Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium5.5An issue in Justson agentweb-core v5.1.6-androidx and earlier allows a local attacker to obtain sensitive information and launch non-exported host application componen…Check if you run itEPSS 0.11%Oct 15, 2026
- High7.5An issue in lottie-android 6.7.1 and earlier (and master) allows a remote attacker to cause a denial of service via a crafted Lottie animation JSON containing a cyclic…Check if you run itEPSS 0.42%Oct 15, 2026
- Medium4.3EspoCRM is an open source customer relationship management application.Check if you run itEPSS 0.34%Oct 15, 2026
- Low3.5EspoCRM is an open source customer relationship management application.Check if you run itEPSS 0.20%Oct 15, 2026
- Critical9.3A vulnerability has been found in Wavlink WL-WN530BE2-A up to M30BE2_V250604.Check if you run itEPSS 3.46%Oct 15, 2026
- UnknownIn the Eclipse Adoptium website (adoptium.net), in every deployment built from commit 0b24ea1 (2025-06-18) up to the fix in commit cbb53cf (2026-09-24), the post-downl…Check if you run itEPSS 0.16%Oct 15, 2026
- High8.4Path Traversal (CWE-22) in the execute_obj function of the archive object viewer (peach.pas) in PeaZip 11.2.0 and earlier on Windows allows an attacker who convinces a…Check if you run itEPSS 0.16%Oct 15, 2026
- UnknownSecurity update for opensshOpen the advisoryOct 15, 2026
- High7.5In versions till , The default rate-limit key resolver, , derives the per-client bucket key from the leftmost element of the request header.Check if you run itEPSS 0.34%Oct 15, 2026
- UnknownIn versions till , The default rate-limit key resolver, , derives the per-client bucket key from the leftmost element of the request header.Check if you run itEPSS 0.27%Oct 15, 2026
- UnknownCVE-2026-63252 is listed by Eclipse Foundation Eclipse Milo.Check if you run itEPSS 0.58%Oct 15, 2026
- UnknownCVE-2026-63248 is listed by Eclipse Foundation Eclipse Milo.Check if you run itEPSS 0.26%Oct 15, 2026
- UnknownCVE-2026-62927 is listed by Eclipse Foundation Eclipse Milo.Check if you run itEPSS 0.42%Oct 15, 2026
- UnknownCVE-2026-61387 is listed by Eclipse Foundation Eclipse Milo.Check if you run itEPSS 0.62%Oct 15, 2026
- UnknownCVE-2026-60007 is listed by Eclipse Foundation Eclipse Milo.Check if you run itEPSS 0.55%Oct 15, 2026
- UnknownCVE-2026-58080 is listed by Eclipse Foundation Eclipse Milo.Check if you run itEPSS 0.38%Oct 15, 2026
- Medium6.5In versions till , The default rate-limit key resolver, , derives the per-client bucket key from the leftmost element of the request header.Check if you run itEPSS 0.19%Oct 15, 2026
- Medium6.9Unauthenticated authorization bypass in ConstraintSecurityHandler - HTTP method-omission matched by substringCheck if you run itEPSS 0.43%Oct 15, 2026
- Medium6.9In Eclipse Jetty, across various versions of , and , two or more security constraints with the same http-method-omission set, and no url-patterns, are not combined properly per JakCheck if you run itEPSS 0.40%Oct 15, 2026
- Medium5.6Eclipse Jetty's retains authentication credentials in a serializable object.Check if you run itEPSS 0.13%Oct 15, 2026
- Critical9.3An unauthenticated client may access certain protected resources when using EthereumAuthenticator if the request path contains the configured login path.Check if you run itEPSS 0.54%Oct 15, 2026
- High8.8Jetty proxy blacklist performs case-sensitive matching of case-insensitive DNS hostnamesCheck if you run itEPSS 0.32%Oct 15, 2026
- High8.2In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the TDS message decoder in the Vert.x MSSQL client (vertx-mssql-client…Check if you run itEPSS 0.32%Oct 15, 2026
- Critical9.3Authentication bypass vulnerability in Stela, versions prior to 1.60.1, due to the use of a cookie named “authProcess” without validating its integrity.Check if you run itEPSS 0.40%Oct 15, 2026
- High8.8In Eclipse Jetty, across various versions of , and , the Jakarta Spec authoritative url-pattern rules for mixed annotation, and defined on the same were not being applied if the haCheck if you run itEPSS 0.34%Oct 15, 2026