Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- High8.3snap7 through 1.4.3 contains an out-of-bounds write vulnerability in TSnap7MicroClient::opReadArea() that allows malicious S7 peers to overflow client buffers via an u…EPSS 0.4%Oct 15, 2026
- Medium6.8WildMIDI through 0.5.0 contains a heap out-of-bounds read vulnerability in _WM_ParseNewHmi() in src/f_hmi.c that reads past buffers when handling 0xfe sub-events.EPSS 0.2%Oct 15, 2026
- Critical9.4An arbitrary operation vulnerability in GENESIS64, ICONICS Suite, Hyper Historian, AnalytiX, MobileHMI, and MC Works64EPSS 0.2%Oct 15, 2026
- High7.1An authentication bypass vulnerability in GENESIS, GENESIS64, ICONICS Suite, Hyper Historian, AnalytiX, MobileHMI, IoTWorX, MC Works64, GENESIS32 and BizVizEPSS 0.1%Oct 15, 2026
- Critical9.2An authentication bypass vulnerability in GENESIS, GENESIS64, ICONICS Suite, Hyper Historian, AnalytiX, MobileHMI, IoTWorX, MC Works64, GENESIS32 and BizVizEPSS 0.3%Oct 15, 2026
- UnknownSecurity update for unboundOct 9, 2026
- Medium5.9IBM DataPower Gateway 10.5.0.0 through 10.5.0.22, 10.6.1 through 10.6.6, 10.6.0.0 through 10.6.0.10, and 11.0.0.0 through 11.0.0.2 could allow a remote attacker to cau…EPSS 0.3%Oct 8, 2026
- High7.8A local privilege escalation vulnerability exists in the Restricted Access (Kiosk) Mode implementation of Scheidt & Bachmann entervo HMI prior to V2 R5 P0 M5.EPSS 0.2%Aug 24, 2026
- UnknownExpat through 2.8.3 contains a denial of service vulnerability caused by quadratic algorithmic complexity in the storeAtts() function in xmlparse.c, where processing N specified atEPSS 0.7%Aug 18, 2026
- Unknownfrangoteam fuxa Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')KEVEPSS 6.9%Aug 18, 2026
- Unknownfrangoteam fuxa Missing AuthorizationKEVEPSS 0.9%Jun 12, 2026
- Low2.1A vulnerability has been found in Sushmi-pal Invoice-System up to a0a3faa16dee2621b231ae227333f5761607283b.May 25, 2026
- Low2.1A flaw has been found in Sushmi-pal Invoice-System up to a0a3faa16dee2621b231ae227333f5761607283b.May 25, 2026
- None0.0The MCP Registry provides MCP clients with a list of MCP servers, like an app store for MCP servers.EPSS 0.4%May 14, 2026
- High8.7Inefficient Algorithmic Complexity vulnerability in absinthe-graphql absinthe allows unauthenticated denial of service via quadratic fragment-name uniqueness validation.EPSS 0.8%May 8, 2026
- High7.5Apache Neethi is vulnerable to a Denial of Service attack through algorithmic complexity in policy normalization.EPSS 0.7%May 1, 2026
- High7.5Nordic Semiconductor IronSide SE for nRF54H20 before 23.0.2+17 has an Algorithmic complexity issue.EPSS 0.3%Apr 15, 2026
- Medium4.8A security flaw has been discovered in musl libc up to 1.2.6.EPSS 0.2%Apr 10, 2026
- Critical9.3Cleartext Storage of Sensitive Information in GUI vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric ICONICS Suite versions…EPSS 0.1%Apr 8, 2026
- Critical9.3Cleartext Storage of Sensitive Information vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, Mitsubishi Electric ICONICS Suite versions 10.97.…EPSS 0.1%Apr 8, 2026
- High7.5Issue summary: During processing of a crafted CMS EnvelopedData message with KeyAgreeRecipientInfo a NULL pointer dereference can happen.EPSS 0.8%Apr 7, 2026
- Critical9.1ChurchCRM is an open-source church management system.EPSS 1.8%Apr 7, 2026
- High7.7From Panorama Web HMI, an attacker can gain read access to certain Web HMI server files, if he knows their paths and if these files are accessible to the Servin proces…Mar 25, 2026
- Medium5.5In the Linux kernel, the following vulnerability has been resolved: x86/efi: defer freeing of boot services memory efi_free_boot_services() frees memory occupied by EF…EPSS 0.1%Mar 25, 2026
- Medium5.3Blinko is an AI-powered card note-taking project.EPSS 0.3%Mar 23, 2026
37 records · page 1 of 2
PreviousNext