Catalog

Findings

Filter the merged record by severity, source, stack, and weakness type.

SearchSeveritySourceStackWeaknessSort

Known exploited only

Reset

Medium5.3An unbounded resend loop vulnerability exists in the BIND 9 resolver state machine during bad-server handling, enabling a remote unauthenticated attacker to cause seve…CVE-2026-5950 · isc · bind · CVE.org · NIST NVDMay 20, 2026
High7.5Python-Multipart is a streaming multipart parser for Python.CVE-2026-42561 · CVE.org · NIST NVD · PythonMay 13, 2026
Medium4.9A denial of service (DoS) vulnerability in Palo Alto Networks Prisma SD-WAN ION devices enables an unauthenticated attacker in a network adjacent to a Prisma SD-WAN IO…CVE-2026-0243 · paloaltonetworks · prisma sd-wan · CVE.org · NIST NVD · Palo AltoMay 13, 2026
High7.5protobufjs compiles protobuf definitions into JavaScript (JS) functions.CVE-2026-44289 · protobufjs project · protobufjs · CVE.org · NIST NVDMay 13, 2026
High7.5Well-crafted inputs reaching ParseAddress, ParseAddressList, and ParseDate were able to trigger excessive CPU exhaustion and memory allocations.CVE-2026-39820 · golang · go · CVE.org · NIST NVDMay 7, 2026
High7.5Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/netCVE-2026-33814 · golang · go · CVE.org · FIRST EPSS · NIST NVD · GoEPSS 0.8%May 7, 2026
Medium5.3Uncontrolled Recursion vulnerability in Apache Thrift.CVE-2026-41606 · apache · thrift · CVE.org · NIST NVD · ApacheApr 28, 2026
High7.5Forge (also called ) is a native implementation of Transport Layer Security in JavaScript.CVE-2026-33891 · digitalbazaar · forge · CVE.org · NIST NVDMar 27, 2026
High7.5If a BIND resolver is performing DNSSEC validation and encounters a maliciously crafted zone, the resolver may consume excessive CPU.CVE-2026-1519 · isc · bind · CVE.org · NIST NVD · Ubuntu Security Notices · UbuntuMar 25, 2026
Medium6.9Liquid Studio 2.17 contains a denial of service vulnerability that allows local attackers to crash the application by providing malformed input through the keyboard interface.CVE-2019-25624 · pixarra · liquid studio · CVE.org · NIST NVDMar 23, 2026
High7.7Due to an uncontrolled resource consumption (Denial of Service) vulnerability, an authenticated attacker with regular user privileges and network access can repeatedly…CVE-2026-27689 · CVE.org · NIST NVDMar 10, 2026
Medium5.9Issue summary: Checking excessively long invalid RSA public keys may take a long time.CVE-2023-6237 · CVE.org · FIRST EPSS · NIST NVDEPSS 2.3%Apr 25, 2024
Medium5.3Issue summary: Generating excessively long X9.42 DH keys or checking excessively long X9.42 DH keys or parameters may be very slow.CVE-2023-5678 · openssl · openssl · CVE.org · FIRST EPSS · NIST NVD · OpenSSLEPSS 4.5%Nov 6, 2023
Medium5.3Issue summary: Checking excessively long DH keys or parameters may be very slow.CVE-2023-3817 · OpenSSL · OpenSSL · CIRCL Vulnerability Lookup · CVE.org · FIRST EPSS · OpenSSLEPSS 3.0%Jul 31, 2023
Medium5.3Issue summary: Checking excessively long DH keys or parameters may be very slow.CVE-2023-3446 · openssl · openssl · CVE.org · FIRST EPSS · NIST NVD · OpenSSLEPSS 6.5%Jul 19, 2023