Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium6.9Unvalidated HTTP/1 request-target authority lets a client choose conn.host and conn.port in BanditOct 15, 2026
- Medium5.3RabbitMQ is a messaging and streaming broker.EPSS 0.4%Oct 14, 2026
- Critical9.2An Improper Validation of Syntactic Correctness of Input vulnerability in the VPN daemon of Juniper Networks Junos OS on SRX Series allows an authenticated, network-ba…EPSS 0.5%Oct 14, 2026
- Medium6.9Tink-go 2.8.0 Keyset Validation Bypass via NewHandleWithNoSecretsEPSS 0.2%Oct 12, 2026
- High7.5A flaw was found in Keycloak.May 19, 2026
- High7.1Denial-of-service condition in M-Files Server versions before 26.5.16015.0, before 26.2 LTS, and before 25.8 LTS SR3 allows an authenticated user to cause the MFserver…May 18, 2026
- Critical9.1Netty is an asynchronous, event-driven network application framework.May 13, 2026
- High8.7In Eclipse Open9J versions 0.21 to 0.58, a pre-authentication remote attacker can crash JITServer by sending a 32-byte crafted TCP message.May 5, 2026
- High8.3Improper validation of bash commands in Snowflake Cortex Code CLI versions prior to 1.0.25 allowed subsequent commands to execute outside the sandbox.Apr 16, 2026
- High7.5Net::CIDR::Lite versions before 0.23 for Perl does not validate IPv6 group count, which may allow IP ACL bypass.Apr 10, 2026
- High8.7An Improper Validation of Syntactic Correctness of Input vulnerability in the IPsec library used by kmd and iked of Juniper Networks Junos OS on SRX Series and MX Seri…Apr 9, 2026
- Medium6.5Rack is a modular Ruby web server interface.Apr 2, 2026
- High7.5NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system.Mar 25, 2026
- High7.5NATS-Server is a High-Performance server for NATS.io, a cloud and edge native messaging system.Mar 25, 2026
- Medium5.4A vulnerability in the Lobby Ambassador web-based management API of Cisco IOS XE Software could allow an authenticated, remote attacker to elevate their privileges and…Mar 25, 2026
- Medium5.0IBM QRadar SIEM 7.5.0 through 7.5.0 Update Package 14 could allow an attacker with access to one tenant to access hostname data from another tenant's account.Mar 19, 2026
- Medium5.5A flaw was found in libsoup, a library used by applications to send network requests.Mar 17, 2026
- High7.5Incorrect parsing of IPv6 host literals in net/urlEPSS 0.8%Mar 6, 2026
- Medium5.3Improper validation of API end-point in 2N Access Commander version 3.4.2 and prior allows attacker to bypass password policy for backup file encryption.Mar 4, 2026
- Medium6.3A flaw was found in uv.Feb 27, 2026
20 records · page 1 of 1
PreviousNext