Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- UnknownIn versions till , The default rate-limit key resolver, , derives the per-client bucket key from the leftmost element of the request header.EPSS 0.2%Oct 15, 2026
- Critical9.3WordPress Mang Board WP plugin <= 2.4.4 - SQL Injection vulnerabilityEPSS 0.3%Oct 15, 2026
- High7.1WordPress User Registration plugin <= 5.2.8 - Broken Access Control vulnerabilityEPSS 0.2%Oct 15, 2026
- High8.8Incorrect Privilege Assignment vulnerability in WP ManageNinja LLC Fluent CRM fluent-crm allows Privilege Escalation.This issue affects Fluent CRM: from n/a through 3.2.5.EPSS 0.3%Oct 15, 2026
- Unknownipv4: free inet_opt and ireq_opt after an RCU grace periodOct 15, 2026
- High7.3A vulnerability in HPE NonStop SQL/MX UDR SERVER may allow a crafted message to cause process termination, service disruption or memory corruption, resulting in undefined behavior.Oct 15, 2026
- Medium6.5In versions till , The default rate-limit key resolver, , derives the per-client bucket key from the leftmost element of the request header.EPSS 0.2%Oct 15, 2026
- Medium6.4HPE NonStop SQL/MX Run-Time Statistics - Information disclosure and DoS vulnerabilityOct 15, 2026
- Medium5.4WholesaleX <= 3.0.8 - Unauthenticated Limited Privilege Escalation via 'process_registration'Oct 15, 2026
- Low2.8A crafted input message can cause a buffer overflow in HPE Nonstop KMS Server.Oct 15, 2026
- High7.4A security vulnerability in HPE NonStop SQL/MX SQLCAT may allow an unauthenticated user to perform unauthorized command execution.Oct 15, 2026
- Critical9.3Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in TMS Amelia ameliabooking allows SQL Injection.This issue affects…EPSS 0.2%Oct 15, 2026
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Everest Forms Everest Forms everest-forms allows Stored XSS.This…EPSS 0.1%Oct 15, 2026
- High7.5A vulnerability in HPE NonStop ANSI SQLUTIL may allow a remote unauthenticated actor to cause an affected service to terminate unexpectedly, causing a denial of service.Oct 15, 2026
- High7.5WordPress FluentCart plugin <= 1.7.1 - Sensitive Data Exposure vulnerabilityEPSS 0.2%Oct 15, 2026
- Critical9.8Incorrect Privilege Assignment vulnerability in WP ManageNinja LLC Fluent CRM fluent-crm allows Privilege Escalation.This issue affects Fluent CRM: from n/a through 3.2.5.EPSS 0.3%Oct 15, 2026
- High7.1WordPress BSK PDF Manager plugin <= 3.8.1 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.1%Oct 15, 2026
- High7.6A stack buffer overflow vulnerability in HPE NonStop SQL/MX Executor may potentially result in information disclosure or process crash.Oct 15, 2026
- Medium6.6A heap buffer overflow in HPE NonStop Posix User Threads may allow arbitrary code execution.Oct 15, 2026
- Medium6.6A vulnerability in HPE NonStop Kernel Level Thread Model Lib can cause stack buffer overflow which can allow arbitrary code execution.Oct 15, 2026
- Medium5.2Incomplete cleanup vulnerability in ABB My Control System.EPSS 0.1%Oct 15, 2026
- High8.2A security vulnerability in HPE NonStop HTTP WEBSERVER can cause memory corruption which may result in a system halt.EPSS 0.4%Oct 15, 2026
- High7.1A heap buffer overflow in HPE NonStop Debug Utilities could corrupt resume-execution address and may potentially redirect execution flow.EPSS 0.2%Oct 15, 2026
- High7.1A heap buffer overflow in HPE NonStop Inspect Subsystem could corrupt resume-execution address and may potentially redirect execution flow.EPSS 0.2%Oct 15, 2026
- Medium6.9Unauthenticated authorization bypass in ConstraintSecurityHandler - HTTP method-omission matched by substringEPSS 0.4%Oct 15, 2026