Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High8.7Dragonfly through 2.0.2 contains an unbounded memory allocation vulnerability that allows unauthenticated clients to exhaust memory by passing a negative COUNT to HRAN…EPSS 0.5%Oct 15, 2026
- High8.2In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the PostgreSQL message decoder reads the 4-byte message length field f…EPSS 0.3%Oct 15, 2026
- High8.2In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the Vert.x MySQL client (vertx-mysql-client) pre-allocates an array fo…EPSS 0.3%Oct 15, 2026
- High8.2In Eclipse Vert.x versions [4.0.0, 4.5.34] or [5.0.0,5.0.12] or [5.1.0,5.1.9] or [5.2.0, 5.2.0], the binary array decoder in vertx-pg-client (DataTypeCodec.binaryDecod…EPSS 0.3%Oct 15, 2026
- Medium6.8OW2 ASM 3.0 before 9.11 contains an excessive memory allocation vulnerability in Label.addSubroutineRetSuccessors() that fails to enforce the single-RET-per-JSR rule.EPSS 0.2%Oct 14, 2026
- Medium6.8OW2 ASM 5.0 before 9.11 contains an excessive memory allocation vulnerability in ClassReader.readBootstrapMethodsAttribute() that sizes an int array from num_bootstrap…EPSS 0.2%Oct 14, 2026
- Medium6.9Unbounded allocation in decimal Decimal.round/3 driven by the places argument enables DoSEPSS 0.1%Oct 10, 2026
- High7.5music-metadata is a metadata parser for audio and video media files.EPSS 0.3%Oct 8, 2026
- High8.7MOOS-IvP through 24.8.1 contains a denial of service vulnerability in the Demuxer::addMuxPacket() function that trusts the packet count declared in mux headers without validation.EPSS 0.8%Sep 3, 2026
- High8.7MOOS core-moos through 10.4.0 MOOSDB Denial of Service via Unbounded Packet AllocationEPSS 0.8%Sep 3, 2026
- High7.5A flaw was found in Wildfly.EPSS 0.5%Aug 11, 2026
- High7.5Archive::Tar versions before 3.10 for Perl allow memory exhaustion via attacker controlled entry size field in tar header.May 26, 2026
- Medium6.9Notebook Pro 2.0 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the notebook name field.EPSS 0.1%May 25, 2026
- High8.7Nord VPN 6.14.31 contains a denial of service vulnerability that allows unauthenticated attackers to crash the application by submitting an excessively long string in…EPSS 0.4%May 25, 2026
- High7.5Mattermost versions 11.6.x <= 11.6.0, 11.5.x <= 11.5.3, 11.4.x <= 11.4.4, 10.11.x <= 10.11.14 fail to properly validate msgpack-encoded WebSocket frames before memory…May 22, 2026
- High7.5Uncontrolled Memory Allocation vulnerability in Progress Software MOVEit Automation allows Excessive Allocation.May 20, 2026
- High7.5Memory allocation with excessive size value vulnerability in Samsung Open Source Escargot allows Excessive Allocation.May 19, 2026
- Medium6.5Mattermost versions 11.5.x <= 11.5.1, 10.11.x <= 10.11.13, 11.4.x <= 11.4.3 fail to validate 7zip archive structure before processing which allows an authenticated att…EPSS 0.2%May 18, 2026
- High8.7Sticky Notes Widget 3.0.6 contains a denial of service vulnerability that allows attackers to crash the application by pasting excessively long character strings into note fields.EPSS 0.3%May 16, 2026
- High8.7Sticky Notes & Color Widgets 1.4.2 contains a denial of service vulnerability that allows attackers to crash the application by creating notes with excessively long ch…EPSS 0.3%May 16, 2026
- High8.7My Notes Safe 5.3 contains a denial of service vulnerability that allows attackers to crash the application by pasting excessively long character strings into note fields.EPSS 0.3%May 16, 2026
- High8.7Macaron Notes 5.5 contains a denial of service vulnerability that allows attackers to crash the application by creating notes with excessively long character strings.EPSS 0.3%May 16, 2026
- High8.7Color Notes 1.4 contains a denial of service vulnerability that allows attackers to crash the application by pasting excessively long character strings into note fields.EPSS 0.3%May 16, 2026
- High7.5Nerdbank.MessagePack is a NativeAOT-compatible MessagePack serialization library.May 14, 2026
- High7.5Netty is an asynchronous, event-driven network application framework.May 13, 2026
67 records · page 1 of 3
PreviousNext