Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium6.5A flaw was found in DPDK lib/vhost vhost-crypto.Oct 14, 2026
- Medium6.5A flaw was found in DPDK lib/vhost vhost-crypto.Oct 14, 2026
- High8.8A flaw was found in DPDK lib/vhost.Oct 14, 2026
- Medium6.5A flaw was found in DPDK lib/vhost.Oct 14, 2026
- High8.8The FV Flowplayer Video Player plugin for WordPress is vulnerable to Limited Arbitrary File Upload in all versions up to, and including, 7.5.54.7212 via the check_mime…Oct 14, 2026
- High8.1ServiceNext contains an insecure direct object reference (IDOR) in the /api/Usuario/GetUsuarios endpoint, which accepts a user-controlled numeric ID in the request bod…Oct 14, 2026
- Critical9.3Redash is a package for data visualization and sharing.Oct 14, 2026
- Medium4.9Redash is a package for data visualization and sharing.Oct 14, 2026
- High8.7The NetX Secure DTLS server sends a HelloVerifyRequest carrying a freshly generated cookie, but never checks the cookie a client returns.Oct 14, 2026
- High8.7computes the certificate signature's length as without first checking that is non-zero.Oct 14, 2026
- High7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SimplyRETS SimplyRETS Real Estate IDX simply-rets allows Reflecte…Oct 14, 2026
- High8.1Ludwig is a low-code framework for building custom LLMs, neural networks, and other AI models.Oct 14, 2026
- Medium6.5Appium is a cross-platform automation framework for all kinds of apps, built on top of the W3C WebDriver protocol.Oct 14, 2026
- Critical9.3When a TLS 1.3 client processes a HelloRetryRequest, it copies the server's cookie into its second ClientHello without checking that the cookie fits in the outgoing packet.Oct 14, 2026
- High8.4The GUIX binary resource (theme) loader sizes its arena and populates it in two separate passes that traverse the resource file with independent cursor arithmetic.Oct 14, 2026
- High7.5Improper Control of Generation of Code ('Code Injection') vulnerability in VillaTheme Salevo woo-boost-sales allows Code Injection.This issue affects Salevo: from n/a…Oct 14, 2026
- Critical9.1In Eclipse Vert.x versions [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Vert.x HTTP client relies on an SSL context for efficiency purpose, the key of this c…Oct 14, 2026
- High8.7An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS on MX Series with SPC3 allows…Oct 14, 2026
- Critical9.3A Stack-based Buffer Overflow vulnerability in the httpd process of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated network attacker to cause…Oct 14, 2026
- Critical9.3A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a configured BGP/EVPN peer to…Oct 14, 2026
- High8.7A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjacent L…Oct 14, 2026
- High8.7A Stack-based Buffer Overflow vulnerability in the authd Juniper Networks Junos OS and Junos OS Evolved allows a network attacker with SNMP read access to execute code…Oct 14, 2026
- High8.7An Out-of-bounds Write vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an eBGP peer which has not negotiate…Oct 14, 2026
- High7.1A Reachable Assertion vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent OSPF peer to cause a deni…Oct 14, 2026
- High7.1An Integer Overflow or Wraparound vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated adjace…Oct 14, 2026