Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High8.8ColdFusion is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user.Oct 13, 2026
- High7.5ColdFusion is affected by an Improper Input Validation vulnerability that could result in an application denial-of-service.Oct 13, 2026
- CriticalHazelcast allows arbitrary member memory access by low-privileged clientEPSS 0.4%Oct 8, 2026
- Medium4.3In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, a user that holds a role with the run_collect capability could use the collect Search Processi…Oct 7, 2026
- Medium4.1In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, a user that holds a role with the edit_user capability could create a native Splunk username t…Oct 7, 2026
- Medium4.3In Splunk Enterprise versions below 10.4.3, 10.2.7, 10.0.10, and 9.4.15, a user that holds a role with the run_collect capability could use the collect Search Processi…Oct 7, 2026
- Critical9.8Dbit WIFI4 N300 1.0.0 devices allow the management interface to be crashed via a request (from the local Wi-Fi network) that lacks a /api/login username or password field.Oct 6, 2026
- Medium4.3HCL BigFix Service Management is affected by an Improper Input Validation vulnerability, which could allow an attacker to inject unvalidated, malformed data into the a…Oct 1, 2026
- Critical9.5Citrix NetScaler Improper Input Validation VulnerabilityKEVEPSS 1.1%Sep 27, 2026
- Medium4.3HCL Sametime is vulnerable to insufficient input sanitization.Sep 24, 2026
- Critical9.5Arista VeloCloud Orchestrator Improper Input Validation VulnerabilityKEVEPSS 1.1%Sep 22, 2026
- High8.8Backstage is an open framework for building developer portals.Sep 16, 2026
- High8.5RustDesk's Windows clipboard redirection copies a peer-supplied length into a fixed-size caller buffer without an upper bound check.Aug 24, 2026
- High7.5fast-uri is a URI parser for Node.js.Aug 24, 2026
- Critical9.3PTC Windchill and FlexPLM Improper Input Validation VulnerabilityKEVEPSS 46.0%Jun 17, 2026
- Critical10.0Ubiquiti UniFi OS Improper Input Validation VulnerabilityKEVEPSS 45.8%May 21, 2026
- High8.7Improper input validation for some Intel Endpoint Management Assistant (EMA) software before version 1.14.5 within Ring 3: User Applications may allow an escalation of privilege.May 12, 2026
- High7.2Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation VulnerabilityKEVEPSS 2.5%May 7, 2026
- Medium6.5Microsoft SharePoint Server Improper Input Validation VulnerabilityKEVEPSS 43.4%Apr 14, 2026
- High8.8Apache ActiveMQ Improper Input Validation VulnerabilityKEVEPSS 15.5%Apr 7, 2026
- Critical9.6A flaw was found in the Undertow HTTP server core, which is used in WildFly, JBoss EAP, and other Java applications.Jan 7, 2026
- Critical10.0Cisco Multiple Products Improper Input Validation VulnerabilityKEVEPSS 32.4%Dec 17, 2025
- High7.4FreshRSS is a self-hosted RSS feed aggregator.Dec 16, 2025
- High7.5A flaw was found in Undertow that can cause remote denial of service attacks.Dec 3, 2025
- Critical9.1Adobe Commerce and Magento Improper Input Validation VulnerabilityKEVEPSS 94.5%Sep 9, 2025