Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- Critical9.8Incorrect Privilege Assignment vulnerability in WP ManageNinja LLC Fluent CRM fluent-crm allows Privilege Escalation.This issue affects Fluent CRM: from n/a through 3.2.5.EPSS 0.3%Oct 15, 2026
- High7.1WordPress BSK PDF Manager plugin <= 3.8.1 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.1%Oct 15, 2026
- High7.6A stack buffer overflow vulnerability in HPE NonStop SQL/MX Executor may potentially result in information disclosure or process crash.EPSS 0.2%Oct 15, 2026
- Medium6.6A heap buffer overflow in HPE NonStop Posix User Threads may allow arbitrary code execution.EPSS 0.1%Oct 15, 2026
- Medium6.6A vulnerability in HPE NonStop Kernel Level Thread Model Lib can cause stack buffer overflow which can allow arbitrary code execution.EPSS 0.1%Oct 15, 2026
- Medium5.2Incomplete cleanup vulnerability in ABB My Control System.EPSS 0.1%Oct 15, 2026
- High8.2A security vulnerability in HPE NonStop HTTP WEBSERVER can cause memory corruption which may result in a system halt.EPSS 0.4%Oct 15, 2026
- High7.1A heap buffer overflow in HPE NonStop Debug Utilities could corrupt resume-execution address and may potentially redirect execution flow.EPSS 0.2%Oct 15, 2026
- High7.1A heap buffer overflow in HPE NonStop Inspect Subsystem could corrupt resume-execution address and may potentially redirect execution flow.EPSS 0.2%Oct 15, 2026
- Medium6.9Unauthenticated authorization bypass in ConstraintSecurityHandler - HTTP method-omission matched by substringEPSS 0.4%Oct 15, 2026
- Medium6.9In Eclipse Jetty, across various versions of , and , two or more security constraints with the same http-method-omission set, and no url-patterns, are not combined properly per JakEPSS 0.4%Oct 15, 2026
- Medium5.6Eclipse Jetty's retains authentication credentials in a serializable object.EPSS 0.1%Oct 15, 2026
- Critical9.3An unauthenticated client may access certain protected resources when using EthereumAuthenticator if the request path contains the configured login path.EPSS 0.5%Oct 15, 2026
- High7.1A heap buffer overflow in HPE NonStop OCAX could corrupt address space and may potentially redirect execution flow.EPSS 0.2%Oct 15, 2026
- Critical9.3A path traversal vulnerability has been reported to affect Qsirch.EPSS 0.4%Oct 15, 2026
- Medium6.3A cross-site scripting (XSS) vulnerability has been reported to affect QuFTP Service.EPSS 0.3%Oct 15, 2026
- Critical9.3An OS command injection vulnerability has been reported to affect HybridDesk Station.EPSS 1.1%Oct 15, 2026
- High8.9A missing authentication for critical function vulnerability has been reported to affect HybridDesk Station.EPSS 0.2%Oct 15, 2026
- High8.8Jetty proxy blacklist performs case-sensitive matching of case-insensitive DNS hostnamesEPSS 0.3%Oct 15, 2026
- Medium4.8A cross-site scripting (XSS) vulnerability has been reported to affect Notes Station 3.EPSS 0.3%Oct 15, 2026
- High8.4An improper isolation or compartmentalization vulnerability has been reported to affect Notes Station 3.EPSS 0.1%Oct 15, 2026
- High8.5An incorrect permission assignment for critical resource vulnerability has been reported to affect Notes Station 3.EPSS 0.1%Oct 15, 2026
- Medium6.9An OS command injection vulnerability has been reported to affect Notes Station 3.EPSS 1.6%Oct 15, 2026
- High8.7An improper link resolution before file access ('link following') vulnerability has been reported to affect Virtualization Station.EPSS 0.5%Oct 15, 2026
- Critical9.4An unix symbolic link (symlink) following vulnerability has been reported to affect QuMagie.EPSS 0.5%Oct 15, 2026