Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium5.3Frappe before 16.33.0 restrict_ip Allowlist Bypass via API Key, OAuth AuthenticationOct 16, 2026
- High7.1Nezha 2.2.5 before 2.3.15 Information Disclosure via DDNS List EndpointOct 16, 2026
- Medium5.3Nezha 1.7.0 before 2.3.15 Cross-Tenant Server-ID Enumeration via getServerConfigOct 16, 2026
- Medium6.3Nezha 2.1.0 before 2.3.15 Host Header Injection via MCP Transfer ToolsOct 16, 2026
- High7.1Nezha 1.0.0 before 2.3.15 Memory Exhaustion via File Manager WebSocketOct 16, 2026
- High7.1Nezha 2.0.13 before 2.3.15 Denial of Service via /api/v1/ws/transfer WebSocketOct 16, 2026
- High8.7FreeRDP before 3.32.0 Heap Out-of-Bounds Write in AVC444 YUV444 CombineOct 16, 2026
- High7.0FreeRDP before 3.32.0 Heap Buffer Overflow via Persistent Cache v2 ParserOct 16, 2026
- High8.7FreeRDP 3.29.0 before 3.32.0 Heap Overflow via audin Apple BackendsOct 16, 2026
- High7.0FreeRDP before 3.32.0 Heap Buffer Overflow via persistent_cache_read_entry_v3Oct 16, 2026
- High8.7FreeRDP 3.0.0 before 3.32.0 Unauthenticated Memory Exhaustion via NLA Frame ParserOct 16, 2026
- High7.1FreeRDP 2.0.0 before 3.32.0 Memory Exhaustion via Static Channel ReassemblyOct 16, 2026
- Low2.3FreeRDP 3.30.0 before 3.32.0 Heap Over-Read via Windows cliprdr FILECONTENTS_SIZEOct 16, 2026
- Medium6.3FreeRDP 3.0.0 before 3.32.0 Out-of-Bounds Read via RAIL Window TitleOct 16, 2026
- Medium6.0FreeRDP from 3.30.0 before 3.32.0 Resource Exhaustion via rdpecam StartStreamsRequestOct 16, 2026
- Medium6.9FreeRDP before 3.32.0 NULL Dereference via Zero-Length WebSocket PingOct 16, 2026
- Medium5.4A potential vulnerability was reported in some Lenovo Tablets that could allow a user with physical access to an unlocked tablet to bypass device protections and execu…Oct 16, 2026
- High7.0A potential improper authorization vulnerability was reported in Lenovo Baiying PC Client, distributed exclusively in the Chinese market, that could allow a local auth…Oct 16, 2026
- Medium6.8A potential out-of-bounds write vulnerability was reported in the Lenovo Energy Management driver that could allow a local authenticated user to cause a blue screen error.Oct 16, 2026
- Medium6.9A vulnerability was determined in bitcoinj up to 0.17.Oct 16, 2026
- High7.1A flaw was found in WildFly.Oct 15, 2026
- UnknownCVE-2026-8311Oct 15, 2026
- UnknownCVE-2026-5819Oct 15, 2026
- High7.0A potential authentication bypass vulnerability was reported in some Lenovo tablets that could allow a user with physical access to gain unauthorized device access.Oct 15, 2026
- UnknownCVE-2026-2937Oct 15, 2026