Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- High8.7An improper link resolution before file access ('link following') vulnerability has been reported to affect Virtualization Station.EPSS 0.5%Oct 15, 2026
- Critical9.4An unix symbolic link (symlink) following vulnerability has been reported to affect QuMagie.EPSS 0.5%Oct 15, 2026
- High8.7An authorization bypass through user-controlled key vulnerability has been reported to affect Video Station.EPSS 0.4%Oct 15, 2026
- High8.6A relative path traversal vulnerability has been reported to affect QuMagie.EPSS 0.5%Oct 15, 2026
- Medium5.3An unix symbolic link (symlink) following vulnerability has been reported to affect Qsync Central.EPSS 0.5%Oct 15, 2026
- Medium5.3A server-side request forgery (SSRF) vulnerability has been reported to affect Download Station.EPSS 0.4%Oct 15, 2026
- High8.7A path traversal vulnerability has been reported to affect Video Station.EPSS 0.5%Oct 15, 2026
- High8.4An incorrect permission assignment for critical resource vulnerability has been reported to affect Download Station.EPSS 0.1%Oct 15, 2026
- Critical9.3A missing authentication for critical function vulnerability has been reported to affect sMedio DTCP MOVE.EPSS 0.5%Oct 15, 2026
- High7.1A SQL injection vulnerability has been reported to affect Video Station.EPSS 0.4%Oct 15, 2026
- High7.1A SQL injection vulnerability has been reported to affect Video Station.EPSS 0.4%Oct 15, 2026
- High7.2A path traversal vulnerability has been reported to affect Qsync Central.EPSS 0.5%Oct 15, 2026
- High7.1A heap buffer overflow in HPE NonStop NDSREST could corrupt resume-execution address and may potentially redirect execution flow.EPSS 0.1%Oct 15, 2026
- Medium6.9On request the script creates a world-readable debug log in /var/log/sdbootutil.log.EPSS 0.1%Oct 15, 2026
- Medium5.9There are two invocations of to display a QR code for scanning.EPSS 0.1%Oct 15, 2026
- High8.2In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the TDS message decoder in the Vert.x MSSQL client (vertx-mssql-client…EPSS 0.3%Oct 15, 2026
- High7.5A remote attacker may send a specially crafted network packet that causes the affected application to perform an out-of-bounds memory read due to insufficient validati…EPSS 0.5%Oct 15, 2026
- Critical9.3Authentication bypass vulnerability in Stela, versions prior to 1.60.1, due to the use of a cookie named “authProcess” without validating its integrity.EPSS 0.4%Oct 15, 2026
- High8.0A directory traversal vulnerability in HPE NonStop Python 3.x could allow attackers to overwrite arbitrary files via a ..EPSS 0.5%Oct 15, 2026
- High8.8In Eclipse Jetty, across various versions of , and , the Jakarta Spec authoritative url-pattern rules for mixed annotation, and defined on the same were not being applied if the haEPSS 0.3%Oct 15, 2026
- Medium4.0HPE NonStop EMS Distributor is vulnerable to buffer overflow condition that may result in undesirable behavior.EPSS 0.1%Oct 15, 2026
- High8.2WebCTI service for Slican IPx telephone exchanges stores temporary subscriber password in plaintext.EPSS 0.3%Oct 15, 2026
- High8.7WebCTI service for Slican IPx telephone exchanges is vulnerable to SQL Injection in /webcti/admin_json.php enpoint.EPSS 0.2%Oct 15, 2026
- High8.2Slican telephone exchanges use symmetric encryption for TCP/IP communication.EPSS 0.1%Oct 15, 2026
- High8.2When Jetty's make a request to a server through a forward proxy, the server may reply with a 407 (Proxy Authentication Required).EPSS 0.3%Oct 15, 2026