Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium5.3Contao: Protected page content is disclosed to anonymous visitors after contao.search.index_protected is disabledEPSS 0.3%Oct 9, 2026
- Medium5.3Contao: The registration module re-sends activation mailsEPSS 0.3%Oct 9, 2026
- Low3.5Contao: Cross-site request forgery in custom backend actionsEPSS 0.1%Oct 9, 2026
- Medium5.3Contao: Path traversal in the images controllerEPSS 0.3%Oct 9, 2026
- Critical9.3Contao: Cross-site scripting in the comments bundleEPSS 0.3%Oct 9, 2026
- Medium4.3Contao: Improper access control in the preview links moduleEPSS 0.2%Oct 9, 2026
- Medium4.3Contao: Improper access control in the table access voterEPSS 0.2%Oct 9, 2026
- UnknownChecksum bypass for golang.org/fips140 in cmd/goEPSS 0.1%Oct 8, 2026
- CriticalHazelcast allows arbitrary member memory access by low-privileged clientEPSS 0.4%Oct 8, 2026
- HighHazelcast has an authorization bypass in IMap Predicates APIEPSS 0.4%Oct 8, 2026
- Medium6.8AsyncHttpClient CookieStore Silently Overrides Caller's Explicit Cookie Header via setHeader (Bypass of CVE-2024-53990 Fix)EPSS 0.3%Oct 8, 2026
- Medium6.8AsyncHttpClient: Cookies received over plaintext HTTP can plant, overwrite or delete Secure cookies set over HTTPSEPSS 0.4%Oct 8, 2026
- High7.5AsyncHttpClient: Unbounded WebSocket permessage-deflate decompression enables a decompression-bomb denial of service when compression is enabledEPSS 0.4%Oct 8, 2026
- High7.4AsyncHttpClient: Pooled connections can still be shared across NTLM, Negotiate and proxy loginsEPSS 0.2%Oct 8, 2026
- UnknownAsyncHttpClient: Cookie Domain attribute is not checked against the public suffix list, so a cookie can be set for co.ukEPSS 0.3%Oct 8, 2026
- HighPayload: SQL injection in SQLite/PostgresEPSS 0.3%Oct 7, 2026
- High8.7Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer VulnerabilityKEVEPSS 0.6%Oct 3, 2026
- High8.8ZDI-26-751: Microsoft Windows dxgkrnl Time-Of-Check Time-Of-Use Local Privilege Escalation VulnerabilityEPSS 0.3%Oct 1, 2026
- Critical9.8Fortinet FortiMail Path Traversal VulnerabilityKEVEPSS 2.2%Oct 1, 2026
- High7.5league/commonmark: Quadratic-time denial of service in the GitHub Flavored Markdown Table extension block-start scanEPSS 0.4%Sep 30, 2026
- Critical9.4Zammad GmbH Zammad Improper Privilege Management VulnerabilityKEVEPSS 0.5%Sep 30, 2026
- Critical9.4Zammad GmbH Zammad Session Fixation VulnerabilityKEVEPSS 1.3%Sep 30, 2026
- High7.2ZDI-26-750: WatchGuard FireWare OS spamd statushdlr Stack-based Buffer Overflow Remote Code Execution VulnerabilityEPSS 0.4%Sep 30, 2026
- High7.5ZDI-26-749: WatchGuard FireWare OS samld SAMLSession Deserialization of Untrusted Data Remote Code Execution VulnerabilityEPSS 0.4%Sep 30, 2026
- Critical9.8Cisco Catalyst SD-WAN Manager Hex Encoding VulnerabilityKEVEPSS 1.8%Sep 30, 2026
1,924 records · page 1 of 77
PreviousNext