Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownMalicious code in py-wormgpt (PyPI)Open the advisoryOct 15, 2026
- UnknownMalicious code in proxyrubika (PyPI)Open the advisoryOct 15, 2026
- UnknownMalicious code in getpubip (PyPI)Open the advisoryOct 15, 2026
- Medium6.9Unauthenticated authorization bypass in ConstraintSecurityHandler - HTTP method-omission matched by substringCheck if you run itEPSS 0.43%Oct 15, 2026
- Medium6.9In Eclipse Jetty, across various versions of , and , two or more security constraints with the same http-method-omission set, and no url-patterns, are not combined properly per JakCheck if you run itEPSS 0.40%Oct 15, 2026
- Medium5.6Eclipse Jetty's retains authentication credentials in a serializable object.Check if you run itEPSS 0.13%Oct 15, 2026
- Critical9.3An unauthenticated client may access certain protected resources when using EthereumAuthenticator if the request path contains the configured login path.Check if you run itEPSS 0.54%Oct 15, 2026
- Medium6.3A cross-site scripting (XSS) vulnerability has been reported to affect QuFTP Service.Check if you run itEPSS 0.28%Oct 15, 2026
- High8.9A missing authentication for critical function vulnerability has been reported to affect HybridDesk Station.Check if you run itEPSS 0.24%Oct 15, 2026
- Medium4.8A cross-site scripting (XSS) vulnerability has been reported to affect Notes Station 3.Check if you run itEPSS 0.29%Oct 15, 2026
- High8.4An improper isolation or compartmentalization vulnerability has been reported to affect Notes Station 3.Check if you run itEPSS 0.14%Oct 15, 2026
- High8.5An incorrect permission assignment for critical resource vulnerability has been reported to affect Notes Station 3.Check if you run itEPSS 0.12%Oct 15, 2026
- High8.7An improper link resolution before file access ('link following') vulnerability has been reported to affect Virtualization Station.Check if you run itEPSS 0.47%Oct 15, 2026
- Critical9.4An unix symbolic link (symlink) following vulnerability has been reported to affect QuMagie.Check if you run itEPSS 0.49%Oct 15, 2026
- High8.7An authorization bypass through user-controlled key vulnerability has been reported to affect Video Station.Check if you run itEPSS 0.41%Oct 15, 2026
- High8.6A relative path traversal vulnerability has been reported to affect QuMagie.Check if you run itEPSS 0.54%Oct 15, 2026
- Medium5.3An unix symbolic link (symlink) following vulnerability has been reported to affect Qsync Central.Check if you run itEPSS 0.54%Oct 15, 2026
- Medium5.3A server-side request forgery (SSRF) vulnerability has been reported to affect Download Station.Check if you run itEPSS 0.43%Oct 15, 2026
- High8.7A path traversal vulnerability has been reported to affect Video Station.Check if you run itEPSS 0.49%Oct 15, 2026
- High8.4An incorrect permission assignment for critical resource vulnerability has been reported to affect Download Station.Check if you run itEPSS 0.13%Oct 15, 2026
- Critical9.3A missing authentication for critical function vulnerability has been reported to affect sMedio DTCP MOVE.Check if you run itEPSS 0.53%Oct 15, 2026
- High7.1A SQL injection vulnerability has been reported to affect Video Station.Check if you run itEPSS 0.51%Oct 15, 2026
- High7.1A SQL injection vulnerability has been reported to affect Video Station.Check if you run itEPSS 0.51%Oct 15, 2026
- High7.2A path traversal vulnerability has been reported to affect Qsync Central.Check if you run itEPSS 0.54%Oct 15, 2026
- Critical9.3Authentication bypass vulnerability in Stela, versions prior to 1.60.1, due to the use of a cookie named “authProcess” without validating its integrity.Check if you run itEPSS 0.40%Oct 15, 2026