Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High7.3Insecure Storage of Sensitive Information vulnerability in Progress MOVEit Transfer.EPSS 0.2%Oct 14, 2026
- High7.5Improper handling of unicode encoding vulnerability in Progress MOVEit Transfer.EPSS 0.4%Oct 14, 2026
- High7.5Insufficient Session Expiration vulnerability in Progress MOVEit Transfer.EPSS 0.3%Oct 14, 2026
- High7.5Incorrect Authorization vulnerability in Progress MOVEit Transfer (Client Certificates module).EPSS 0.2%Oct 14, 2026
- High7.5Improper neutralization of special elements used in an LDAP query ('LDAP injection') vulnerability in Progress MOVEit Transfer (LDAP module).EPSS 0.4%Oct 14, 2026
- High7.5Authentication bypass by capture-replay vulnerability in Progress MOVEit Transfer (OIDC module).EPSS 0.4%Oct 14, 2026
- High8.1Missing critical step in authentication vulnerability in Progress MOVEit Transfer (LDAP module).EPSS 0.5%Oct 14, 2026
- High8.8Authentication bypass using an alternate path or channel vulnerability in Progress MOVEit Transfer.EPSS 0.6%Oct 14, 2026
- High8.8Incorrect Permission Assignment for Critical Resource vulnerability in Progress MOVEit Transfer.EPSS 0.1%Oct 14, 2026
- Medium4.8vgmstream through r2117 Stack Out-of-Bounds Read via G.722.1/Siren14 DecoderEPSS 0.2%Oct 14, 2026
- High8.7Description NGINX Ingress Controller has a vulnerability when implementing an externalAuth policy for ingress. NGINX Ingress Controller may mishandle the HTTP response from an OAutEPSS 0.4%Oct 14, 2026
- High8.3Description NGINX JavaScript (njs) has a vulnerability where the njs XML module exposes entity-backed XML attributes inconsistently with libxml2 canonicalization. In both the builtEPSS 0.2%Oct 14, 2026
- Medium6.9Description NGINX JavaScript (njs) has a vulnerability where the built-in njs engine leaks a libxml2 parser context when xml.parse() fails. The failure path did not register cleanuEPSS 0.3%Oct 14, 2026
- Medium6.9NGINX ngx_http_v3_module vulnerabilityEPSS 0.2%Oct 14, 2026
- High8.7An authentication and authorization bypass vulnerability exists in F5 NGINX Kubernetes Ingress Controller (NIC) when configured with the policy or Ingress external authentication.EPSS 0.4%Oct 14, 2026
- High7.1Description NGINX Gateway Fabric has a vulnerability when it is configured with Gateway Custom Resource Definition (CRD) and have an authenticated gRPC connection with NGINX Agent.EPSS 0.3%Oct 14, 2026
- High8.8Description NGINX Gateway Fabric has a vulnerability when it renders the spec.basic.realm (and spec.jwt.realm) field of a namespaced AuthenticationFilter verbatim, unescaped and unEPSS 0.5%Oct 14, 2026
- Critical9.2NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_core_module module.EPSS 0.4%Oct 14, 2026
- Critical9.2NGINX map directive and regex matching vulnerabilityEPSS 0.6%Oct 14, 2026
- High8.8Gitea fork workflow approval bypass through review eventsEPSS 0.5%Oct 14, 2026
- High8.1Gitea enforces first-time fork contributor approval by blocking jobs, but some job transition and dispatch paths do not re-check the run's approval requirement.EPSS 0.4%Oct 14, 2026
- High8.1HTTP/2 upload Use-After-FreeEPSS 0.2%Oct 14, 2026
- Critical9.8Cisco Secure Email Gateway Relative Path Traversal VulnerabilityKEVEPSS 1.7%Oct 14, 2026
- High8.6TeamPlus Messenger developed by Teamplus Technology has a Code Injection vulnerability.EPSS 0.6%Oct 13, 2026
- High8.6TeamPlus Messenger developed by Teamplus Technology has a Code Injection vulnerability.EPSS 0.6%Oct 13, 2026