Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High8.7Sonatype Nexus Repository 3 allows a user that holds the role create or role update permission to grant roles and privileges that the account does not hold.Oct 15, 2026
- Medium5.1Sonatype Nexus Repository 3 allows a user account that holds the edit permission on a hosted R repository to store script content in the metadata of an uploaded R package.Oct 15, 2026
- Medium6.9Sonatype Nexus Repository 3 allows an unauthenticated remote attacker to supply attacker-controlled input to a Java class loading call through an ExtDirect endpoint.Oct 15, 2026
- High7.1A missing authorization check in Nexus Repository 3's NuGet Components API upload path allows an account holding only repository read and browse privileges to upload a…Oct 15, 2026
- UnknownFasterXML Jackson 1.x, confirmed in jackson-mapper-asl versions 1.8.3, 1.9.2, 1.9.11, 1.9.12, and 1.9.13, allows attackers to cause a denial of service by supplying de…Oct 15, 2026
- High8.5A flaw was found in Ansible Operator Plugins.Oct 15, 2026
- UnknownA Regular-Expression Denial of Service (ReDoS) in the Markdown2.Oct 15, 2026
- Medium6.0EspoCRM is an open source customer relationship management application.Oct 15, 2026
- High7.1OPNsense is a FreeBSD based firewall and routing platform.Oct 15, 2026
- High8.1OPNsense is a FreeBSD based firewall and routing platform.Oct 15, 2026
- Medium4.3OPNsense is a FreeBSD based firewall and routing platform.Oct 15, 2026
- Medium5.2OPNsense is a FreeBSD based firewall and routing platform.Oct 15, 2026
- Medium5.9OPNsense is a FreeBSD based firewall and routing platform.Oct 15, 2026
- Medium5.4OPNsense is a FreeBSD based firewall and routing platform.Oct 15, 2026
- Medium5.4OPNsense is a FreeBSD based firewall and routing platform.Oct 15, 2026
- High8.0OPNsense is a FreeBSD based firewall and routing platform.Oct 15, 2026
- Critical9.9OPNsense is a FreeBSD based firewall and routing platform.Oct 15, 2026
- High7.1OPNsense is a FreeBSD based firewall and routing platform.Oct 15, 2026
- UnknownA stack overflow in the gensub_ParsePsb() function of AOC LC32D1320 v2.05 allows attackers to cause a Denial of Service (DoS) via supplying a crafted .PSB subtitle file.Oct 15, 2026
- High8.3Use of Externally-Controlled format string vulnerability in Unitronics Unitronics UniStream Pro/UniLogic.Oct 15, 2026
- High8.3: Improper Authentication vulnerability in Unitronics Unitronics UniStream Pro/UniLogic.Oct 15, 2026
- High8.3: Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Unitronics Unitronics UniStream Pro/UniLogic.Oct 15, 2026
- High8.3: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Unitronics Unitronics UniStream Pro/UniLogic.Oct 15, 2026
- Medium6.7In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 stored XSS in the classic build log was possibleEPSS 0.2%Oct 15, 2026
- High8.0In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 stored XSS in the classic project overview was possibleEPSS 0.2%Oct 15, 2026