Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- Medium4.7Cross-Site Scripting via PanelBar Item URLs in Kendo UI for jQueryEPSS 0.2%Oct 15, 2026
- Medium4.7Cross-Site Scripting in FileManager Drag Hints in Kendo UI for jQueryEPSS 0.1%Oct 15, 2026
- Medium6.5Cross-site Scripting (XSS) in Kendo UI for jQuery FileBrowser and ImageBrowserEPSS 0.2%Oct 15, 2026
- High7.5Authorization Bypass Through User-Controlled Key vulnerability in Webba Plugins Webba Booking webba-booking-lite allows Exploiting Incorrectly Configured Access Contro…EPSS 0.3%Oct 15, 2026
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGrill User Registration user-registration allows Stored XSS.…EPSS 0.1%Oct 15, 2026
- High8.4Path Traversal (CWE-22) in the execute_obj function of the archive object viewer (peach.pas) in PeaZip 11.2.0 and earlier on Windows allows an attacker who convinces a…EPSS 0.2%Oct 15, 2026
- Medium6.5Improper Control of Generation of Code ('Code Injection') vulnerability in WPMU DEV Broken Link Checker broken-link-checker allows Code Injection.This issue affects Br…EPSS 0.2%Oct 15, 2026
- Medium4.3A flaw was found in OpenSSH.EPSS 0.3%Oct 15, 2026
- Critical9.8WordPress Link Whisper Free plugin <= 0.9.7 - PHP Object Injection vulnerabilityEPSS 0.3%Oct 15, 2026
- High7.1WordPress Link Whisper Free plugin <= 0.9.7 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.1%Oct 15, 2026
- Critical9.8WordPress Frontend Admin by DynamiApps plugin <= 3.29.13 - Privilege Escalation vulnerabilityEPSS 0.3%Oct 15, 2026
- Critical9.3WordPress Link Whisper Free plugin <= 0.9.7 - SQL Injection vulnerabilityEPSS 0.2%Oct 15, 2026
- High7.1WordPress Social Share Buttons plugin <= 1.31 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.1%Oct 15, 2026
- High8.2Enterprise Architect is vulnerable to XML External Entity (XXE) injection in the XSLT Debugger feature.EPSS 0.3%Oct 15, 2026
- Critical9.3ipv4: validate checksum_start before completing checksumEPSS 21.0%Oct 15, 2026
- High7.5In versions till , The default rate-limit key resolver, , derives the per-client bucket key from the leftmost element of the request header.EPSS 0.3%Oct 15, 2026
- UnknownIn versions till , The default rate-limit key resolver, , derives the per-client bucket key from the leftmost element of the request header.EPSS 0.2%Oct 15, 2026
- Critical9.3WordPress Mang Board WP plugin <= 2.4.4 - SQL Injection vulnerabilityEPSS 0.3%Oct 15, 2026
- High7.1WordPress User Registration plugin <= 5.2.8 - Broken Access Control vulnerabilityEPSS 0.2%Oct 15, 2026
- High8.8Incorrect Privilege Assignment vulnerability in WP ManageNinja LLC Fluent CRM fluent-crm allows Privilege Escalation.This issue affects Fluent CRM: from n/a through 3.2.5.EPSS 0.3%Oct 15, 2026
- Unknownipv4: free inet_opt and ireq_opt after an RCU grace periodOct 15, 2026
- High7.3A vulnerability in HPE NonStop SQL/MX UDR SERVER may allow a crafted message to cause process termination, service disruption or memory corruption, resulting in undefined behavior.EPSS 0.1%Oct 15, 2026
- Medium6.5In versions till , The default rate-limit key resolver, , derives the per-client bucket key from the leftmost element of the request header.EPSS 0.2%Oct 15, 2026
- Medium6.4HPE NonStop SQL/MX Run-Time Statistics - Information disclosure and DoS vulnerabilityEPSS 0.2%Oct 15, 2026
- Medium5.4WholesaleX <= 3.0.8 - Unauthenticated Limited Privilege Escalation via 'process_registration'Oct 15, 2026