Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- Unknownphpsysinfo phpsysinfo Exposure of Sensitive Information to an Unauthorized ActorKEVEPSS 5.2%Jul 20, 2026
- High7.5When bsdinstall or bsdconfig are prompted to scan for nearby Wi-Fi networks, they build up a list of network names and use bsddialog(1) to prompt the user to select a network.EPSS 0.3%May 21, 2026
- Medium6.5In the case of the cap_net service, when a key present in the old limit was omitted from the new limit, the missing key was treated as "allow any" instead of being rejected.EPSS 0.3%May 21, 2026
- High8.4ptrace(PT_SC_REMOTE) failed to properly validate parameters for the syscall(2) and __syscall(2) meta-system calls.EPSS 0.2%May 21, 2026
- Medium5.5When a fusefs file system implements extended attributes, the kernel may send a FUSE_LISTXATTR message to the userspace daemon to retrieve the list of extended attribu…EPSS 0.4%May 21, 2026
- High7.8A file descriptor can be closed while a thread is blocked in a poll(2) or select(2) call waiting for that descriptor.EPSS 0.2%May 21, 2026
- High8.8libcasper(3) communicates with helper processes via UNIX domain sockets, and uses the select(2) system call to wait for data to become available.EPSS 0.2%May 21, 2026
- High7.8The setcred(2) system call is only available to privileged users.EPSS 0.2%May 21, 2026
- Medium4.6NLnet Labs Unbound 1.14.0 up to and including version 1.25.0 has a locking inconsistency vulnerability that when certain conditions are met (multi-threaded, RPZ XFR re…EPSS 0.3%May 20, 2026
- Medium6.9NLnet Labs Unbound up to and including version 1.25.0 has a vulnerability when handling replies with very large RRsets that Unbound needs to perform name compression for.EPSS 0.7%May 20, 2026
- Medium5.7NLnet Labs Unbound up to and including version 1.25.0 is vulnerable to poisoning via promiscuous records for the authority section.EPSS 0.3%May 20, 2026
- High8.7NLnet Labs Unbound up to and including version 1.25.0 has a denial of service vulnerability in the DNSSEC validator that can lead to a crash given malicious upstream replies.EPSS 0.7%May 20, 2026
- High8.7NLnet Labs Unbound 1.14.0 up to and including version 1.25.0 has a vulnerability that results in heap overflow when encoding multiple NSID and/or DNS Cookie EDNS and/o…EPSS 0.8%May 20, 2026
- Medium6.9NLnet Labs Unbound up to and including version 1.25.0 has a vulnerability in the DNSSEC validator where the code path to consult the negative cache for DS records does…EPSS 0.4%May 20, 2026
- Medium6.9NLnet Labs Unbound up to and including version 1.25.0 has a vulnerability in the jostle logic that could defeat its purpose and degrade resolution performance.EPSS 0.7%May 20, 2026
- Medium6.6NLnet Labs Unbound up to and including version 1.25.0 is vulnerable to a degradation of service attack related to parsing long lists of incoming EDNS options.EPSS 0.8%May 20, 2026
- Medium6.6NLnet Labs Unbound 1.16.2 up to and including version 1.25.0 has a vulnerability of the 'ghost domain names' family of attacks that could extend the ghost domain windo…EPSS 0.1%May 20, 2026
- Critical9.1NLnet Labs Unbound 1.19.1 up to and including version 1.25.0 has a vulnerability in the DNSSEC validator that enables denial of service and possible remote code execut…EPSS 1.1%May 20, 2026
- Medium4.6NLnet Labs Unbound 1.6.2 up to and including version 1.25.0 has a denial of service vulnerability when compiled with DNSCrypt support ('--enable-dnscrypt').EPSS 0.4%May 20, 2026
- Critical9.1OPNsense is a FreeBSD based firewall and routing platform.EPSS 0.8%May 13, 2026
- Medium6.5OPNsense is a FreeBSD based firewall and routing platform.EPSS 0.4%May 13, 2026
- Critical9.1OPNsense is a FreeBSD based firewall and routing platform.EPSS 0.8%May 13, 2026
- Critical9.1OPNsense is a FreeBSD based firewall and routing platform.EPSS 0.9%May 13, 2026
- High8.1As dhclient is building an environment to pass to dhclient-script, it may need to resize the array of string pointers.EPSS 1.8%Apr 30, 2026
- High7.8When exchanging data over a socket, libnv uses select(2) to wait for data to arrive.EPSS 0.2%Apr 30, 2026