Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High7.0ISPSoft Out-of-Bounds Read VulnerabilityOct 16, 2026
- High7.0ISPSoft Out-of-Bounds Read VulnerabilityOct 16, 2026
- High8.3Frappe HRMS 14.0.0 before 14.38.2 SQL Injection via Missing ValidationOct 16, 2026
- Medium5.3Frappe before 16.33.0 restrict_ip Allowlist Bypass via API Key, OAuth AuthenticationOct 16, 2026
- High7.1Nezha 2.2.5 before 2.3.15 Information Disclosure via DDNS List EndpointOct 16, 2026
- Medium5.3Nezha 1.7.0 before 2.3.15 Cross-Tenant Server-ID Enumeration via getServerConfigOct 16, 2026
- Medium6.3Nezha 2.1.0 before 2.3.15 Host Header Injection via MCP Transfer ToolsOct 16, 2026
- High7.1Nezha 1.0.0 before 2.3.15 Memory Exhaustion via File Manager WebSocketOct 16, 2026
- High7.1Nezha 2.0.13 before 2.3.15 Denial of Service via /api/v1/ws/transfer WebSocketOct 16, 2026
- High8.7FreeRDP before 3.32.0 Heap Out-of-Bounds Write in AVC444 YUV444 CombineOct 16, 2026
- High7.0FreeRDP before 3.32.0 Heap Buffer Overflow via Persistent Cache v2 ParserOct 16, 2026
- High8.7FreeRDP 3.29.0 before 3.32.0 Heap Overflow via audin Apple BackendsOct 16, 2026
- High7.0FreeRDP before 3.32.0 Heap Buffer Overflow via persistent_cache_read_entry_v3Oct 16, 2026
- High8.7FreeRDP 3.0.0 before 3.32.0 Unauthenticated Memory Exhaustion via NLA Frame ParserOct 16, 2026
- High7.1FreeRDP 2.0.0 before 3.32.0 Memory Exhaustion via Static Channel ReassemblyOct 16, 2026
- Low2.3FreeRDP 3.30.0 before 3.32.0 Heap Over-Read via Windows cliprdr FILECONTENTS_SIZEOct 16, 2026
- Medium6.3FreeRDP 3.0.0 before 3.32.0 Out-of-Bounds Read via RAIL Window TitleOct 16, 2026
- Medium6.0FreeRDP from 3.30.0 before 3.32.0 Resource Exhaustion via rdpecam StartStreamsRequestOct 16, 2026
- Medium6.9FreeRDP before 3.32.0 NULL Dereference via Zero-Length WebSocket PingOct 16, 2026
- UnknownMalicious code in xmd-baileys (npm)Oct 16, 2026
- UnknownMalicious code in @developmentyora/yorakids (npm)Oct 16, 2026
- UnknownMalicious code in @developmentyora/baileyss (npm)Oct 16, 2026
- UnknownMalicious code in asistenyorstore (npm)Oct 16, 2026
- UnknownMalicious code in @celestial-community/baileys (npm)Oct 16, 2026
- Medium5.4A potential vulnerability was reported in some Lenovo Tablets that could allow a user with physical access to an unlocked tablet to bypass device protections and execu…Oct 16, 2026