Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium6.8The fanx_fingerprint function in ssl/sslxprint.c of ssldump allocates a heap buffer for formatting FAN/1 X.509 certificate fingerprints.EPSS 0.0%Oct 16, 2026
- Critical9.3The vulnerability exists within internal components of BeyondTrust’s Remote Support product.KEVEPSS 0.0%Oct 15, 2026
- Critical9.8Cisco Secure Email Gateway Relative Path Traversal VulnerabilityKEVEPSS 174.0%Oct 14, 2026
- Critical9.3Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fieldEPSS 68.0%Oct 13, 2026
- Critical9.3Omnispace Agora Project before 26.10.0 contains a code injection vulnerability where unescaped, attacker-controlled values are written into the config.inc.php configuration file duEPSS 66.0%Oct 13, 2026
- Critical9.9Legacy Update is a tool for activating and installing updates on legacy Windows PCs.EPSS 21.0%Oct 13, 2026
- Critical9.1IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow an unauthenticated remote attacker to bypass access controls configured on gRPC service methods.EPSS 45.0%Oct 13, 2026
- High8.7A SQL injection vulnerability has been identified in Payload CMS.EPSS 26.0%Oct 13, 2026
- Critical10.0The authorization middleware of the WMS MobileServer fails to require authentication in two distinct cases.EPSS 39.0%Oct 13, 2026
- Medium5.1Cross-Site Scripting on the YouMind portal, specifically in the avatar update endpoint, when setting a profile picture via an arbitrary URL.EPSS 23.0%Oct 13, 2026
- Critical9.3CVE-2026-21589: Critical unauthenticated arbitrary file access in Atlassian productsKEVEPSS 278.0%Oct 5, 2026
- Medium6.5Fortinet Multiple Products Path Traversal VulnerabilityKEVEPSS 54.0%Apr 14, 2026
12 records · page 1 of 1
PreviousNext