Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- High7.4Insufficient validation of node IDs in Qt SVG module allows arbitrary QML/JavaScript code injection when loading malicious SVG files through the VectorImage component in Qt Quick.EPSS 0.2%Apr 30, 2026
- Medium4.8wget2 accepts a server certificate with incorrect Key Usage (KU) or Extended Key Usage (EKU).EPSS 0.2%Apr 29, 2026
- High7.8An issue in the TVicPort64.sys component of EnTech Taiwan TVicPort Product v4.0, File v5.2.1.0 allows attackers to escalate privileges via sending crafted IOCTL 0x8000…EPSS 0.1%Apr 29, 2026
- Low3.1Insufficient validation of untrusted input.EPSS 0.2%Apr 28, 2026
- High8.3Insufficient validation of untrusted input in Feedback in Google Chrome prior to 147.0.7727.138 allowed a remote attacker who had compromised the renderer process to p…EPSS 0.3%Apr 28, 2026
- Low1.3A vulnerability was found in Grav CMS up to 1.7.49.5/2.0.0-beta.1.EPSS 0.4%Apr 28, 2026
- Medium6.5NVIDIA Flare SDK contains a vulnerability where an Attacker may cause an Improper Input Validation by path traversing.EPSS 0.4%Apr 28, 2026
- Medium5.3Penetration Testing engineers at Amazon have discovered a flaw where the camera system fails to properly handle data supplied in certain requests, causing a service disruption.EPSS 0.2%Apr 28, 2026
- High7.1Parsing logic flaws cause non-signature data to be misidentified as valid signatures when processing malformed form field hierarchies, leading to invalid memory writes…EPSS 0.2%Apr 27, 2026
- Critical10.0Gemini CLI: Remote Code Execution via workspace trust and tool allowlisting bypassesEPSS 0.2%Apr 24, 2026
- High8.8Improper Input Validation, Improper Control of Generation of Code ('Code Injection') vulnerability in Apache ActiveMQ, Apache ActiveMQ Broker, Apache ActiveMQ All.EPSS 1.1%Apr 24, 2026
- High8.8Improper Input Validation, Improper Control of Generation of Code ('Code Injection') vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ.KEVEPSS 4.1%Apr 24, 2026
- Critical9.8Flowise is a drag & drop user interface to build a customized large language model flow.EPSS 1.2%Apr 23, 2026
- Medium5.3nimiq-blockchain provides persistent block storage for Nimiq's Rust implementation.EPSS 0.4%Apr 22, 2026
- Critical9.6nimiq-block contains block primitives to be used in Nimiq's Rust implementation.EPSS 0.3%Apr 22, 2026
- Medium5.5A logic error in the cut utility of uutils coreutils causes the program to incorrectly interpret the literal two-byte string '' (two single quotes) as an empty delimiter.EPSS 0.2%Apr 22, 2026
- Low3.3A logic error in the env utility of uutils coreutils causes a failure to correctly parse command-line arguments when utilizing the -S (split-string) option.EPSS 0.1%Apr 22, 2026
- Medium5.5An argument parsing error in the kill utility of uutils coreutils incorrectly interprets kill -1 as a request to send the default signal (SIGTERM) to PID -1.EPSS 0.2%Apr 22, 2026
- Medium4.4The comm utility in uutils coreutils incorrectly consumes data from non-regular file inputs before performing comparison operations.EPSS 0.1%Apr 22, 2026
- Medium6.5Insufficient validation of Chrome extension identifiers in Raindrop.io Bookmark Manager Web App 5.6.76.0 allows attackers to obtain sensitive user data via a crafted request.EPSS 0.4%Apr 22, 2026
- Medium6.5Vulnerability in Spring Spring Security.EPSS 0.2%Apr 22, 2026
- High7.2mailcow: dockerized is an open source groupware/email suite based on docker.EPSS 0.4%Apr 21, 2026
- Medium5.3Other issue in the JavaScript Engine component.EPSS 0.3%Apr 21, 2026
- Medium5.3Other issue in the Networking: DNS component.EPSS 0.2%Apr 21, 2026
- High8.2Zervit's portable HTTP/web server is vulnerable to remote DoS attacks when a configuration reset request is made.EPSS 0.3%Apr 21, 2026