Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium4.3Insufficient data validation in DevTools in Google Chrome on Android prior to 148.0.7778.96 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.May 6, 2026
- High8.3Insufficient validation of untrusted input in Media in Google Chrome on Android prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer proce…May 6, 2026
- High7.7In versions 2.1.63 through 2.1.83 of Claude Code, the folder trust determination logic used the git worktree commondir file without validating its contents.May 5, 2026
- High8.2Sandboxie is an open source sandbox-based isolation software for Windows.May 5, 2026
- Medium4.1A race condition exists in PaperCut MF when processing badge-swipe data from certain HP multifunction devices.May 5, 2026
- Critical9.4In Apache Iceberg, the table's metadata files are control files: they tell readers which data files belong to the table and which table version to read.May 4, 2026
- Critical9.4In plain terms, Apache Polaris is supposed to issue short-lived GCS credentials that only work for one table's files, but a crafted namespace or table name can cause t…May 4, 2026
- Critical9.4Apache Polaris accepts literal characters in namespace and table names.May 4, 2026
- Critical9.4Apache Polaris can issue broad temporary ("vended") storage credentials during staged table creation before the effective table location has been validated or durably reserved.May 4, 2026
- Medium6.5Missing input validation in the MP_REACH_NLRI component of FRRouting (FRR) stable/10.0 to stable/10.6 allows authenticated attackers to cause a Denial of Service (DoS)…May 4, 2026
- Low2.1A security vulnerability has been detected in MindsDB up to 26.01.May 4, 2026
- Low2.1A vulnerability was found in mem0ai mem0 up to 1.0.11.May 1, 2026
- High7.8An issue in the component DirectIo64.sys of PassMark BurnInTest v11.0 Build 1011, OSForensics v11.1 Build 1007, and PerformanceTest v11.1 Build 1004 allows attackers t…EPSS 0.1%May 1, 2026
- Medium6.5IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.4 for Linux, UNIX and Windows (includes Db2 Connect Server) could allow an authenticated user to cause a denial…EPSS 0.3%Apr 30, 2026
- High7.5An issue in open5gs v.2.7.3 allows a remote attacker to cause a denial of service via a crafted PDU Session Modification RequestEPSS 0.3%Apr 30, 2026
- High8.8Improper input validation vulnerability in Progress Software MOVEit Automation allows Privilege Escalation.Apr 30, 2026
- High7.4Insufficient validation of node IDs in Qt SVG module allows arbitrary QML/JavaScript code injection when loading malicious SVG files through the VectorImage component in Qt Quick.EPSS 0.2%Apr 30, 2026
- Medium4.8wget2 accepts a server certificate with incorrect Key Usage (KU) or Extended Key Usage (EKU).EPSS 0.2%Apr 29, 2026
- High7.8An issue in the TVicPort64.sys component of EnTech Taiwan TVicPort Product v4.0, File v5.2.1.0 allows attackers to escalate privileges via sending crafted IOCTL 0x8000…Apr 29, 2026
- Low3.1Insufficient validation of untrusted input.Apr 28, 2026
- High8.3Insufficient validation of untrusted input in Feedback in Google Chrome prior to 147.0.7727.138 allowed a remote attacker who had compromised the renderer process to p…Apr 28, 2026
- Low1.3A vulnerability was found in Grav CMS up to 1.7.49.5/2.0.0-beta.1.Apr 28, 2026
- Medium6.5NVIDIA Flare SDK contains a vulnerability where an Attacker may cause an Improper Input Validation by path traversing.Apr 28, 2026
- Medium5.3Penetration Testing engineers at Amazon have discovered a flaw where the camera system fails to properly handle data supplied in certain requests, causing a service disruption.EPSS 0.2%Apr 28, 2026
- High7.1Parsing logic flaws cause non-signature data to be misidentified as valid signatures when processing malformed form field hierarchies, leading to invalid memory writes…Apr 27, 2026