Catalog

Findings

Filter the merged record by severity, source, stack, and weakness type.

SearchSeveritySourceStackWeaknessSort

Known exploited only

Reset

High7.5Combodo iTop is a web based IT service management tool.CVE-2026-27490 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.4%Aug 21, 2026
High7.5Authen::TOTP versions before 0.1.1 for Perl generate secrets using rand.CVE-2026-46473 · CVE.org · NIST NVDMay 21, 2026
High7.3Crypt::DSA versions before 1.20 for Perl generate seeds using rand.CVE-2026-8700 · CVE.org · NIST NVDMay 15, 2026
High7.5Trog::TOTP versions before 1.006 for Perl generate secrets using rand.CVE-2026-46474 · CVE.org · NIST NVDMay 15, 2026
Critical9.3Magento Long Term Support (LTS) is an unofficial, community-driven project provides an alternative to the Magento Community Edition e-commerce platform with a high lev…CVE-2026-42155 · CVE.org · NIST NVD · MagentoMay 15, 2026
Medium4.1* Countermeasures for DPA within SYMCRYPTO engine on SixG301xxx devices are not sufficiently random and will eventually repeat.CVE-2025-14972 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.1%May 15, 2026
High8.7CWE‑331: Insufficient Entropy vulnerability exists that could lead to unauthorized access when an attacker on the network can exploit weaknesses in session‑management protections.CVE-2026-4827 · CVE.org · NIST NVDMay 12, 2026
Medium6.3and use insufficient entropy for Expat hash-flooding protection, which allows a crafted XML document to trigger hash flooding.\r\n\r\nFully mitigating this vulnerabili…CVE-2026-7210 · python · python · CVE.org · NIST NVD · PythonMay 11, 2026
High8.7A privilege escalation vulnerability in Microchip IStaX allows an authenticated low-privileged user to recover a shared per-device cookie secret from their own webstax…CVE-2026-2336 · microchip · istax · CVE.org · NIST NVDApr 16, 2026
Low2.9libexpat before 2.8.0 uses insufficient entropy, and thus hash flooding can occur via a crafted XML document.CVE-2026-41080 · libexpat project · libexpat · CVE.org · NIST NVDApr 16, 2026
Critical9.8Auth0-PHP is a PHP SDK for Auth0 Authentication and Management APIs.CVE-2026-34236 · auth0 · auth0-php · CVE.org · NIST NVD · Okta, PHPApr 1, 2026
Medium5.9In Progress® Telerik® UI for AJAX, versions prior to 2026.1.225, an insufficient entropy vulnerability exists in RadAsyncUpload, where a predictable temporary identifi…CVE-2026-2878 · progress · telerik ui for asp.net ajax · CVE.org · NIST NVD · Microsoft, ProgressFeb 25, 2026
Medium5.9pubnub Insufficient Entropy vulnerabilityCVE-2023-26154 · CVE.org · FIRST EPSS · GitHub Advisory Database · Go, MavenEPSS 1.0%Dec 6, 2023
High7.5The POWER9 backend in GNU Compiler Collection (GCC) before version 10 could optimize multiple calls of the __builtin_darn intrinsic into a single call, thus reducing t…CVE-2019-15847 · gnu · gcc · CVE.org · FIRST EPSS · NIST NVDEPSS 3.2%Sep 2, 2019