Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- High7.5kin-openapi is a Go project for handling OpenAPI files.EPSS 0.4%Oct 15, 2026
- High7.5kin-openapi is a Go project for handling OpenAPI files.EPSS 0.3%Oct 15, 2026
- High7.5kin-openapi is a Go project for handling OpenAPI files.EPSS 0.4%Oct 15, 2026
- High7.4kin-openapi is a Go project for handling OpenAPI files.EPSS 0.5%Oct 15, 2026
- Medium5.3kin-openapi is a Go project for handling OpenAPI files.EPSS 0.5%Oct 15, 2026
- Medium5.3kin-openapi is a Go project for handling OpenAPI files.EPSS 0.4%Oct 15, 2026
- Medium5.3kin-openapi is a Go project for handling OpenAPI files.EPSS 0.5%Oct 15, 2026
- Medium5.3A security vulnerability has been detected in sgl-project SGLang up to 0.5.19.EPSS 0.3%Oct 14, 2026
- High7.7n8n before 2.41.4 and 2.42.x before 2.42.1 contains a prototype pollution vulnerability in the MCP workflow-validation tool, whose interpreter evaluates caller-supplie…EPSS 0.3%Oct 14, 2026
- Medium6.1n8n before 2.41.4 and 2.42.0 contains an authorization bypass in the agent chat resume endpoint, which accepts a run identifier from the request body without verifying…EPSS 0.3%Oct 14, 2026
- High7.0n8n before 2.41.4 and 2.42.x before 2.42.1 contains an SQL injection vulnerability in version 1 of the Microsoft SQL node, which substitutes Query field expression val…EPSS 0.3%Oct 14, 2026
- High7.1FreeRDP 3.3.0 before 3.32.0, when built with WINPR_UTILS_IMAGE_JPEG=ON, has a heap-based out-of-bounds write in winpr_convert_from_jpeg because grayscale JPEG buffers…EPSS 0.2%Oct 14, 2026
- High8.7FreeRDP shadow server from 3.0.0 before 3.32.0 dispatches input PDUs during the Confirm Active state before authentication, allowing unauthenticated attackers to injec…EPSS 0.3%Oct 14, 2026
- Medium6.1FreeRDP 2.0.0 before 3.32.0, when built with WITH_LAME=ON and WITH_DSP_FFMPEG=OFF, has a heap-based buffer overflow in freerdp_dsp_decode_mp3 because the right-channel…EPSS 0.3%Oct 14, 2026
- High7.1FreeRDP from 3.0.0 before 3.32.0 contains an infinite loop vulnerability in http_response_recv() that allows malicious gateways to exhaust client CPU via crafted Conte…EPSS 0.3%Oct 14, 2026
- Medium6.3FreeRDP 3.0.0 before 3.32.0 allows HTTP header injection in its proxy because a lone LF in the target portion of a routing token (Cookie: msts=) is not rejected and is…EPSS 0.2%Oct 14, 2026
- High7.1FreeRDP from 2.0.0 before 3.32.0 contains a null pointer dereference vulnerability that allows malicious RDP servers to crash clients by sending out-of-lifecycle serial IRPs.EPSS 0.3%Oct 14, 2026
- High8.2FreeRDP from 3.0.0-beta1 before 3.32.0 fails to enforce cumulative or absolute size limits when reassembling RDPDR channel fragments in the proxy.EPSS 0.3%Oct 14, 2026
- High7.1FreeRDP from 2.0.0 before 3.32.0 contains a memory exhaustion vulnerability in wts_read_drdynvc_data_first that allows authenticated clients to force servers to commit large memoryEPSS 0.3%Oct 14, 2026
- Medium5.3FreeRDP versions 3.13.0 before 3.32.0 contain a resource retention flaw in drive_process_irp_create, which registers an opened local file in the drive dictionary befor…EPSS 0.2%Oct 14, 2026
- High8.2FreeRDP before 3.32.0 fails to close prior serial handles in serial_process_irp_create, allowing a malicious RDP server to exhaust file descriptors.EPSS 0.3%Oct 14, 2026
- High7.1FreeRDP versions from 3.0.0 before 3.32.0 contain a null pointer dereference in the rdpsnd channel when a fragment sets CHANNEL_FLAG_LAST without CHANNEL_FLAG_FIRST.EPSS 0.3%Oct 14, 2026
- Low2.1A weakness has been identified in sgl-project SGLang up to 0.5.19.EPSS 0.3%Oct 14, 2026
- High7.5Omada Controller's MSP and OpenAPI certificate/private-key management APIs do not properly enforce administrative authorization, allowing an authenticated user to perf…EPSS 0.2%Oct 14, 2026
- UnknownCVE-2026-106485Oct 14, 2026