Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- Medium6.5Wheels 4.0.6 through 4.1.2 lets an unauthenticated client switch a request into a separate test application context, including in production, by supplying an X-Wheels-…EPSS 0.2%Oct 16, 2026
- Medium5.3Backdrop CMS Core 1.35.x before 1.35.2 and 1.34.x before 1.34.6 does not sufficiently validate uploaded SVG images to ensure they lack potentially dangerous SVG tags.EPSS 0.2%Oct 16, 2026
- High7.2The RSS Aggregator by Feedzy – Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via…EPSS 0.3%Oct 16, 2026
- Medium5.9The Debloat – Remove Unused CSS, Optimize JS plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.3.0 via the 's' parameter parameter.EPSS 0.8%Oct 16, 2026
- High8.1The Customer Email Verification for WooCommerce plugin for WordPress is vulnerable to Privilege Escalation via the parameter in versions up to, and including, 3.3.0.EPSS 0.5%Oct 16, 2026
- Medium4.8A weakness has been identified in Ultralytics FastSAM up to b4ed20c2fed75eadc5aa7d8b09fedd137b873b52.EPSS 0.1%Oct 16, 2026
- High8.3Frappe HRMS 14.0.0 before 14.38.2 SQL Injection via Missing ValidationEPSS 0.2%Oct 16, 2026
- High7.1Nezha 2.2.5 before 2.3.15 Information Disclosure via DDNS List EndpointEPSS 0.3%Oct 16, 2026
- Medium5.3Nezha 1.7.0 before 2.3.15 Cross-Tenant Server-ID Enumeration via getServerConfigEPSS 0.2%Oct 16, 2026
- Medium6.3Nezha 2.1.0 before 2.3.15 Host Header Injection via MCP Transfer ToolsEPSS 0.2%Oct 16, 2026
- High7.1Nezha 1.0.0 before 2.3.15 Memory Exhaustion via File Manager WebSocketEPSS 0.3%Oct 16, 2026
- High7.1Nezha 2.0.13 before 2.3.15 Denial of Service via /api/v1/ws/transfer WebSocketEPSS 0.3%Oct 16, 2026
- High8.8FreeRDP before 3.32.0 Heap Out-of-Bounds Write in AVC444 YUV444 CombineEPSS 0.3%Oct 16, 2026
- High7.8FreeRDP before 3.32.0 Heap Buffer Overflow via Persistent Cache v2 ParserEPSS 0.1%Oct 16, 2026
- High8.8FreeRDP 3.29.0 before 3.32.0 Heap Overflow via audin Apple BackendsEPSS 0.3%Oct 16, 2026
- High7.3FreeRDP before 3.32.0 Heap Buffer Overflow via persistent_cache_read_entry_v3EPSS 0.1%Oct 16, 2026
- High8.7FreeRDP 3.0.0 before 3.32.0 Unauthenticated Memory Exhaustion via NLA Frame ParserEPSS 0.3%Oct 16, 2026
- High7.1FreeRDP 2.0.0 before 3.32.0 Memory Exhaustion via Static Channel ReassemblyEPSS 0.2%Oct 16, 2026
- Medium5.0FreeRDP 3.30.0 before 3.32.0 Heap Over-Read via Windows cliprdr FILECONTENTS_SIZEEPSS 0.1%Oct 16, 2026
- Medium6.3FreeRDP 3.0.0 before 3.32.0 Out-of-Bounds Read via RAIL Window TitleEPSS 0.2%Oct 16, 2026
- Medium6.0FreeRDP from 3.30.0 before 3.32.0 Resource Exhaustion via rdpecam StartStreamsRequestEPSS 0.2%Oct 16, 2026
- Medium6.9FreeRDP before 3.32.0 NULL Dereference via Zero-Length WebSocket PingEPSS 0.2%Oct 16, 2026
- UnknownMalicious code in xmd-baileys (npm)Oct 16, 2026
- UnknownMalicious code in @developmentyora/yorakids (npm)Oct 16, 2026
- UnknownMalicious code in @developmentyora/baileyss (npm)Oct 16, 2026