Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Low2.3A NULL pointer dereference vulnerability has been reported to affect Qsync Central.EPSS 0.3%Oct 15, 2026
- Low2.3A NULL pointer dereference vulnerability has been reported to affect Qsync Central.EPSS 0.3%Oct 15, 2026
- High7.1A security vulnerability in HPE NonStop TNS/X Native Inspect may cause corruption of address and potentially redirect execution flow.EPSS 0.1%Oct 15, 2026
- Medium4.4Improper validation of array index vulnerability in Samsung Open Source Vyond allows Input Data Manipulation.EPSS 0.1%Oct 15, 2026
- Medium4.4Uncaught exception vulnerability in Samsung Open Source Vyond allows Input Data Manipulation.EPSS 0.1%Oct 15, 2026
- High8.8The Email Customizer for WooCommerce (Pro) plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 3.9.5.EPSS 0.5%Oct 15, 2026
- Medium4.3Elementor Website Builder <= 4.2.3 - Missing Authorization to Authenticated (Contributor+) Sensitive Information Exposure via 'is_public' and 'keys_conversion_map' ParametersEPSS 0.3%Oct 15, 2026
- Medium5.3Rede Itaú for WooCommerce 3.7.1 - 5.5.2 - Unauthenticated Order Status Manipulation via maxiPago Debit WebhookEPSS 0.1%Oct 15, 2026
- Medium5.3Rede Itaú for WooCommerce < 5.5.3 - Unauthenticated Order Status Manipulation via 3DS Failure WebhookEPSS 0.1%Oct 15, 2026
- Medium5.3Cardinity Payment Gateway for WooCommerce 3.2.6 - 3.4.1 - Unauthenticated Arbitrary Order Payment Forgery via Empty-Default Project SecretEPSS 0.1%Oct 15, 2026
- High8.2A security vulnerability in HPE NonStop SOAP 4.0 may cause memory corruption resulting in a system down.EPSS 0.2%Oct 15, 2026
- Medium6.3A security vulnerability in HPE NonStop Kernel may allow user space access to privileged or unmapped data.EPSS 0.1%Oct 15, 2026
- Unknownkqueue_fork_copy_knote() indexed into the child's file descriptor table using a knote's file descriptor number without a bounds check.EPSS 0.1%Oct 15, 2026
- UnknownMemory safety bugs in kqueue copy-on-fork implementationEPSS 0.1%Oct 15, 2026
- UnknownWhen semop(2) blocks waiting for a semaphore condition, it releases the per-set lock and sleeps.EPSS 0.2%Oct 15, 2026
- High7.5Tutor LMS < 4.1.1 - Unauthenticated Tutor Page Force-Publish and Content OverwriteEPSS 0.1%Oct 15, 2026
- High7.1Document Gallery <= 5.1.1 - Reflected XSS via data-shortcode AttributeEPSS 0.2%Oct 15, 2026
- Critical9.8User Rights Access Manager <= 1.1.3 - Unauthenticated Privilege Escalation via AJAX Registration HandlerEPSS 0.1%Oct 15, 2026
- Medium6.5Spin Wheel < 2.2.1 - Unauthenticated Coupon Code Disclosure via Forged Spin ResultEPSS 0.1%Oct 15, 2026
- Medium4.2Easy HTTPS Redirection (SSL) < 2.0.2 - Subscriber+ Scan Result Disclosure and Site-Wide URL RewriteEPSS 0.1%Oct 15, 2026
- Medium5.3eaSYNC < 1.3.31 - Unauthenticated Cancellation Request Creation and Email Template UpdateEPSS 0.1%Oct 15, 2026
- Medium6.4VK Blocks <= 1.126.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Group Block 'linkToPost' FeatureEPSS 0.2%Oct 15, 2026
- High7.5Link Library <= 7.9.2 - Unauthenticated SQL Injection via 'link_url' ParameterEPSS 0.4%Oct 15, 2026
- Medium6.1Tracking Code Manager <= 2.6.0 - Reflected Cross-Site Scripting via 'TCM_ErrorMessages'EPSS 0.2%Oct 15, 2026
- High7.2Mang Board WP <= 2.4.0 - Unauthenticated Stored Cross-Site Scripting via 'data_type' ParameterEPSS 0.2%Oct 15, 2026