Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium5.3A NULL pointer dereference vulnerability has been reported to affect File Station 5.EPSS 0.3%Oct 15, 2026
- Medium5.3A NULL pointer dereference vulnerability has been reported to affect File Station 5.EPSS 0.3%Oct 15, 2026
- Medium5.3A NULL pointer dereference vulnerability has been reported to affect File Station 5.EPSS 0.3%Oct 15, 2026
- Medium5.3A path traversal vulnerability has been reported to affect Qsync Central.EPSS 0.4%Oct 15, 2026
- UnknownThe IPv6 UDP send path for unconnected sockets did not apply the jail policy of rewriting a loopback destination address to the jail's primary IPv6 address.EPSS 0.2%Oct 15, 2026
- Medium5.3An observable timing discrepancy vulnerability has been reported to affect QuRouter.EPSS 0.2%Oct 15, 2026
- Medium6.2A cross-site scripting (XSS) vulnerability has been reported to affect Network & Virtual Switch.EPSS 0.4%Oct 15, 2026
- High7.5A time-of-check time-of-use (toctou) race condition vulnerability has been reported to affect QuRouter.EPSS 0.2%Oct 15, 2026
- Medium4.6An external control of system or configuration setting vulnerability has been reported to affect QuRouter.EPSS 0.1%Oct 15, 2026
- High7.7A path traversal vulnerability has been reported to affect Video Station.EPSS 0.4%Oct 15, 2026
- High7.7A path traversal vulnerability has been reported to affect Video Station.EPSS 0.4%Oct 15, 2026
- Low2.3A buffer copy without checking size of input vulnerability has been reported to affect Qsync Central.EPSS 0.3%Oct 15, 2026
- Low2.3A NULL pointer dereference vulnerability has been reported to affect Qsync Central.EPSS 0.3%Oct 15, 2026
- Low2.3A NULL pointer dereference vulnerability has been reported to affect Qsync Central.EPSS 0.3%Oct 15, 2026
- High7.1A security vulnerability in HPE NonStop TNS/X Native Inspect may cause corruption of address and potentially redirect execution flow.EPSS 0.1%Oct 15, 2026
- Medium6.5TLS 1.3 embeds the actual record type as the last non-zero byte of the decrypted payload, optionally followed by zero padding.EPSS 0.2%Oct 15, 2026
- Medium4.4Improper validation of array index vulnerability in Samsung Open Source Vyond allows Input Data Manipulation.EPSS 0.1%Oct 15, 2026
- Medium4.4Uncaught exception vulnerability in Samsung Open Source Vyond allows Input Data Manipulation.EPSS 0.1%Oct 15, 2026
- UnknownSCM_RIGHTS file descriptor passing did not preserve FD_RESOLVE_BENEATH when a descriptor was transferred.EPSS 0.2%Oct 15, 2026
- Unknownrenameat(2) did not enforce FD_RESOLVE_BENEATH on its directory arguments.EPSS 0.2%Oct 15, 2026
- UnknownMultiple jail filesystem root escapesEPSS 0.2%Oct 15, 2026
- High8.8The Email Customizer for WooCommerce (Pro) plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 3.9.5.EPSS 0.5%Oct 15, 2026
- Medium4.3Elementor Website Builder <= 4.2.3 - Missing Authorization to Authenticated (Contributor+) Sensitive Information Exposure via 'is_public' and 'keys_conversion_map' ParametersEPSS 0.3%Oct 15, 2026
- Medium5.3Rede Itaú for WooCommerce 3.7.1 - 5.5.2 - Unauthenticated Order Status Manipulation via maxiPago Debit WebhookEPSS 0.1%Oct 15, 2026
- Medium5.3Rede Itaú for WooCommerce < 5.5.3 - Unauthenticated Order Status Manipulation via 3DS Failure WebhookEPSS 0.1%Oct 15, 2026