Catalog

Findings

Filter the merged record by severity, source, stack, and weakness type.

SearchSeveritySourceStackWeaknessSort

Known exploited only

Critical9.3Perforce Helix Authentication Service (HAS) deployments that retain the shipped default SCIM bearer token are vulnerable to unauthorized access when the SCIM endpoint…CVE-2026-109758 · CVE.org · NIST NVDOct 13, 2026
High8.8dot-access through 1.0.0 contains a prototype pollution vulnerability that allows attackers to modify Object.prototype by supplying a crafted dotted path to set().CVE-2026-107701 · CVE.org · NIST NVDOct 8, 2026
Medium6.9A vulnerability was determined in jQWidgets up to 24.0.1.CVE-2026-78178 · CVE.org · NIST NVDAug 24, 2026
Critical9.3exceljs through 4.4.0 contains a prototype pollution vulnerability in the deepMerge helper that fails to reject __proto__, constructor, or prototype keys when merging note objects.CVE-2026-78207 · CVE.org · NIST NVDAug 24, 2026
High8.6Adobe Acrobat and Reader Prototype Pollution VulnerabilityCVE-2026-34621 · Adobe · Acrobat and Reader · CISA KEV · CVE.org · FIRST EPSSKEVEPSS 2.2%Apr 11, 2026