Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium6.7In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 stored XSS in the classic build log was possibleOct 15, 2026
- High8.0In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 stored XSS in the classic project overview was possibleOct 15, 2026
- High8.1In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 remote code execution via a whitelist bypass in the build messages protocol was possibleOct 15, 2026
- High7.5In JetBrains Datalore before 2026.2.1 unauthenticated path traversal via the report blob endpoint allowed reading arbitrary filesOct 15, 2026
- Medium6.5In JetBrains YouTrack before 2026.2.19575 2026.3.16075 2026.3.16397 2026.3.16402 mail rules allowed a project admin to execute cross-project issue commandsOct 15, 2026
- High7.8In JetBrains Junie CLI before 26.8.3 code execution was possible via an untrusted project's MCP server configurationOct 15, 2026
- Critical9.3A vulnerability was found in Wavlink WN530HG4B M30HG4B_V260724.Oct 15, 2026
- High8.7In Symfony Expression Language versions prior to 5.4.54, 6.4.48, 7.4.21, and 8.1.9, the parser of the ExpressionLanguage component built its node tree with no bound on its depth.Oct 15, 2026
- Critical9.4A server-side template injection exists in SolusVM 2 up to version 2.0.0-44576 that allows remote authenticated users to execute arbitrary code as root.Oct 15, 2026
- High8.2kin-openapi is a Go project for handling OpenAPI files.Oct 15, 2026
- High7.1Grafana's data source proxy did not apply role-based access control to write requests forwarded to Loki data sources.Oct 15, 2026
- Medium5.5An issue in Justson agentweb-core v5.1.6-androidx and earlier allows a local attacker to obtain sensitive information and launch non-exported host application componen…Oct 15, 2026
- High7.5An issue in lottie-android 6.7.1 and earlier (and master) allows a remote attacker to cause a denial of service via a crafted Lottie animation JSON containing a cyclic…Oct 15, 2026
- Medium6.5A corrupted file may cause out-of-bounds read in HPE NonStop SQL/MX EXE under certain conditions, potentially leading to information disclosure, process termination, C…Oct 15, 2026
- Medium5.8A buffer overflow vulnerability in HPE NonStop RDMA SERVICES NSK may cause out-of-bounds memory write, which may result in memory corruption.Oct 15, 2026
- High7.3A buffer overflow vulnerability in HPE NonStop XABroker may cause memory corruption, resulting in application crash.Oct 15, 2026
- High7.3A buffer overflow vulnerability in HPE NonStop ODBC/MX Server may cause memory corruption, resulting in application crash.Oct 15, 2026
- High7.3A buffer overflow vulnerability in HPE NonStop ODBC/MX Services may cause memory corruption, resulting in application crash.Oct 15, 2026
- Medium6.5EspoCRM is an open source customer relationship management application.Oct 15, 2026
- Medium5.5EspoCRM is an open source customer relationship management application.Oct 15, 2026
- Medium4.3EspoCRM is an open source customer relationship management application.Oct 15, 2026
- Low3.5EspoCRM is an open source customer relationship management application.Oct 15, 2026
- Medium5.4EspoCRM is an open source customer relationship management application.Oct 15, 2026
- Low2.7EspoCRM is an open source customer relationship management application.Oct 15, 2026
- High7.6EspoCRM is an open source customer relationship management application.Oct 15, 2026