Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- Critical9.3An OS command injection vulnerability has been reported to affect HybridDesk Station.EPSS 1.1%Oct 15, 2026
- High8.9A missing authentication for critical function vulnerability has been reported to affect HybridDesk Station.EPSS 0.2%Oct 15, 2026
- High8.8Jetty proxy blacklist performs case-sensitive matching of case-insensitive DNS hostnamesEPSS 0.3%Oct 15, 2026
- Medium4.8A cross-site scripting (XSS) vulnerability has been reported to affect Notes Station 3.EPSS 0.3%Oct 15, 2026
- High8.4An improper isolation or compartmentalization vulnerability has been reported to affect Notes Station 3.EPSS 0.1%Oct 15, 2026
- High8.5An incorrect permission assignment for critical resource vulnerability has been reported to affect Notes Station 3.EPSS 0.1%Oct 15, 2026
- Medium6.9An OS command injection vulnerability has been reported to affect Notes Station 3.EPSS 1.6%Oct 15, 2026
- High8.7An improper link resolution before file access ('link following') vulnerability has been reported to affect Virtualization Station.EPSS 0.5%Oct 15, 2026
- Critical9.4An unix symbolic link (symlink) following vulnerability has been reported to affect QuMagie.EPSS 0.5%Oct 15, 2026
- High8.7An authorization bypass through user-controlled key vulnerability has been reported to affect Video Station.EPSS 0.4%Oct 15, 2026
- High8.6A relative path traversal vulnerability has been reported to affect QuMagie.EPSS 0.5%Oct 15, 2026
- Medium5.3An unix symbolic link (symlink) following vulnerability has been reported to affect Qsync Central.EPSS 0.5%Oct 15, 2026
- Medium5.3A server-side request forgery (SSRF) vulnerability has been reported to affect Download Station.EPSS 0.4%Oct 15, 2026
- High8.7A path traversal vulnerability has been reported to affect Video Station.EPSS 0.5%Oct 15, 2026
- High8.4An incorrect permission assignment for critical resource vulnerability has been reported to affect Download Station.EPSS 0.1%Oct 15, 2026
- Critical9.3A missing authentication for critical function vulnerability has been reported to affect sMedio DTCP MOVE.EPSS 0.5%Oct 15, 2026
- High7.1A SQL injection vulnerability has been reported to affect Video Station.EPSS 0.5%Oct 15, 2026
- High7.1A SQL injection vulnerability has been reported to affect Video Station.EPSS 0.5%Oct 15, 2026
- High7.2A path traversal vulnerability has been reported to affect Qsync Central.EPSS 0.5%Oct 15, 2026
- High7.1A heap buffer overflow in HPE NonStop NDSREST could corrupt resume-execution address and may potentially redirect execution flow.EPSS 0.1%Oct 15, 2026
- Medium6.9On request the script creates a world-readable debug log in /var/log/sdbootutil.log.EPSS 0.1%Oct 15, 2026
- Medium5.9There are two invocations of to display a QR code for scanning.EPSS 0.1%Oct 15, 2026
- High8.2In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the TDS message decoder in the Vert.x MSSQL client (vertx-mssql-client…EPSS 0.3%Oct 15, 2026
- High7.5A remote attacker may send a specially crafted network packet that causes the affected application to perform an out-of-bounds memory read due to insufficient validati…EPSS 0.5%Oct 15, 2026
- Critical9.3Authentication bypass vulnerability in Stela, versions prior to 1.60.1, due to the use of a cookie named “authProcess” without validating its integrity.EPSS 0.4%Oct 15, 2026