Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium5.3A server-side request forgery (SSRF) vulnerability has been reported to affect Download Station.EPSS 0.4%Oct 15, 2026
- High8.7A path traversal vulnerability has been reported to affect Video Station.EPSS 0.5%Oct 15, 2026
- High8.4An incorrect permission assignment for critical resource vulnerability has been reported to affect Download Station.EPSS 0.1%Oct 15, 2026
- Critical9.3A missing authentication for critical function vulnerability has been reported to affect sMedio DTCP MOVE.EPSS 0.5%Oct 15, 2026
- High7.1A SQL injection vulnerability has been reported to affect Video Station.EPSS 0.4%Oct 15, 2026
- High7.1A SQL injection vulnerability has been reported to affect Video Station.EPSS 0.4%Oct 15, 2026
- High7.2A path traversal vulnerability has been reported to affect Qsync Central.EPSS 0.5%Oct 15, 2026
- High7.1A heap buffer overflow in HPE NonStop NDSREST could corrupt resume-execution address and may potentially redirect execution flow.EPSS 0.1%Oct 15, 2026
- Medium6.9On request the script creates a world-readable debug log in /var/log/sdbootutil.log.EPSS 0.1%Oct 15, 2026
- Medium5.9There are two invocations of to display a QR code for scanning.EPSS 0.1%Oct 15, 2026
- High8.2In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the TDS message decoder in the Vert.x MSSQL client (vertx-mssql-client…EPSS 0.3%Oct 15, 2026
- High7.5A remote attacker may send a specially crafted network packet that causes the affected application to perform an out-of-bounds memory read due to insufficient validati…EPSS 0.5%Oct 15, 2026
- Critical9.3Authentication bypass vulnerability in Stela, versions prior to 1.60.1, due to the use of a cookie named “authProcess” without validating its integrity.EPSS 0.4%Oct 15, 2026
- High8.0A directory traversal vulnerability in HPE NonStop Python 3.x could allow attackers to overwrite arbitrary files via a ..EPSS 0.5%Oct 15, 2026
- High8.8In Eclipse Jetty, across various versions of , and , the Jakarta Spec authoritative url-pattern rules for mixed annotation, and defined on the same were not being appl…EPSS 0.3%Oct 15, 2026
- Medium4.0HPE NonStop EMS Distributor is vulnerable to buffer overflow condition that may result in undesirable behavior.EPSS 0.1%Oct 15, 2026
- High8.2WebCTI service for Slican IPx telephone exchanges stores temporary subscriber password in plaintext.EPSS 0.3%Oct 15, 2026
- High8.7WebCTI service for Slican IPx telephone exchanges is vulnerable to SQL Injection in /webcti/admin_json.php enpoint.EPSS 0.2%Oct 15, 2026
- High8.2Slican telephone exchanges use symmetric encryption for TCP/IP communication.EPSS 0.1%Oct 15, 2026
- High8.2When Jetty's make a request to a server through a forward proxy, the server may reply with a 407 (Proxy Authentication Required).EPSS 0.3%Oct 15, 2026
- High8.2In Eclipse Jetty, HttpClient may receive a redirect of the form: If an attacker is able to control the redirects, then HttpClient matches authentication credentials ag…EPSS 0.3%Oct 15, 2026
- Medium6.9In Eclipse Jetty, and can be configured to forward requests to template URIs such as , where is the request path in context.EPSS 0.3%Oct 15, 2026
- Critical9.4An arbitrary operation vulnerability in GENESIS64, ICONICS Suite, Hyper Historian, AnalytiX, MobileHMI, and MC Works64EPSS 0.2%Oct 15, 2026
- High7.1An authentication bypass vulnerability in GENESIS, GENESIS64, ICONICS Suite, Hyper Historian, AnalytiX, MobileHMI, IoTWorX, MC Works64, GENESIS32 and BizVizEPSS 0.1%Oct 15, 2026
- Medium5.1"Handmade Marketplace App - Creema" provided by CREEMA LTD.EPSS 0.2%Oct 15, 2026