Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium5.1"ゲオアプリ" provided by GEO CORPORATION contains an issue with cleartext storage of sensitive information, which may allow an attacker to obtain the password of a user of…EPSS 0.1%Oct 15, 2026
- High8.7In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the uniqueItems keyword validation uses an O(n²) pairwise comparison l…EPSS 0.4%Oct 15, 2026
- High8.0Steve doesn’t verify a server’s certificate and is susceptible to man-in-the-middle (MitM) attacksEPSS 0.3%Oct 15, 2026
- High8.2In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the MySQL message decoder aggregates inbound multi-packet payloads int…EPSS 0.3%Oct 15, 2026
- High8.5Rancher users who can create Projects can gain access to arbitrary projectsEPSS 0.4%Oct 15, 2026
- UnknownMalicious code in py-sock2 (PyPI)Oct 15, 2026
- High8.2In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the PostgreSQL message decoder reads the 4-byte message length field f…EPSS 0.3%Oct 15, 2026
- Medium6.3Fleet doesn’t validate a server’s certificate when connecting through SSHEPSS 0.2%Oct 15, 2026
- High8.2In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Vert.x MySQL client (vertx-mysql-client) pre-allocates an array fo…EPSS 0.3%Oct 15, 2026
- High8.2In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the binary array decoder in vertx-pg-client (DataTypeCodec.binaryDecod…EPSS 0.3%Oct 15, 2026
- High7.5undici is an HTTP client library for Node.js.EPSS 0.3%Oct 15, 2026
- Critical9.2In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Vert.x DB2 client (vertx-db2-client) contains DRDA protocol handli…EPSS 0.4%Oct 15, 2026
- UnknownMalicious code in tailwindcss-uniform (npm)Oct 15, 2026
- Medium4.3The Blog2Social – Social Media Auto Post & Scheduler plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 9.1.4.EPSS 0.3%Oct 15, 2026
- High8.2In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Vert.x Redis client RESP parser pre-allocates arrays to a length d…EPSS 0.2%Oct 15, 2026
- High8.7In Eclipse Vert.x versions [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the HTTP proxy provides a body transformer interceptor that relies on a max buffered byte…EPSS 0.3%Oct 15, 2026
- High8.7In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the WebSocket implementation does not define a maximum number of bytes…EPSS 0.3%Oct 15, 2026
- High7.0The framebuffer device model's maximum resolution constants were duplicated between the framebuffer and RFB modules and had gotten out of sync.EPSS 0.2%Oct 15, 2026
- UnknownThe HDA audio device model did not check for zero-length Buffer Descriptor List (BDL) entries when starting a stream.EPSS 0.2%Oct 15, 2026
- UnknownThe xHCI (USB 3) device model did not validate or save the event ring size provided by the guest.EPSS 0.2%Oct 15, 2026
- UnknownWhen an audio channel's buffer needs to be resized, the sound(4) driver checks that the buffer is not memory-mapped and then drops the channel lock to allocate a new buffer.EPSS 0.1%Oct 15, 2026
- UnknownWhen the PCM sample array needs to grow, the RACK stack doubles a 16-bit allocation counter.EPSS 0.2%Oct 15, 2026
- Medium6.0Improper certificate validation in Cato Client tunnel handshakeEPSS 0.1%Oct 15, 2026
- High8.7A path traversal vulnerability has been reported to affect QcalAgent.EPSS 0.4%Oct 15, 2026
- High8.7A relative path traversal vulnerability has been reported to affect Download Station.EPSS 0.4%Oct 15, 2026