Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- Medium5.4A cross-origin issue in the Navigation API was addressed with improved input validation.EPSS 0.4%Mar 17, 2026
- Low2.7HCL Sametime is vulnerable to broken server-side validation.EPSS 0.2%Mar 17, 2026
- Medium6.0The fix for CVE-2026-0672, which rejected control characters in http.cookies.Morsel, was incomplete.EPSS 0.5%Mar 16, 2026
- Critical9.1Fields is a GLPI plugin that allows users to add custom fields on GLPI items forms.EPSS 0.3%Mar 16, 2026
- Medium5.5in OpenHarmony v5.1.0 and prior versions allow a local attacker cause DOS through improper input.EPSS 0.1%Mar 16, 2026
- Low3.3in OpenHarmony v5.0.3 and prior versions allow a local attacker cause information improper input.EPSS 0.1%Mar 16, 2026
- Medium5.3Global file reads caused by improper URL checks in webserver in Softing Industrial Automation GmbH smartLinks on docker (filesystem modules) allows file access.EPSS 0.4%Mar 16, 2026
- Medium6.3wpDiscuz before 7.6.47 contains an email header injection vulnerability that allows attackers to manipulate mail recipients by injecting malicious data into the commen…EPSS 0.2%Mar 13, 2026
- High7.7The web interface on multiple Omada switches does not adequately validate certain external inputs, which may lead to out-of-bound memory access when processing crafted requests.EPSS 1.0%Mar 13, 2026
- Medium6.3Malicious configuration can lead to unauthorized file access in Apache Livy.EPSS 0.5%Mar 13, 2026
- Low2.0The "tarfile" module would still apply normalization of AREGTYPE (\x00) blocks to DIRTYPE, even while processing a multi-block member such as GNUTYPE_LONGNAME or GNUTYPE_LONGLINK.EPSS 0.2%Mar 12, 2026
- Low2.1A flaw has been found in Alfresco Activiti up to 7.19/8.8.0.EPSS 0.5%Mar 12, 2026
- High8.7Black is the uncompromising Python code formatter.EPSS 0.7%Mar 11, 2026
- High7.8Improper Input Validation in Zoom Rooms for Windows before 6.6.5 in Kiosk Mode may allow an authenticated user to conduct an escalation of privilege via local access.EPSS 0.2%Mar 11, 2026
- Medium5.3Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by an Improper Input Validation vulnerability that c…EPSS 0.3%Mar 11, 2026
- Medium5.3Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by an Improper Input Validation vulnerability that c…EPSS 0.5%Mar 11, 2026
- High8.7Improper input validation in some UEFI firmware SMM module for the Intel(R) reference platforms may allow an escalation of privilege.EPSS 0.1%Mar 10, 2026
- Medium5.9Improper input validation in the UEFI firmware for some Intel Reference Platforms may allow an escalation of privilege.EPSS 0.1%Mar 10, 2026
- High7.1Improper input validation in the UEFI ImcErrorHandler module for some Intel(R) reference platforms may allow an escalation of privilege.EPSS 0.1%Mar 10, 2026
- High8.7Improper input validation in the UEFI FlashUcAcmSmm module for some Intel(R) reference platforms may allow an escalation of privilege.EPSS 0.1%Mar 10, 2026
- High7.1Improper input validation in the UEFI WheaERST module for some Intel(R) reference platforms may allow an escalation of privilege.EPSS 0.1%Mar 10, 2026
- High8.4In hyp_alloc of arch/arm64/kvm/hyp/nvhe/alloc.c, there is a possible out of bounds write due to improper input validation.EPSS 0.1%Mar 10, 2026
- High7.5Envoy is a high-performance edge/middle/service proxy.EPSS 0.5%Mar 10, 2026
- High7.5Server-side request forgery (ssrf) in Azure IoT Explorer allows an unauthorized attacker to perform spoofing over a network.EPSS 1.1%Mar 10, 2026
- High8.8Improper input validation in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.EPSS 1.3%Mar 10, 2026