct 15, 2026
- High8.7MoviePilot 3.1.5 Command Injection via ExecuteCommandToolOct 15, 2026
- High7.5A security vulnerability in HPE NonStop SNMP Trap Multiplexer may cause memory corruptionOct 15, 2026
- Medium5.3ApostropheCMS before 4.33.0 allows authentication bypass for REST API page reading, as demonstrated by a /api/v1/@apostrophecms/page?all=1 call.Oct 15, 2026
- High8.7SODOLA SL902-SWTGW124AS Buffer Overflow DoS via Multipart Boundary ParserOct 15, 2026
- Low2.4A vulnerability was detected in ggml-org whisper.cpp up to 1.9.4.Oct 15, 2026
- Medium5.3A security vulnerability has been detected in sgl-project SGLang up to 0.5.19.Oct 14, 2026
- High7.7n8n before 2.41.4 and 2.42.x before 2.42.1 contains a prototype pollution vulnerability in the MCP workflow-validation tool, whose interpreter evaluates caller-supplie…Oct 14, 2026
- Medium6.1n8n before 2.41.4 and 2.42.0 contains an authorization bypass in the agent chat resume endpoint, which accepts a run identifier from the request body without verifying…Oct 14, 2026
- High7.0n8n before 2.41.4 and 2.42.x before 2.42.1 contains an SQL injection vulnerability in version 1 of the Microsoft SQL node, which substitutes Query field expression val…Oct 14, 2026
- High7.1FreeRDP 3.3.0 before 3.32.0, when built with WINPR_UTILS_IMAGE_JPEG=ON, has a heap-based out-of-bounds write in winpr_convert_from_jpeg because grayscale JPEG buffers…Oct 14, 2026
- High8.7FreeRDP shadow server from 3.0.0 before 3.32.0 dispatches input PDUs during the Confirm Active state before authentication, allowing unauthenticated attackers to injec…Oct 14, 2026
- Medium6.1FreeRDP 2.0.0 before 3.32.0, when built with WITH_LAME=ON and WITH_DSP_FFMPEG=OFF, has a heap-based buffer overflow in freerdp_dsp_decode_mp3 because the right-channel…Oct 14, 2026
- High7.1FreeRDP from 3.0.0 before 3.32.0 contains an infinite loop vulnerability in http_response_recv() that allows malicious gateways to exhaust client CPU via crafted Conte…Oct 14, 2026
- Medium6.3FreeRDP 3.0.0 before 3.32.0 allows HTTP header injection in its proxy because a lone LF in the target portion of a routing token (Cookie: msts=) is not rejected and is…Oct 14, 2026