Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- Low2.3Lychee is a free, open-source photo-management tool.EPSS 0.2%Oct 15, 2026
- Medium5.7Lychee is a free, open-source photo-management tool.EPSS 0.3%Oct 15, 2026
- Critical9.4Deserialization of untrusted data in the Gremlin graph data import component in Amazon Neptune engine might allow an authenticated remote actor with standard database…EPSS 0.4%Oct 15, 2026
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 8theme.com XStore xstore allows Reflected XSS.This issue affects…EPSS 0.1%Oct 15, 2026
- Medium5.9In authd before 0.7.1, the user identity matching in UpdateUser (internal/users/manager.go) resolves an incoming login by the broker-scoped provider ID, but falls back…EPSS 0.1%Oct 15, 2026
- Critical9.3Pre-Authentication Admin Bypass and Remote Code Execution in Nutanix Prism Gateway inside AOSEPSS 1.3%Oct 15, 2026
- Medium5.7OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems.EPSS 0.2%Oct 15, 2026
- Low2.5OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems.EPSS 0.2%Oct 15, 2026
- High7.8bincookie is a header-only binarycookies parser.EPSS 0.2%Oct 15, 2026
- High8.6Discourse ActivityPub adds ActivityPub support to Discourse.EPSS 0.2%Oct 15, 2026
- High8.7Sonatype Nexus Repository 3 allows a user that holds the role create or role update permission to grant roles and privileges that the account does not hold.Oct 15, 2026
- Medium5.1Sonatype Nexus Repository 3 allows a user account that holds the edit permission on a hosted R repository to store script content in the metadata of an uploaded R package.Oct 15, 2026
- Medium6.9Sonatype Nexus Repository 3 allows an unauthenticated remote attacker to supply attacker-controlled input to a Java class loading call through an ExtDirect endpoint.Oct 15, 2026
- High7.1A missing authorization check in Nexus Repository 3's NuGet Components API upload path allows an account holding only repository read and browse privileges to upload a…Oct 15, 2026
- UnknownFasterXML Jackson 1.x, confirmed in jackson-mapper-asl versions 1.8.3, 1.9.2, 1.9.11, 1.9.12, and 1.9.13, allows attackers to cause a denial of service by supplying de…Oct 15, 2026
- High8.5A flaw was found in Ansible Operator Plugins.Oct 15, 2026
- UnknownA Regular-Expression Denial of Service (ReDoS) in the Markdown2.EPSS 0.1%Oct 15, 2026
- Medium6.0EspoCRM is an open source customer relationship management application.EPSS 0.3%Oct 15, 2026
- High7.1OPNsense is a FreeBSD based firewall and routing platform.EPSS 0.4%Oct 15, 2026
- High8.1OPNsense is a FreeBSD based firewall and routing platform.EPSS 0.3%Oct 15, 2026
- Medium4.3OPNsense is a FreeBSD based firewall and routing platform.EPSS 0.4%Oct 15, 2026
- Medium5.2OPNsense is a FreeBSD based firewall and routing platform.EPSS 0.2%Oct 15, 2026
- Medium5.9OPNsense is a FreeBSD based firewall and routing platform.EPSS 0.4%Oct 15, 2026
- Medium5.4OPNsense is a FreeBSD based firewall and routing platform.EPSS 0.3%Oct 15, 2026
- Medium5.4OPNsense is a FreeBSD based firewall and routing platform.EPSS 0.2%Oct 15, 2026