Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.3An OS command injection vulnerability has been reported to affect HybridDesk Station.Check if you run itEPSS 1.07%Oct 15, 2026
- High8.9A missing authentication for critical function vulnerability has been reported to affect HybridDesk Station.Check if you run itEPSS 0.24%Oct 15, 2026
- High8.8Jetty proxy blacklist performs case-sensitive matching of case-insensitive DNS hostnamesCheck if you run itEPSS 0.32%Oct 15, 2026
- Medium4.8A cross-site scripting (XSS) vulnerability has been reported to affect Notes Station 3.Check if you run itEPSS 0.29%Oct 15, 2026
- High8.4An improper isolation or compartmentalization vulnerability has been reported to affect Notes Station 3.Check if you run itEPSS 0.14%Oct 15, 2026
- High8.5An incorrect permission assignment for critical resource vulnerability has been reported to affect Notes Station 3.Check if you run itEPSS 0.12%Oct 15, 2026
- Medium6.9An OS command injection vulnerability has been reported to affect Notes Station 3.Check if you run itEPSS 1.64%Oct 15, 2026
- High8.7An improper link resolution before file access ('link following') vulnerability has been reported to affect Virtualization Station.Check if you run itEPSS 0.47%Oct 15, 2026
- Critical9.4An unix symbolic link (symlink) following vulnerability has been reported to affect QuMagie.Check if you run itEPSS 0.49%Oct 15, 2026
- High8.7An authorization bypass through user-controlled key vulnerability has been reported to affect Video Station.Check if you run itEPSS 0.41%Oct 15, 2026
- High8.6A relative path traversal vulnerability has been reported to affect QuMagie.Check if you run itEPSS 0.54%Oct 15, 2026
- Medium5.3An unix symbolic link (symlink) following vulnerability has been reported to affect Qsync Central.Check if you run itEPSS 0.54%Oct 15, 2026
- Medium5.3A server-side request forgery (SSRF) vulnerability has been reported to affect Download Station.Check if you run itEPSS 0.43%Oct 15, 2026
- High8.7A path traversal vulnerability has been reported to affect Video Station.Check if you run itEPSS 0.49%Oct 15, 2026
- High8.4An incorrect permission assignment for critical resource vulnerability has been reported to affect Download Station.Check if you run itEPSS 0.13%Oct 15, 2026
- Critical9.3A missing authentication for critical function vulnerability has been reported to affect sMedio DTCP MOVE.Check if you run itEPSS 0.53%Oct 15, 2026
- High7.1A SQL injection vulnerability has been reported to affect Video Station.Check if you run itEPSS 0.51%Oct 15, 2026
- High7.1A SQL injection vulnerability has been reported to affect Video Station.Check if you run itEPSS 0.51%Oct 15, 2026
- High7.2A path traversal vulnerability has been reported to affect Qsync Central.Check if you run itEPSS 0.54%Oct 15, 2026
- High7.1A heap buffer overflow in HPE NonStop NDSREST could corrupt resume-execution address and may potentially redirect execution flow.Check if you run itEPSS 0.14%Oct 15, 2026
- Medium6.9On request the script creates a world-readable debug log in /var/log/sdbootutil.log.Check if you run itEPSS 0.11%Oct 15, 2026
- Medium5.9There are two invocations of to display a QR code for scanning.Check if you run itEPSS 0.10%Oct 15, 2026
- High8.2In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the TDS message decoder in the Vert.x MSSQL client (vertx-mssql-client…Check if you run itEPSS 0.32%Oct 15, 2026
- High7.5A remote attacker may send a specially crafted network packet that causes the affected application to perform an out-of-bounds memory read due to insufficient validati…Check if you run itEPSS 0.45%Oct 15, 2026
- Critical9.3Authentication bypass vulnerability in Stela, versions prior to 1.60.1, due to the use of a cookie named “authProcess” without validating its integrity.Check if you run itEPSS 0.40%Oct 15, 2026