Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium6.9Unauthenticated authorization bypass in ConstraintSecurityHandler - HTTP method-omission matched by substringEPSS 0.4%Oct 15, 2026
- Medium6.9In Eclipse Jetty, across various versions of , and , two or more security constraints with the same http-method-omission set, and no url-patterns, are not combined pro…EPSS 0.4%Oct 15, 2026
- Medium5.6Eclipse Jetty's retains authentication credentials in a serializable object.EPSS 0.1%Oct 15, 2026
- Critical9.3An unauthenticated client may access certain protected resources when using EthereumAuthenticator if the request path contains the configured login path.EPSS 0.5%Oct 15, 2026
- High7.1A heap buffer overflow in HPE NonStop OCAX could corrupt address space and may potentially redirect execution flow.EPSS 0.2%Oct 15, 2026
- Critical9.3A path traversal vulnerability has been reported to affect Qsirch.EPSS 0.6%Oct 15, 2026
- Medium6.3A cross-site scripting (XSS) vulnerability has been reported to affect QuFTP Service.EPSS 0.5%Oct 15, 2026
- Critical9.3An OS command injection vulnerability has been reported to affect HybridDesk Station.EPSS 1.4%Oct 15, 2026
- High8.9A missing authentication for critical function vulnerability has been reported to affect HybridDesk Station.EPSS 0.4%Oct 15, 2026
- High8.8Jetty proxy blacklist performs case-sensitive matching of case-insensitive DNS hostnamesEPSS 0.3%Oct 15, 2026
- Medium4.8A cross-site scripting (XSS) vulnerability has been reported to affect Notes Station 3.EPSS 0.5%Oct 15, 2026
- High8.4An improper isolation or compartmentalization vulnerability has been reported to affect Notes Station 3.EPSS 0.1%Oct 15, 2026
- High8.5An incorrect permission assignment for critical resource vulnerability has been reported to affect Notes Station 3.EPSS 0.1%Oct 15, 2026
- Medium6.9An OS command injection vulnerability has been reported to affect Notes Station 3.EPSS 1.6%Oct 15, 2026
- High8.7An improper link resolution before file access ('link following') vulnerability has been reported to affect Virtualization Station.EPSS 0.5%Oct 15, 2026
- Critical9.4An unix symbolic link (symlink) following vulnerability has been reported to affect QuMagie.EPSS 0.5%Oct 15, 2026
- High8.7An authorization bypass through user-controlled key vulnerability has been reported to affect Video Station.EPSS 0.4%Oct 15, 2026
- High8.6A relative path traversal vulnerability has been reported to affect QuMagie.EPSS 0.5%Oct 15, 2026
- Medium5.3An unix symbolic link (symlink) following vulnerability has been reported to affect Qsync Central.EPSS 0.5%Oct 15, 2026
- Medium5.3A server-side request forgery (SSRF) vulnerability has been reported to affect Download Station.EPSS 0.4%Oct 15, 2026
- High8.7A path traversal vulnerability has been reported to affect Video Station.EPSS 0.5%Oct 15, 2026
- High8.4An incorrect permission assignment for critical resource vulnerability has been reported to affect Download Station.EPSS 0.1%Oct 15, 2026
- Critical9.3A missing authentication for critical function vulnerability has been reported to affect sMedio DTCP MOVE.EPSS 0.5%Oct 15, 2026
- High7.1A SQL injection vulnerability has been reported to affect Video Station.EPSS 0.4%Oct 15, 2026
- High7.1A SQL injection vulnerability has been reported to affect Video Station.EPSS 0.4%Oct 15, 2026