Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High8.4An incorrect permission assignment for critical resource vulnerability has been reported to affect Download Station.Oct 15, 2026
- Critical9.3A missing authentication for critical function vulnerability has been reported to affect sMedio DTCP MOVE.Oct 15, 2026
- High7.1A SQL injection vulnerability has been reported to affect Video Station.Oct 15, 2026
- High7.1A SQL injection vulnerability has been reported to affect Video Station.Oct 15, 2026
- High7.2A path traversal vulnerability has been reported to affect Qsync Central.Oct 15, 2026
- High7.1A heap buffer overflow in HPE NonStop NDSREST could corrupt resume-execution address and may potentially redirect execution flow.Oct 15, 2026
- High8.0A directory traversal vulnerability in HPE NonStop Python 3.x could allow attackers to overwrite arbitrary files via a ..Oct 15, 2026
- High8.8In Eclipse Jetty, across various versions of , and , the Jakarta Spec authoritative url-pattern rules for mixed annotation, and defined on the same were not being appl…Oct 15, 2026
- Medium6.9The smartphone application "Vehicle Inspection Certificate Viewer" contains a vulnerability in which sensitive information may be included in data transmitted by the a…Oct 15, 2026
- High8.7In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], a gRPC endpoint does have a configurable per message maximum size in b…Oct 15, 2026
- High8.2In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Eclipse Vert.x MQTT (vertx-mqtt) MqttClient stores every inbound Q…Oct 15, 2026
- Medium5.4"ゲオアプリ" provided by GEO CORPORATION is vulnerable to improper authorization in handler for a custom URL scheme.Oct 15, 2026
- Medium5.1"ゲオアプリ" provided by GEO CORPORATION contains an issue with cleartext storage of sensitive information, which may allow an attacker to obtain the password of a user of…Oct 15, 2026
- High8.7In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the uniqueItems keyword validation uses an O(n²) pairwise comparison l…Oct 15, 2026
- High8.0Steve doesn’t verify a server’s certificate and is susceptible to man-in-the-middle (MitM) attacksOct 15, 2026
- High8.2In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the MySQL message decoder aggregates inbound multi-packet payloads int…Oct 15, 2026
- High8.5Rancher users who can create Projects can gain access to arbitrary projectsOct 15, 2026
- UnknownMalicious code in py-sock2 (PyPI)Oct 15, 2026
- High8.2In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the PostgreSQL message decoder reads the 4-byte message length field f…Oct 15, 2026
- Medium6.3Fleet doesn’t validate a server’s certificate when connecting through SSHOct 15, 2026
- High8.2In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Vert.x MySQL client (vertx-mysql-client) pre-allocates an array fo…Oct 15, 2026
- High8.2In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the binary array decoder in vertx-pg-client (DataTypeCodec.binaryDecod…Oct 15, 2026
- High7.5undici is an HTTP client library for Node.js.Oct 15, 2026
- Critical9.2In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Vert.x DB2 client (vertx-db2-client) contains DRDA protocol handli…Oct 15, 2026
- Medium4.3The Blog2Social – Social Media Auto Post & Scheduler plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 9.1.4.Oct 15, 2026