Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High7.1Nezha 1.0.0 before 2.3.15 Memory Exhaustion via File Manager WebSocketEPSS 0.3%Oct 16, 2026
- High7.1Nezha 2.0.13 before 2.3.15 Denial of Service via /api/v1/ws/transfer WebSocketEPSS 0.3%Oct 16, 2026
- High8.7FreeRDP before 3.32.0 Heap Out-of-Bounds Write in AVC444 YUV444 CombineEPSS 0.3%Oct 16, 2026
- High7.0FreeRDP before 3.32.0 Heap Buffer Overflow via Persistent Cache v2 ParserEPSS 0.1%Oct 16, 2026
- High8.7FreeRDP 3.29.0 before 3.32.0 Heap Overflow via audin Apple BackendsEPSS 0.3%Oct 16, 2026
- High7.0FreeRDP before 3.32.0 Heap Buffer Overflow via persistent_cache_read_entry_v3EPSS 0.1%Oct 16, 2026
- High8.7FreeRDP 3.0.0 before 3.32.0 Unauthenticated Memory Exhaustion via NLA Frame ParserEPSS 0.3%Oct 16, 2026
- High7.1FreeRDP 2.0.0 before 3.32.0 Memory Exhaustion via Static Channel ReassemblyEPSS 0.2%Oct 16, 2026
- Low2.3FreeRDP 3.30.0 before 3.32.0 Heap Over-Read via Windows cliprdr FILECONTENTS_SIZEEPSS 0.1%Oct 16, 2026
- Medium6.3FreeRDP 3.0.0 before 3.32.0 Out-of-Bounds Read via RAIL Window TitleEPSS 0.2%Oct 16, 2026
- Medium6.0FreeRDP from 3.30.0 before 3.32.0 Resource Exhaustion via rdpecam StartStreamsRequestEPSS 0.2%Oct 16, 2026
- Medium6.9FreeRDP before 3.32.0 NULL Dereference via Zero-Length WebSocket PingEPSS 0.2%Oct 16, 2026
- Medium6.9A vulnerability was determined in bitcoinj up to 0.17.EPSS 0.3%Oct 16, 2026
- Medium6.0A potential vulnerability was reported in Lenovo Smart Camera C33, distributed exclusively in the Chinese market, that could allow an unauthorized remote user to discl…EPSS 0.2%Oct 15, 2026
- Medium5.9A potential improper certificate validation vulnerability was reported in Lenovo Smart Camera C33, distributed exclusively in the Chinese market, that could allow an a…EPSS 0.1%Oct 15, 2026
- High7.1BISHENG through 3.0.0-beta4 contains an insecure direct object reference vulnerability that allows authenticated low-privileged users to read other users' parsed docum…EPSS 0.2%Oct 15, 2026
- High7.1CRMEB 5.6.1 through 6.0.0 contains an insecure direct object reference vulnerability that allows authenticated storefront users to read and claim other users' orders v…EPSS 0.2%Oct 15, 2026
- Medium5.3SendPortal sendportal-core through 4.0.1 contains an authorization bypass vulnerability that allows authenticated workspace members to attach subscribers to other work…EPSS 0.3%Oct 15, 2026
- Critical9.1MacCMS v10 through 2026.1000.4056 does not limit attempts on the six-digit password recovery code, allowing unauthenticated attackers to take over member accounts.EPSS 0.3%Oct 15, 2026
- Medium5.3zhontai Admin.Core through 10.1.0 contains an authorization bypass vulnerability that allows authenticated users to ignore department DataScope restrictions by supplyi…EPSS 0.3%Oct 15, 2026
- Low2.3crmeb_java through 3.1 contains an authorization bypass vulnerability that allows authenticated members to read other members' orders by supplying their order numbers.EPSS 0.3%Oct 15, 2026
- Medium5.3Peppermint through 0.5.5 contains a missing authorization vulnerability that allows any authenticated user to create time entries and attachments as other users by sup…EPSS 0.2%Oct 15, 2026
- High8.7ThinkCMF through 8.0.1 contains an incorrect authorization vulnerability in RestAdminBaseController that allows restricted backend administrators to call every admin R…EPSS 0.4%Oct 15, 2026
- Low2.3metasfresh through 5.175 contains a missing record-level authorization vulnerability in BoardRestController that allows authenticated low-privilege users to bypass rol…EPSS 0.2%Oct 15, 2026
- Low2.3Papermark through 0.22.0 contains a missing authorization vulnerability in the data room viewer group API that allows authenticated users to delete other teams' viewer…EPSS 0.3%Oct 15, 2026