Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium6.5EspoCRM is an open source customer relationship management application.Oct 15, 2026
- Medium6.5EspoCRM is an open source customer relationship management application.Oct 15, 2026
- Critical9.3A vulnerability has been found in Wavlink WL-WN530BE2-A up to M30BE2_V250604.EPSS 3.5%Oct 15, 2026
- High8.4A vulnerability has been identified in Siemens Software Center (All versions).EPSS 0.1%Oct 15, 2026
- High7.8A local privilege escalation vulnerability in TotalAV allows an unprivileged local user to forge the gRPC IPC authentication token, through loading IPC.dll and abuse t…EPSS 0.2%Oct 15, 2026
- High8.7In Symfony YAML prior to versions 5.4.54, 6.4.45, 7.4.18, and 8.1.6, Yaml\Parser::lexInlineStructure() recursed through lexInlineMapping() and lexInlineSequence() for…EPSS 0.5%Oct 15, 2026
- High7.5In Progress Kendo UI for jQuery prior to v2026.3.1015, specially crafted filter values in the PivotGrid XMLA transport could alter MDX predicates or inject XML markup…EPSS 0.2%Oct 15, 2026
- High8.7Symfony is a PHP framework for web and console applications and a set of reusable PHP components.EPSS 0.4%Oct 15, 2026
- Medium5.4In Progress® Kendo® UI for jQuery prior to version 2026.3.1015, the Calendar and MultiViewCalendar month content templates render data.url and data.title without prope…EPSS 0.2%Oct 15, 2026
- Medium5.4In Progress® Kendo® UI for jQuery versions starting with 2012.2.710 and prior to 2026.3.1015, the Validator decodes validation messages from data-msg-* attributes and…EPSS 0.2%Oct 15, 2026
- Medium5.4In Progress® Kendo® UI for jQuery prior to 2026.3.1015, the Splitter and Window components starting with version 2011.2.804 and the Tooltip component starting with ver…EPSS 0.2%Oct 15, 2026
- Medium5.4In Progress® Kendo® UI for jQuery prior to v2026.3.1015, the Menu component constructs HTML attributes from bound dataSource fields by string concatenation without pro…EPSS 0.2%Oct 15, 2026
- UnknownAUTOM8N (WHM/cPanel plugin) through commit 82821f7 contains an OS Command Injection in borg_restore.cgi.EPSS 0.8%Oct 15, 2026
- High8.5P4 Search (formerly Helix Search) returns stored credentials in cleartext through its configuration API to users with administrative privileges on the connected P4 Ser…EPSS 0.2%Oct 15, 2026
- High7.3P4 Search (formerly Helix Search) allows an authenticated user holding administrative privileges on the connected P4 Server to supply a crafted logging configuration t…EPSS 0.4%Oct 15, 2026
- UnknownCVE-2025-38724 is listed by USN-8922-2: Linux kernel (Azure) vulnerabilities.EPSS 0.4%Oct 15, 2026
- UnknownCVE-2024-57904 is listed by USN-8922-2: Linux kernel (Azure) vulnerabilities.EPSS 0.2%Oct 15, 2026
- UnknownCVE-2024-53214 is listed by USN-8922-2: Linux kernel (Azure) vulnerabilities.EPSS 0.3%Oct 15, 2026
- UnknownCVE-2024-53194 is listed by USN-8922-2: Linux kernel (Azure) vulnerabilities.EPSS 0.2%Oct 15, 2026
- UnknownIn the Eclipse Adoptium website (adoptium.net), in every deployment built from commit 0b24ea1 (2025-06-18) up to the fix in commit cbb53cf (2026-09-24), the post-downl…Oct 15, 2026
- Medium4.8A flaw was found in OpenSSH.EPSS 0.2%Oct 15, 2026
- Medium6.5Microsoft Office PowerPoint Information Disclosure VulnerabilityEPSS 0.5%Oct 15, 2026
- Medium6.5Microsoft Office PowerPoint Information Disclosure VulnerabilityEPSS 0.5%Oct 15, 2026
- Medium6.5Microsoft Office PowerPoint Information Disclosure VulnerabilityEPSS 0.5%Oct 15, 2026
- High8.8Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.EPSS 0.6%Oct 15, 2026