Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High7.5In Omada Controller MSP mode, the user-confirmation endpoint fails to enforce the required permission check.EPSS 0.4%Oct 14, 2026
- Medium5.3A security vulnerability has been detected in Praat up to 7.0.02.EPSS 0.3%Oct 14, 2026
- High7.4An administrator could retrieve the password reset code for any user and take over the account.EPSS 0.3%Oct 14, 2026
- Critical9.1When the default self-signed certificate is used, an attacker could gain administrative access to the application.EPSS 0.2%Oct 14, 2026
- Critical9.1When the password reset functionality is enabled, and email is configured, an attacker could take over any account using a brute-force attack.EPSS 0.2%Oct 14, 2026
- Medium6.9A weakness has been identified in itsmeravitejak Online-Examination-System up to e6208e630b14657999bbfe4c9912302d2a1e2449.EPSS 0.4%Oct 14, 2026
- Medium5.3A vulnerability was detected in turboderp ExLlamaV2 up to 0.3.2.EPSS 0.4%Oct 14, 2026
- Critical9.8WeGIA: Unauthenticated SQL Injection in cadastro_cobranca.php via "codigo" parameterEPSS 0.5%Oct 14, 2026
- Critical9.8WeGIA: SQL Injection in html/socio/sistema/cadastro_cobranca.phpEPSS 0.5%Oct 14, 2026
- Medium5.9erl_tar:extract/2 loops forever on a GNU sparse member with a trailing holeEPSS 0.2%Oct 14, 2026
- High7.1Junos OS and Junos OS Evolved: A BGP peer causes an rpd crash when labeled-unicast aggregate-label is configuredEPSS 0.3%Oct 14, 2026
- High8.6A flaw was found in the DPDK GSO library.EPSS 0.3%Oct 14, 2026
- High7.1Junos OS and Junos OS Evolved: A specific IS-IS SRv6 packet causes an rpd crash when flexible algorithm is usedEPSS 0.3%Oct 14, 2026
- High7.1Junos OS and Junos OS Evolved: An unauthenticated adjacent attacker causes an rpd crash when LDP is enabledEPSS 0.3%Oct 14, 2026
- High7.1Junos OS and Junos OS Evolved: An crafted LDP message causes an rpd crash when LDP is enabledEPSS 0.3%Oct 14, 2026
- High8.8Junos OS: An ICCP peer causes dot1xd to crash when dot1x synchronization is enabledEPSS 0.3%Oct 14, 2026
- Critical9.2Junos OS: A remote TWAMP peer causes rmopd service disruption when TWAMP-Control is usedEPSS 0.5%Oct 14, 2026
- High7.1Junos OS: An authenticated attacker causes a denial of service when the gRPC extension-service is enabledEPSS 0.4%Oct 14, 2026
- High8.8Junos OS: A crafted OVSDB message crashes vgd and allows remote code executionEPSS 0.4%Oct 14, 2026
- High7.1Junos OS: MX Series: An unauthenticated network attacker causes an rpd crash when HFRR link protection is usedEPSS 0.3%Oct 14, 2026
- Critical9.2Junos OS Evolved: Malformed TCP key-chain traffic causes a kernel panic when BGP or LDP key-chain authentication is usedEPSS 0.7%Oct 14, 2026
- Medium6.6CVE-2026-0321 PAN-OS: Denial of Service (DoS) Vulnerabilities in Network Services (Severity: MEDIUM)EPSS 0.3%Oct 14, 2026
- Medium6.1CVE-2026-0320 PAN-OS: Authenticated Admin Command Injection Vulnerability (Severity: MEDIUM)EPSS 0.8%Oct 14, 2026
- High7.5Incorrect implementation of authentication algorithm vulnerability in Progress MOVEit Transfer (SFTP module).EPSS 0.4%Oct 14, 2026
- High7.2Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Progress MOVEit Transfer (Custom Reports module).EPSS 0.5%Oct 14, 2026