Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High8.8In Eclipse Jetty, across various versions of , and , the Jakarta Spec authoritative url-pattern rules for mixed annotation, and defined on the same were not being appl…EPSS 0.3%Oct 15, 2026
- Medium4.0HPE NonStop EMS Distributor is vulnerable to buffer overflow condition that may result in undesirable behavior.EPSS 0.1%Oct 15, 2026
- High8.2WebCTI service for Slican IPx telephone exchanges stores temporary subscriber password in plaintext.EPSS 0.3%Oct 15, 2026
- High8.7WebCTI service for Slican IPx telephone exchanges is vulnerable to SQL Injection in /webcti/admin_json.php enpoint.EPSS 0.2%Oct 15, 2026
- High8.2Slican telephone exchanges use symmetric encryption for TCP/IP communication.EPSS 0.1%Oct 15, 2026
- High8.2When Jetty's make a request to a server through a forward proxy, the server may reply with a 407 (Proxy Authentication Required).EPSS 0.3%Oct 15, 2026
- High8.2In Eclipse Jetty, HttpClient may receive a redirect of the form: If an attacker is able to control the redirects, then HttpClient matches authentication credentials ag…EPSS 0.3%Oct 15, 2026
- Medium6.9In Eclipse Jetty, and can be configured to forward requests to template URIs such as , where is the request path in context.EPSS 0.3%Oct 15, 2026
- UnknownCGA-xxc6-5p9r-v8h7Oct 15, 2026
- Critical9.4An arbitrary operation vulnerability in GENESIS64, ICONICS Suite, Hyper Historian, AnalytiX, MobileHMI, and MC Works64EPSS 0.2%Oct 15, 2026
- High7.1An authentication bypass vulnerability in GENESIS, GENESIS64, ICONICS Suite, Hyper Historian, AnalytiX, MobileHMI, IoTWorX, MC Works64, GENESIS32 and BizVizEPSS 0.1%Oct 15, 2026
- Medium5.1"Handmade Marketplace App - Creema" provided by CREEMA LTD.EPSS 0.2%Oct 15, 2026
- Critical9.2An authentication bypass vulnerability in GENESIS, GENESIS64, ICONICS Suite, Hyper Historian, AnalytiX, MobileHMI, IoTWorX, MC Works64, GENESIS32 and BizVizEPSS 0.3%Oct 15, 2026
- UnknownMalicious code in py-worm (PyPI)Oct 15, 2026
- Medium6.9JVN#94004488: Smartphone application "Vehicle Inspection Certificate Viewer" vulnerable to sensitive information disclosureEPSS 0.2%Oct 15, 2026
- High8.7In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], a gRPC endpoint does have a configurable per message maximum size in b…EPSS 0.3%Oct 15, 2026
- High8.2In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Eclipse Vert.x MQTT (vertx-mqtt) MqttClient stores every inbound Q…EPSS 0.3%Oct 15, 2026
- Medium5.4"ゲオアプリ" provided by GEO CORPORATION is vulnerable to improper authorization in handler for a custom URL scheme.EPSS 0.2%Oct 15, 2026
- Medium5.1JVN#40460777: Multiple vulnerabilities in "ゲオアプリ"EPSS 0.1%Oct 15, 2026
- High8.7In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the uniqueItems keyword validation uses an O(n²) pairwise comparison l…EPSS 0.4%Oct 15, 2026
- High8.0Steve doesn’t verify a server’s certificate and is susceptible to man-in-the-middle (MitM) attacksEPSS 0.3%Oct 15, 2026
- High8.2In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the MySQL message decoder aggregates inbound multi-packet payloads int…EPSS 0.3%Oct 15, 2026
- High8.5Rancher users who can create Projects can gain access to arbitrary projectsEPSS 0.4%Oct 15, 2026
- UnknownMalicious code in py-sock2 (PyPI)Oct 15, 2026
- High8.2In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the PostgreSQL message decoder reads the 4-byte message length field f…EPSS 0.3%Oct 15, 2026