Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- Medium5.9A buffer overflow vulnerability in HPE NonStop TELSERV can cause memory corruption and DoS.EPSS 0.2%Oct 15, 2026
- High7.5Backdrop CMS Core 1.35.x before 1.35.2 and 1.34.x before 1.34.6 mishandles tokens.EPSS 0.2%Oct 15, 2026
- High7.6A vulnerability in HPE NonStop QIOMON allows an out-of-bounds write that can corrupt buffer data.EPSS 0.2%Oct 15, 2026
- High8.7A vulnerability in HPE NonStop CIPSAM allows an out-of-bounds write that can corrupt buffer data.EPSS 0.1%Oct 15, 2026
- High8.7IntentKit 2.6.3 Executor Tool Authorization Bypass via ToolNodeEPSS 0.4%Oct 15, 2026
- High7.5A vulnerability in the finger daemon of HPE NonStop TCP/IP UTILITIES could allow an unauthenticated remote attacker to cause a denial of service.EPSS 0.3%Oct 15, 2026
- High8.7Ellucian WebAdvisor 3.2 Unauthenticated XXE InjectionEPSS 0.3%Oct 15, 2026
- Medium5.3HPE NonStop TCP/IP UTILITIES - Denial of Service vulnerabilityEPSS 0.2%Oct 15, 2026
- High8.7MoviePilot 3.1.5 Command Injection via ExecuteCommandToolEPSS 1.0%Oct 15, 2026
- High7.5A security vulnerability in HPE NonStop SNMP Trap Multiplexer may cause memory corruptionEPSS 0.3%Oct 15, 2026
- Medium5.3ApostropheCMS before 4.33.0 allows authentication bypass for REST API page reading, as demonstrated by a /api/v1/@apostrophecms/page?all=1 call.EPSS 0.2%Oct 15, 2026
- High8.7SODOLA SL902-SWTGW124AS Buffer Overflow DoS via Multipart Boundary ParserEPSS 0.4%Oct 15, 2026
- Low2.8A vulnerability was detected in ggml-org whisper.cpp up to 1.9.4.EPSS 0.1%Oct 15, 2026
- High7.5kin-openapi is a Go project for handling OpenAPI files.Oct 15, 2026
- High7.5Junrar is an open source Java RAR archive library.Oct 15, 2026
- Mediumcontainerd: Unpack DoS via repeated opaque whiteoutsOct 15, 2026
- Critical10.0Podman: The command can be instructed to disable almost all sandboxing by image annotationOct 15, 2026
- Medium5.3MessagePack: Nested arrays can blow past buffer length limitsOct 15, 2026
- Critical9.8The Theme My Login plugin for WordPress is vulnerable to privilege escalation via account takeover in versions up to, and including, 7.2.1.KEVEPSS 0.3%Oct 15, 2026
- Medium6.8Distribution: Client does not verify returned content against requested digestEPSS 0.2%Oct 15, 2026
- UnknownNginx UI: OTP secure-session step-up can be bypassed via MCP configuration toolsEPSS 0.3%Oct 15, 2026
- UnknownNginx UI: Standalone short tokens survive administrative revocation in cache and authenticate again after account re-enableEPSS 0.2%Oct 15, 2026
- UnknownNginx UI: MCP Bypasses Directive Validation — Authenticated RCEEPSS 0.6%Oct 15, 2026
- UnknownNginx UI: MCP nginx_config_add skips config directive validation → authenticated nginx directive injection (RCE on the official image)EPSS 0.4%Oct 15, 2026
- UnknownNginx UI: nginx config directive denylist (ValidateConfigFile) is bypassable via same-line ";" separation → authenticated directive injection (RCE on the official image)EPSS 0.4%Oct 15, 2026