Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High8.7The Ignition Perspective module does not properly validate session privileges when determining Designer-level access.Oct 13, 2026
- High7.1An integer underflow in OpenVPN version 2.7_alpha3 through 2.7.7 on Windows and Android allows remote authenticated servers to cause a denial of service or memory disc…Oct 13, 2026
- Medium5.1Vulnerability in Citrix UniconOS leading to Arbitrary file read and write This issue affects UniconOS: before 2607.2 CR and before 2603 LTSR CU2.Oct 13, 2026
- Medium6.9Vulnerability in Citrix UniconOS leading to Persistent Command Execution This issue affects UniconOS: before 2607.2 CR and before 2603 LTSR CU2.Oct 13, 2026
- Medium6.9Authorization bypass through User-Controlled key vulnerability in HYPR Passwordless on Windows allows Privilege Escalation.Oct 13, 2026
- Medium6.9Improper synchronization in the OpenVPN ovpn-dco-win for Windows versions 0.6.5 through 1.3.5 and 2.4.0 through 2.8.7 allows local attackers to trigger a deadlock via…Oct 13, 2026
- Critical9.9Legacy Update is a tool for activating and installing updates on legacy Windows PCs.Oct 13, 2026
- High8.6CAI Content Credentials is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation.Oct 13, 2026
- High7.5CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass.Oct 13, 2026
- High7.5CAI Content Credentials is affected by an Improper Verification of Cryptographic Signature vulnerability that could result in a Security feature bypass.Oct 13, 2026
- High7.5Libreswan's pluto daemon has a use-after-free vulnerability when a client connecting using IKE over TCP closes the connection and another packet (retransmit or malicio…Oct 13, 2026
- High7.6OpenVPN 2.7_alpha1 through 2.7.7 allows remote authenticated users to impersonate others via a crafted certificate subject fieldOct 13, 2026
- Medium5.8Out-of-bounds read vulnerability in Citirx Citrix Workspace app for Windows.Oct 13, 2026
- Medium6.8Out-of-bounds write vulnerability in Citrix Workspace app for Windows.Oct 13, 2026
- High7.5Libreswan has a null pointer dereference bug in the PKCS#7 handling code for IKE certificate authentication.Oct 13, 2026
- High7.5Libreswan's IKEv2 state machine has a null pointer dereference bug in the EAP handling code for authentication.Oct 13, 2026
- Low3.7Libreswan in FIPS mode has a vulnerability where badly formed received certificates are rejected, but not deleted from the NSS cache.Oct 13, 2026
- Medium5.3CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass.Oct 13, 2026
- Medium5.3CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass.Oct 13, 2026
- UnknownUse after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.Oct 13, 2026
- UnknownUse after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.Oct 13, 2026
- UnknownUse after free in Bindings in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page.Oct 13, 2026
- UnknownUse after free in V8 in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.Oct 13, 2026
- UnknownUse after free in V8 in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.Oct 13, 2026
- UnknownUse after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page.Oct 13, 2026