Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium6.4Post and Page Builder by BoldGrid <= 1.27.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'data-label' AttributeEPSS 0.2%Oct 15, 2026
- Medium5.3A flaw was found in OpenSSH.EPSS 0.3%Oct 15, 2026
- Medium5.4A flaw was found in OpenSSH.EPSS 0.2%Oct 15, 2026
- Medium6.5A flaw was found in OpenSSH.EPSS 0.3%Oct 15, 2026
- High7.0Telegram rlottie Numeric Truncation Remote Code Execution Vulnerability.Oct 15, 2026
- Medium5.7A security vulnerability in HPE NonStop EXPAND may result in out-of-bounds memory read.EPSS 0.1%Oct 15, 2026
- Medium4.7A security vulnerability in HPE NonStop EXPAND may result in out-of-bounds memory read.EPSS 0.1%Oct 15, 2026
- High7.1A security vulnerability in HPE NonStop EXPAND may cause out-of-bounds memory read resulting in buffer overflow.EPSS 0.2%Oct 15, 2026
- Medium6.4Kirki <= 6.2.0 - Authenticated (Custom+) Stored Cross-Site Scripting via Page Builder Text ContentEPSS 0.2%Oct 15, 2026
- Critical9.810Web Booster <= 2.34.10 - Unauthenticated Arbitrary File Upload via 'page_id' ParameterEPSS 0.9%Oct 15, 2026
- High7.3PhastPress <= 3.10 - Unauthenticated Server-Side Request Forgery via 'src' ParameterEPSS 0.2%Oct 15, 2026
- Medium6.4A security vulnerability in HPE NonStop EXPAND may result in out-of-bounds memory read/write operationsEPSS 0.1%Oct 15, 2026
- High8.6Znuny through 7.3.6 constructs a ticket-search database query by directly concatenating user-supplied input into the SQL statement.EPSS 0.3%Oct 15, 2026
- Critical9.5In Znuny through 7.3.6, an attacker can bypass specific standard login procedures and gain unauthorized access to sensitive system functions by manipulating a specific…EPSS 0.2%Oct 15, 2026
- High7.1In DragonFly BSD through 6.4.2 before 4bb22ff, the ARP input handlers arpintr() and in_arpinput() (sys/netinet/if_ether.c) do not validate the hardware address length…EPSS 0.2%Oct 15, 2026
- Medium5.0Wheels CLI through 4.1.0 does not verify that the local development server answering its HTTP requests belongs to the current project.EPSS 0.1%Oct 15, 2026
- High8.8Netgate pfSense FRR package (pfSense-pkg-frr) 2.0.2_1 and source revision 2.1.2_1 contain an OS command injection vulnerability in the FRR status filter.EPSS 6.1%Oct 15, 2026
- High7.5A stack-based buffer overflow vulnerability in HPE NonStop TELSERV can cause memory corruption that may result in DoS.EPSS 0.3%Oct 15, 2026
- Medium5.9A buffer overflow vulnerability in HPE NonStop TELSERV can cause memory corruption and DoS.EPSS 0.2%Oct 15, 2026
- High7.5Backdrop CMS Core 1.35.x before 1.35.2 and 1.34.x before 1.34.6 mishandles tokens.EPSS 0.2%Oct 15, 2026
- Medium5.3HPE NonStop TCP/IP UTILITIES - Denial of Service vulnerabilityEPSS 0.2%Oct 15, 2026
- High8.7MoviePilot 3.1.5 Command Injection via ExecuteCommandToolEPSS 1.0%Oct 15, 2026
- High8.8XXL-JOB 3.5.0-SNAPSHOT and earlier contains a Cross-Site Request Forgery (CSRF) vulnerability in the user management controller (JobUserController).Oct 15, 2026
- High8.8ELADMIN v2.7 and earlier contains an improper access control vulnerability in the user-management endpoint PUT /api/users/resetPwd of me.zhengjie.modules.system.rest.U…Oct 15, 2026
- Medium6.3qs.stringify with arrayFormat comma throws TypeError on array elements that cannot be coerced to a stringEPSS 0.3%Oct 14, 2026