Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Critical9.3WordPress Mang Board WP plugin <= 2.4.4 - SQL Injection vulnerabilityEPSS 0.3%Oct 15, 2026
- High7.1WordPress User Registration plugin <= 5.2.8 - Broken Access Control vulnerabilityEPSS 0.2%Oct 15, 2026
- High8.8Incorrect Privilege Assignment vulnerability in WP ManageNinja LLC Fluent CRM fluent-crm allows Privilege Escalation.This issue affects Fluent CRM: from n/a through 3.2.5.EPSS 0.3%Oct 15, 2026
- Unknownipv4: free inet_opt and ireq_opt after an RCU grace periodOct 15, 2026
- High7.3A vulnerability in HPE NonStop SQL/MX UDR SERVER may allow a crafted message to cause process termination, service disruption or memory corruption, resulting in undefined behavior.Oct 15, 2026
- UnknownMalicious code in idlive-face-capture-web-development (npm)Oct 15, 2026
- UnknownCVE-2026-97858 is listed by Guangzhou Juan IoT Technology EseeCloud.Oct 15, 2026
- UnknownCVE-2026-63252 is listed by Eclipse Foundation Eclipse Milo.Oct 15, 2026
- UnknownCVE-2026-63248 is listed by Eclipse Foundation Eclipse Milo.Oct 15, 2026
- UnknownCVE-2026-62927 is listed by Eclipse Foundation Eclipse Milo.Oct 15, 2026
- UnknownCVE-2026-61387 is listed by Eclipse Foundation Eclipse Milo.Oct 15, 2026
- UnknownCVE-2026-60007 is listed by Eclipse Foundation Eclipse Milo.Oct 15, 2026
- UnknownCVE-2026-58080 is listed by Eclipse Foundation Eclipse Milo.Oct 15, 2026
- UnknownCVE-2026-107617 is listed by Guangzhou Juan IoT Technology EseeCloud.Oct 15, 2026
- UnknownCVE-2026-107362 is listed by CISA Malcolm.Oct 15, 2026
- UnknownCVE-2026-107337 is listed by CISA Malcolm.Oct 15, 2026
- UnknownCVE-2026-107336 is listed by CISA Malcolm.Oct 15, 2026
- UnknownCVE-2026-107335 is listed by CISA Malcolm.Oct 15, 2026
- UnknownCVE-2026-107334 is listed by CISA Malcolm.Oct 15, 2026
- UnknownCVE-2026-107333 is listed by CISA Malcolm.Oct 15, 2026
- UnknownCVE-2026-105664 is listed by Guangzhou Juan IoT Technology EseeCloud.Oct 15, 2026
- Medium6.5In versions till , The default rate-limit key resolver, , derives the per-client bucket key from the leftmost element of the request header.EPSS 0.2%Oct 15, 2026
- Medium6.4HPE NonStop SQL/MX Run-Time Statistics - Information disclosure and DoS vulnerabilityOct 15, 2026
- UnknownMalicious code in proxy-rubikis (PyPI)Oct 15, 2026
- Medium5.4WholesaleX <= 3.0.8 - Unauthenticated Limited Privilege Escalation via 'process_registration'Oct 15, 2026