Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- Critical9.8A series of Improper Input Validation vulnerabilities could allow a Command Injection by a malicious actor with access to the UniFi Play network.EPSS 1.1%Apr 13, 2026
- Medium5.3The bson_validate function may return early on specific inputs and incorrectly report success.EPSS 0.3%Apr 13, 2026
- Medium5.7Out-of-bounds write vulnerability in the kernel module.EPSS 0.1%Apr 13, 2026
- Medium6.5Microsoft SharePoint Server Improper Input Validation VulnerabilityKEVEPSS 43.4%Apr 12, 2026
- High7.1Bugsink is a self-hosted error tracking tool.EPSS 0.5%Apr 10, 2026
- High8.7wolfSSL's wc_PKCS7_DecodeAuthEnvelopedData() does not properly sanitize the AES-GCM authentication tag length received and has no lower bounds check.EPSS 0.4%Apr 10, 2026
- High7.1An Improper Input Validation vulnerability in Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, adjacent attacker, sending a specific genuine B…EPSS 0.3%Apr 9, 2026
- Medium5.3Improper Input Validation vulnerability in Apache Tomcat due to an incomplete fix of CVE-2025-66614.EPSS 0.6%Apr 9, 2026
- Medium6.5Rapid7 Velociraptor versions prior to 0.76.2 contain an improper input validation vulnerability in the client monitoring message handler on the Velociraptor server (pr…EPSS 0.6%Apr 9, 2026
- Critical9.1In Canonical LXD before 6.8, the backup import path validates project restrictions against backup/index.yaml in the supplied tar archive but creates the instance from…EPSS 0.7%Apr 9, 2026
- Medium6.5Insufficient validation of untrusted input in WebSockets in Google Chrome prior to 147.0.7727.55 allowed a remote attacker who had compromised the renderer process to…EPSS 0.3%Apr 8, 2026
- High8.1Insufficient validation of untrusted input in WebML in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to perform an out of bounds memory write via a cr…EPSS 0.3%Apr 8, 2026
- Medium4.3Insufficient validation of untrusted input in Downloads in Google Chrome on Windows prior to 147.0.7727.55 allowed a remote attacker to bypass download restrictions vi…EPSS 0.2%Apr 8, 2026
- Medium6.5Insufficient validation of untrusted input in WebML in Google Chrome on Windows prior to 147.0.7727.55 allowed a remote attacker to obtain potentially sensitive inform…EPSS 0.3%Apr 8, 2026
- High8.8Insufficient validation of untrusted input in Media in Google Chrome prior to 147.0.7727.55 allowed a remote attacker who had compromised the renderer process to execu…EPSS 0.4%Apr 8, 2026
- High8.8Insufficient validation of untrusted input in ANGLE in Google Chrome on Mac prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code inside a sandbox…EPSS 0.3%Apr 8, 2026
- Medium4.8Hono is a Web application framework that provides support for any JavaScript runtime.EPSS 0.3%Apr 8, 2026
- High8.8Apache ActiveMQ Improper Input Validation VulnerabilityKEVEPSS 15.5%Apr 7, 2026
- High7.5An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem (Exynos 980, 850, 990, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2500, 1…EPSS 0.4%Apr 6, 2026
- Medium5.5In importWrappedKey of KMKeymasterApplet.java, there is a possible way access keys that should be restricted due to improper input validation.EPSS 0.1%Apr 6, 2026
- High7.5An issue was discovered in RRC in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, 990, 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400, 1580, 2…EPSS 0.3%Apr 6, 2026
- Low2.1A vulnerability was found in pytries datrie up to 0.8.3.Apr 6, 2026
- High7.5OpenAirInterface V2.2.0 AMF crashes when it receives an NGAP message with invalid procedure code or invalid PDU-type.EPSS 0.5%Apr 6, 2026
- Medium6.9A weakness has been identified in FedML-AI FedML up to 0.8.9.Apr 5, 2026
- High7.5Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS.EPSS 0.3%Apr 4, 2026