Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- High8.1A flaw was found in FreeIPA.EPSS 0.4%Sep 9, 2026
- High8.1ZTNA Portal Improper Certificate ValidationEPSS 0.3%Sep 8, 2026
- Low2.7Null Pointer Dereference in Log ReportEPSS 1.1%Sep 8, 2026
- High8.1Freeipa: idm: freeipa: idp-add eval() reachable before authorization check allows environment disclosure and denial of serviceEPSS 0.9%Sep 7, 2026
- Critical9.8A flaw was found in FreeIPA.EPSS 1.2%Sep 7, 2026
- High8.7MOOS core-moos through 10.4.0 MOOSDB Accept Loop Denial of ServiceEPSS 0.6%Sep 3, 2026
- High8.7MOOS core-moos through 10.4.0 MOOSDB Denial of Service via Unbounded Packet AllocationEPSS 0.8%Sep 3, 2026
- High8.7MOOS core-moos through 10.4.0 fails to validate that serialized string lengths are non-negative in CMOOSMsg::operator>>.EPSS 0.7%Sep 3, 2026
- Critical9.3MOOS core-moos through 10.4.0 MOOSDB Pre-Authentication Heap Overflow via Negative Packet LengthEPSS 1.0%Sep 3, 2026
- High8.5MOOS-IvP through 24.8.1 alogsplit Command Injection via Input PathnameEPSS 0.5%Sep 3, 2026
- Critical9.3MOOS-IvP through 24.8.1 Out-of-Bounds Write via Unvalidated IvP Payload CountsEPSS 1.1%Sep 3, 2026
- Critical9.3MOOS-IvP through 24.8.1 contains multiple buffer overflow vulnerabilities in IvP function string decoders that trust attacker-controlled length fields without validation.EPSS 1.4%Sep 3, 2026
- High8.7MOOS essential-moos through 10.0.1 pMOOSBridge Heap Corruption via Negative UDP LengthEPSS 2.1%Sep 3, 2026
- Critical9.3MOOS-IvP through 24.8.1 uFldNodeBroker Unauthenticated Shore Route EnrollmentEPSS 0.4%Sep 3, 2026
- Critical9.3MOOS-IvP uFldShoreBroker through 24.8.1 fails to verify node ping authenticity before creating outbound bridge routes.EPSS 0.4%Sep 3, 2026
- High8.8MOOS core-moos through 10.4.0 MOOSDB Message Source Spoofing via Wire IdentityEPSS 0.5%Sep 3, 2026
- High8.7MOOS essential-moos through version 10.0.1 contains an unauthenticated UDP packet injection vulnerability in pMOOSBridge when configured with UDPListen.EPSS 3.4%Sep 3, 2026
- Medium5.0Dell SmartFabric OS10 Software, versions prior to 10.5.6.14, contains an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability.EPSS 0.8%Sep 3, 2026
- Medium5.0Dell SmartFabric OS10 Software, versions prior to 10.5.6.14, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability.EPSS 0.8%Sep 3, 2026
- Medium6.5Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain an Incorrect Authorization vulnerability in the REST API.EPSS 0.4%Sep 3, 2026
- UnknownMalicious code in babel-polyfill-plugin-corejs2 (npm)Aug 24, 2026
- Critical9.6A flaw was found in FreeIPA.EPSS 0.4%Aug 20, 2026
- High7.5A flaw was found in FreeIPA.EPSS 0.5%Aug 20, 2026
- High8.7A privilege escalation flaw was found in FreeIPA.EPSS 0.6%Aug 20, 2026
- High7.5A flaw was found in FreeIPA.EPSS 0.5%Aug 20, 2026